last executing test programs:

3.250765316s ago: executing program 2 (id=3933):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)=ANY=[])
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x27, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfc1}, @map_fd={0x18, 0x9}, @generic={0x2, 0x5, 0x6, 0x81, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @generic={0x6, 0x6, 0xb, 0x5, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000400)='GPL\x00', 0xffffffff, 0x3c, &(0x7f0000000500)=""/60, 0x40f00, 0xb, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x2, 0x8001, 0x8}, 0x10, 0xb33c, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000005c0)=[{0x4, 0x4, 0xd}, {0x0, 0x5, 0x2, 0x9}, {0x4, 0x3, 0x4, 0xc}], 0x10, 0x8000}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, r2, 0x2, 0x1, 0x3}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r6}, 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200e682bd0e31d7005c00001800085464db07e4ffff7f000095", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.044029931s ago: executing program 4 (id=3936):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.857252643s ago: executing program 2 (id=3939):
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xffffffffffffffff}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r0=>0x0, 0xa7, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x26, 0x0, 0x0, 0x10000}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r7 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$kcm(r7, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f00000003c0)="ea3f", 0xffe0}], 0x1}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8, r5}, 0xc)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

2.557256002s ago: executing program 4 (id=3940):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
socket$kcm(0x1e, 0x1, 0x0)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r3)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41)

2.547179304s ago: executing program 3 (id=3950):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.980601999s ago: executing program 3 (id=3942):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xc6d6, 0xc522, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
getpid() (async)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af365310012c008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x80) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.895856233s ago: executing program 1 (id=3943):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000003940)=""/4092, 0xffc}, {&(0x7f0000001940)=""/19, 0x13}, {&(0x7f0000001a00)=""/206, 0xce}], 0x3, 0x0, 0xc3ff}, 0x2)

1.85291145s ago: executing program 4 (id=3944):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10008a, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
gettid()
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000)=r4, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8919, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x18}, 0xc)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x24001, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xc0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

1.711683434s ago: executing program 3 (id=3946):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000400003100000000ff00100004000000988e490482e49805a70cc4a58ea2354d6303d2d163d3609ecdc0682e0c1388e0863a7b894db56b88f361a503d559772b72086619bc799852c7ae33137f0bbf96a6c690ebfb52a6b5d774a5cd147a20c36556c9e81a6c186cb25ede46033c03be5527e2934e70eb629357aa8aa08459fd5466d008cfad93a1cebf266d6c7051f83f96d0c622c9a6df8461f040d088426c807ae1df32ac80589d5a19a94a6f7e35228864909ddc8ce04eda2974531901dd3446ce9bda45ded119f71f902524a4414be1d69f1cd5c926d766324c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x4}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000ffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000851000000600ed1c18100000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000c7030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x61, &(0x7f00000005c0)=""/97, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x8, 0x4, 0x7fff}, 0x10, 0x1489e, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r2, r1, r2, r2], &(0x7f0000000700)=[{0x0, 0x5, 0x10}, {0x4, 0x4, 0xa, 0xa}, {0x3, 0x5, 0xf, 0x7}, {0x3, 0x2, 0x9, 0x9}], 0x10, 0x29e}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000500)=r8, 0x4)
sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4)
setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0)

1.710430554s ago: executing program 2 (id=3947):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="02000000000000000000000000000000000000009a6e000e637fa3bef14ee457aca636852633ff8bea6a9740221bf15272f4169f1820e5b82f64c0a4f10671bf4c1b23f7a76bffed67b015c6352e2563ec5d95288cf9efffb097b4827dc1d270dd1c39b18bbb871b1bb874bdac639d36d5e27827", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000100"/28], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0x0, 0x3, 0x10}, 0xc)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x4010}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0x0, 0x8, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0x0, &(0x7f00000003c0), &(0x7f0000000540)='GPL\x00', 0x0, 0x2a, &(0x7f0000000580)=""/42, 0x40f00, 0x54, '\x00', 0x0, @fallback=0xdd7e3e8134bca18a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000fc0)=[{0x3, 0x3, 0x3, 0x2}, {0x0, 0x5, 0xf, 0x2}, {0x1, 0x2, 0x3, 0x9}], 0x10, 0x101}, 0x94)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f00000002c0), 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba10a0004000200142603600e1208001e0003070401a9000600200e02400400027c035c0461c1d67f6f94007134cf6efb80dd9f07a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace8116666562e0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x500, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4040)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x18}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c9", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5411, &(0x7f00000000c0))
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x25, &(0x7f0000000400)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d0020bd983247f03151ca60bc24eab556a71a251e6182949a3651f60a84c9f4d49309000000a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)

1.543922492s ago: executing program 1 (id=3948):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8377, 0x0, @perf_config_ext={0x4, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x400, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r2], 0x12)

1.516277917s ago: executing program 0 (id=3949):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x18, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x100, 0x1000, &(0x7f0000001400)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x5, 0xc, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002500)=[{0x2, 0x5, 0x7, 0x8}, {0x0, 0x1, 0xe, 0x7}, {0x5, 0x4, 0x4, 0x6}], 0x10, 0x7fffffff}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x100, 0x0, 0x8000, 0x2a452}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.215644197s ago: executing program 0 (id=3951):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x9, 0x0, 0x5, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0]}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f00000001c0), 0x4)

1.067821201s ago: executing program 0 (id=3952):
r0 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ade9f789e7f3b81f3c001ac004000202080026000a0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c902", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb9, 0x0, 0x0, 0xfe, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0xfffffffffffffffa}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x3, 0x0, 0x8000, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="82eb00000919c0ff000063e348069d2546563956400004000000950000000000000071ed7191998297a364e24c58e462ad8fe087eb422b1b71bb11e203b833e69f2eea3259003cd5fa88fdf6659398f9ea307d65c85bc46315dba880dcad1f9f7e0b5b37a1369b3af19613ead6026df8fff03622bc3c797ff99ff82fafc17c301650b0"], &(0x7f0000000440)='GPL\x00', 0x0, 0x1, &(0x7f0000000500)=""/1, 0x1f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xc, 0x800, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000005c0)=[{0x5, 0x4, 0x5, 0x6}, {0x4, 0x5, 0x10, 0x2}, {0x0, 0x4, 0x2, 0xb}, {0x5, 0x1, 0x9, 0x3}], 0x10, 0x567b}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0), 0x0, 0x39, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xfa, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x13d000, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440fd)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x80fe, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x4, &(0x7f0000000100)=[{0x45, 0x0, 0x3, 0xfffffffe}, {0x1}, {0x20, 0x0, 0xc2, 0x2}, {0x6, 0x8, 0x0, 0x10001}]})

1.045218745s ago: executing program 3 (id=3953):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

977.889617ms ago: executing program 4 (id=3954):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x77e31259}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
socket$kcm(0x2, 0x3, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe16}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x0, 0x1, 0x1, 0x4, 0x8, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400}, @call={0x85, 0x0, 0x0, 0x75}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}], &(0x7f0000000700)='GPL\x00', 0x7b6a, 0x27, &(0x7f0000000740)=""/39, 0x40f00, 0x2, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000780)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x3, 0x9, 0x12}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r1, r1, r1, r1], 0x0, 0x10, 0x48d}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000280), 0x8, 0x50, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0xfffffff8, 0x0, 0x40020, 0x1, 0x7, '\x00', r5, r3, 0x2, 0x0, 0x5, 0xa}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="d80000001c0081044e81f782db44b9040900000020000300041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fac95667e0060000000000000053fa9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00000000000000c2e9d1ee", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

976.179047ms ago: executing program 2 (id=3964):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000400003100000000ff00100004000000988e490482e49805a70cc4a58ea2354d6303d2d163d3609ecdc0682e0c1388e0863a7b894db56b88f361a503d559772b72086619bc799852c7ae33137f0bbf96a6c690ebfb52a6b5d774a5cd147a20c36556c9e81a6c186cb25ede46033c03be5527e2934e70eb629357aa8aa08459fd5466d008cfad93a1cebf266d6c7051f83f96d0c622c9a6df8461f040d088426c807ae1df32ac80589d5a19a94a6f7e35228864909ddc8ce04eda2974531901dd3446ce9bda45ded119f71f902524a4414be1d69f1cd5c926d766324c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x4}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000ffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000851000000600ed1c18100000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000c7030000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x7ff, 0x61, &(0x7f00000005c0)=""/97, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x8, 0x4, 0x7fff}, 0x10, 0x1489e, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r2, r1, r2, r2], &(0x7f0000000700)=[{0x0, 0x5, 0x10}, {0x4, 0x4, 0xa, 0xa}, {0x3, 0x5, 0xf, 0x7}, {0x3, 0x2, 0x9, 0x9}], 0x10, 0x29e}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x26e1, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000500)=r8, 0x4)
sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4)
setsockopt$sock_attach_bpf(r9, 0x1, 0x19, 0x0, 0x0)

907.940798ms ago: executing program 1 (id=3955):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7bfa3390}, 0x105620, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x1}, 0x0, 0xffefffffffffffff, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad", @ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013900000000009500000000000000ebfbad3f0c4953260cdf35fd70ed47332920667acb285d1367e2a83bfd3b4e34f0cd5eb07ddb8f7707735bdbf16918aa55a241e6cdd111c189067667fe76ceee4928f2c0700e7192f162376ffa83c3342623f2d78735a656ad", @ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
unlink(0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x300) (async)
r2 = socket$kcm(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
socket$kcm(0x10, 0x2, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010) (async)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)

642.579693ms ago: executing program 0 (id=3956):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000580)=""/233, 0x0, 0x11}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x7}, 0x10c002, 0xac5d, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x7, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002002)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x3405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x400000000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000008c0)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x18, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffff9d)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000c80)='syzkaller\x00'}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008afea650540c305d0000850002000000000000000000bb1b00009500000000000000e3a9652696da7f94c5912543f25d30fe0265dec43d8b22dc9cf8580e565d1b54c891d879de60dc2a3cea6018450fb905afc8b7d853458197a455619fe3eb645e382cdc5bfd26807fd6ba6752175b990d9e8b68b8e54b2398988dbcfeb368"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0xdd, &(0x7f0000000100)="b9ff033168440372b8a8163ed4004d5613fdbe33", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]})
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90824fc60", 0x14}], 0x1}, 0x0)
recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180))
close(r2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000008000000060000000000000c03000000000000000004000201000000000000000200000d00000800090000000300000007000000040000000000000000005f00"], 0x0, 0x54}, 0x28)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))

398.392694ms ago: executing program 4 (id=3957):
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000000540)=""/127, 0x7f}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x40)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
gettid()
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz0\x00', 0x200002, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
close(r3)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040040)
perf_event_open$cgroup(&(0x7f00000012c0)={0x2, 0x80, 0xc2, 0xeb, 0x3, 0xaa, 0x0, 0x8eac, 0x1001c, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0x8000000000}, 0x0, 0x4, 0x2, 0x3, 0xffff, 0x84, 0x180, 0x0, 0x103be2ff, 0x0, 0x1ff}, r2, 0x6, r1, 0x10)
perf_event_open(0x0, 0x0, 0x8, r1, 0x9)
socketpair(0x28, 0x2, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0x3d, 0x7, 0x0, 0x7fffffff, 0x9d6d1, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xe}, 0x800, 0x401, 0x7, 0x1, 0x5, 0x4, 0x5, 0x0, 0x4000000, 0x0, 0x80000001}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000880)=ANY=[], 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000005c0))
ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)

352.509231ms ago: executing program 1 (id=3958):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f080102200e000000000000000300000000000000000000002e"], 0x0, 0x3a}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0], 0x0, 0x64}, 0x28)

351.975841ms ago: executing program 3 (id=3959):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x9, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x6a)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2)
syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

258.935177ms ago: executing program 2 (id=3960):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

164.164563ms ago: executing program 1 (id=3961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

163.368653ms ago: executing program 0 (id=3962):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x9, 0x0, 0x5, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0]}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x9, &(0x7f00000001c0), 0x4)

55.737241ms ago: executing program 4 (id=3963):
r0 = socket$kcm(0x2, 0x1, 0x84) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x10, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x2) (async)
socketpair(0x25, 0x6, 0x1, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}) (async)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async)
r4 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0)
recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) (async)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) (async)
socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async, rerun: 64)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x9, 0x12) (rerun: 64)
close(0xffffffffffffffff) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={<r6=>r2}) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
write$cgroup_int(r7, 0x0, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000240)={r6})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0)

44.403893ms ago: executing program 3 (id=3965):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x80000)
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x48a, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r3 = getpid()
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x1c, 0x4, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xb, 0xc272}, 0x10e242, 0xac5d, 0xfffffffd, 0x3, 0x0, 0x2000000, 0x9, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000d0000000000000004006112a0000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000200)="aa19edf244a2bacd1c04d370333506fee4406a2d4b8948792d555050deba21a09822906c5ff61ada3f7aecd01f19178dd9d8ef5389a39855e9e882aab88bfc352941f3f2e9e3b3d0711fbd527dbc002feac53c4c95a18e5c612ac14f6d660a5b0818d4b5b5ad48bd0c221712531ef694ef8d54dfd7c32c0c073371e69fc2853dea8b5bbd221b70", 0x87}, {&(0x7f0000000500)="2dbeddb0a303735bd765ebcbc8d93ad8dd8761a6963c8c205813c6de43aa87def13306fe15d3c54f3cbd8e99ab6666f73f0a0395fa96c32ee60a0ee14c74572d1978f7c29b08513be74353e931c4246c69029b619800faa575b44f0182337cbaab0d72c77f65b313d892df4bc7d5ae99796dcd9d2aba5bedc857d96d1805102e1c98fc115ba524207452483772c25b70a1c5bff397a4e4636a27b7419f5b359c3c", 0xa1}], 0x2}, 0xc845)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000002200"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, 0x0}, 0x20)

729.59µs ago: executing program 0 (id=3966):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8377, 0x0, @perf_config_ext={0x4, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x400, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r2], 0x12)

352.03µs ago: executing program 1 (id=3967):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000a000000080000000000000700000000080000000000000e01000000000000000000005f5f005f002e"], &(0x7f0000000000)=""/143, 0x3e, 0x8f, 0x1}, 0x28)
socket$kcm(0xa, 0x922000000003, 0x11)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003940)=""/4092, 0xffc}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000001a00)=""/198, 0xc6}], 0x3}, 0x40000002)

0s ago: executing program 2 (id=3968):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000003600000000000000b30000080000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xed, &(0x7f0000000140)=""/237, 0x40f00}, 0x94)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x76, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x2ac, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0xfffffe08, {0xa, 0x4e21, 0x0, @mcast2}}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc)
setsockopt$sock_attach_bpf(r3, 0x29, 0x2f, &(0x7f0000000100), 0x120)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061040000000000009532000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRESDEC=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

ed state
[  556.111264][T13369] bridge0: port 3(hsr0) entered blocking state
[  556.119598][T13369] bridge0: port 3(hsr0) entered forwarding state
[  556.215173][T13301] team0: Port device team_slave_0 added
[  556.262692][T13301] team0: Port device team_slave_1 added
[  556.386833][ T7330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.399654][ T4276] Bluetooth: hci4: command 0x040f tx timeout
[  556.621859][ T7330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.744083][T13301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.773167][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.876173][T13301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.921114][T13402] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2997'.
[  556.992438][T13398] netlink: 'syz.4.2997': attribute type 1 has an invalid length.
[  557.036081][T13301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.049983][T13400] netlink: 'syz.0.2999': attribute type 3 has an invalid length.
[  557.061443][T13301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.091291][T13400] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2999'.
[  557.142108][T13301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.199929][ T7330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.405237][ T7330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  557.469752][T13301] device hsr_slave_0 entered promiscuous mode
[  557.477254][T13301] device hsr_slave_1 entered promiscuous mode
[  557.488774][T13301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  557.504152][T13301] Cannot create hsr debugfs directory
[  557.541932][T13414] tap0: tun_chr_ioctl cmd 1074025677
[  557.562049][T13414] tap0: linktype set to 773
[  557.732505][T13418] netlink: 'syz.0.3003': attribute type 2 has an invalid length.
[  557.760514][T13418] netlink: 'syz.0.3003': attribute type 8 has an invalid length.
[  557.768433][T13418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3003'.
[  557.806943][T13422] FAULT_INJECTION: forcing a failure.
[  557.806943][T13422] name failslab, interval 1, probability 0, space 0, times 0
[  557.841313][T13422] CPU: 1 PID: 13422 Comm: syz.1.3005 Not tainted syzkaller #0
[  557.848932][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  557.859229][T13422] Call Trace:
[  557.862580][T13422]  <TASK>
[  557.865555][T13422]  dump_stack_lvl+0x188/0x24e
[  557.870341][T13422]  ? show_regs_print_info+0x12/0x12
[  557.875702][T13422]  ? load_image+0x400/0x400
[  557.880272][T13422]  ? __might_sleep+0xd0/0xd0
[  557.884935][T13422]  ? __lock_acquire+0x7d10/0x7d10
[  557.890037][T13422]  ? aa_file_perm+0x3ea/0xf00
[  557.894815][T13422]  should_fail_ex+0x399/0x4d0
[  557.899567][T13422]  should_failslab+0x5/0x20
[  557.904125][T13422]  slab_pre_alloc_hook+0x59/0x310
[  557.909210][T13422]  ? kernfs_fop_write_iter+0x155/0x520
[  557.914827][T13422]  __kmem_cache_alloc_node+0x4f/0x260
[  557.920278][T13422]  ? kernfs_fop_write_iter+0x155/0x520
[  557.925851][T13422]  __kmalloc+0xa0/0x240
[  557.930151][T13422]  kernfs_fop_write_iter+0x155/0x520
[  557.935568][T13422]  vfs_write+0x4b1/0xa30
[  557.939864][T13422]  ? file_end_write+0x250/0x250
[  557.944773][T13422]  ? __fget_files+0x43d/0x4b0
[  557.949675][T13422]  ? __fdget_pos+0x2ae/0x360
[  557.954326][T13422]  ? ksys_write+0x71/0x250
[  557.958836][T13422]  ksys_write+0x14c/0x250
[  557.963231][T13422]  ? __ia32_sys_read+0x80/0x80
[  557.968047][T13422]  ? lockdep_hardirqs_on+0x94/0x140
[  557.973309][T13422]  do_syscall_64+0x4c/0xa0
[  557.977947][T13422]  ? clear_bhb_loop+0x60/0xb0
[  557.982748][T13422]  ? clear_bhb_loop+0x60/0xb0
[  557.987472][T13422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.993419][T13422] RIP: 0033:0x7f584cf9c819
[  557.997870][T13422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.017609][T13422] RSP: 002b:00007f584de4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  558.026175][T13422] RAX: ffffffffffffffda RBX: 00007f584d215fa0 RCX: 00007f584cf9c819
[  558.034215][T13422] RDX: 0000000000000009 RSI: 00002000000023c0 RDI: 0000000000000004
[  558.042229][T13422] RBP: 00007f584de4c090 R08: 0000000000000000 R09: 0000000000000000
[  558.050319][T13422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.058409][T13422] R13: 00007f584d216038 R14: 00007f584d215fa0 R15: 00007ffd27cff998
[  558.066519][T13422]  </TASK>
[  558.411169][ T7330] tipc: Left network mode
[  558.469637][ T4276] Bluetooth: hci4: command 0x0419 tx timeout
[  558.658222][T13437] netlink: 'syz.1.3008': attribute type 46 has an invalid length.
[  558.676728][T13437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3008'.
[  559.001873][T13450] netlink: 'syz.0.3012': attribute type 3 has an invalid length.
[  559.028543][T13450] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3012'.
[  559.065717][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3010'.
[  559.090659][T13448] device macsec0 entered promiscuous mode
[  559.110849][T13452] device veth1_macvtap left promiscuous mode
[  560.275458][T13301] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  560.341838][T13301] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  560.388534][T13301] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  560.557125][T13301] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  561.851932][T13301] 8021q: adding VLAN 0 to HW filter on device bond0
[  561.990898][T13509] netlink: 'syz.2.3024': attribute type 3 has an invalid length.
[  562.035857][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  562.048227][T13509] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3024'.
[  562.080320][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  562.128806][T13301] 8021q: adding VLAN 0 to HW filter on device team0
[  562.182257][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  562.235962][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  562.271796][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.279017][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  562.308756][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  562.394627][T13525] netlink: 'syz.0.3027': attribute type 9 has an invalid length.
[  562.479404][T13525] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3027'.
[  563.136036][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  563.155734][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  563.176428][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.183715][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.246301][ T7335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  563.358639][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  563.365080][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  563.416877][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  563.451977][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  563.502857][T13534] FAULT_INJECTION: forcing a failure.
[  563.502857][T13534] name failslab, interval 1, probability 0, space 0, times 0
[  563.539385][T13534] CPU: 1 PID: 13534 Comm: syz.0.3029 Not tainted syzkaller #0
[  563.547036][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  563.549878][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  563.557131][T13534] Call Trace:
[  563.557151][T13534]  <TASK>
[  563.557162][T13534]  dump_stack_lvl+0x188/0x24e
[  563.576199][T13534]  ? show_regs_print_info+0x12/0x12
[  563.581485][T13534]  ? load_image+0x400/0x400
[  563.586067][T13534]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  563.592127][T13534]  should_fail_ex+0x399/0x4d0
[  563.596947][T13534]  should_failslab+0x5/0x20
[  563.601498][T13534]  slab_pre_alloc_hook+0x59/0x310
[  563.606635][T13534]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  563.613211][T13534]  kmem_cache_alloc+0x56/0x2f0
[  563.618020][T13534]  ? skb_clone+0x1e7/0x370
[  563.622500][T13534]  skb_clone+0x1e7/0x370
[  563.626792][T13534]  bpf_clone_redirect+0x163/0x4a0
[  563.631850][T13534]  ? ktime_get+0x247/0x270
[  563.636315][T13534]  bpf_prog_9228d3efff95bbb5+0x19/0x1d
[  563.641832][T13534]  bpf_test_run+0x2b6/0x830
[  563.646384][T13534]  ? convert___skb_to_skb+0x580/0x580
[  563.651794][T13534]  ? eth_get_headlen+0x200/0x200
[  563.656763][T13534]  ? __build_skb+0x257/0x3c0
[  563.661394][T13534]  ? convert___skb_to_skb+0x3d/0x580
[  563.666828][T13534]  bpf_prog_test_run_skb+0xaa6/0x12a0
[  563.672695][T13534]  ? cpu_online+0xa0/0xa0
[  563.677071][T13534]  bpf_prog_test_run+0x31e/0x390
[  563.682362][T13534]  __sys_bpf+0x62b/0x780
[  563.686665][T13534]  ? bpf_link_show_fdinfo+0x380/0x380
[  563.692106][T13534]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  563.698705][T13534]  __x64_sys_bpf+0x78/0x90
[  563.703251][T13534]  do_syscall_64+0x4c/0xa0
[  563.707731][T13534]  ? clear_bhb_loop+0x60/0xb0
[  563.712480][T13534]  ? clear_bhb_loop+0x60/0xb0
[  563.717392][T13534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  563.723323][T13534] RIP: 0033:0x7fed7639c819
[  563.727780][T13534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.747423][T13534] RSP: 002b:00007fed7732b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  563.755957][T13534] RAX: ffffffffffffffda RBX: 00007fed76615fa0 RCX: 00007fed7639c819
[  563.763975][T13534] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  563.771976][T13534] RBP: 00007fed7732b090 R08: 0000000000000000 R09: 0000000000000000
[  563.779978][T13534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.787990][T13534] R13: 00007fed76616038 R14: 00007fed76615fa0 R15: 00007ffdfe7956c8
[  563.796128][T13534]  </TASK>
[  566.531570][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  566.559689][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  566.587181][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  566.616095][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  566.635427][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  566.653724][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  566.667177][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  566.707056][T13301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  567.889012][T13573] netlink: 'syz.2.3037': attribute type 3 has an invalid length.
[  567.917828][T13573] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3037'.
[  568.025791][T13575] netlink: 'syz.4.3039': attribute type 3 has an invalid length.
[  568.085343][T13575] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3039'.
[  568.207871][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  568.257061][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  568.306467][T13301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.434997][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  568.461170][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  568.608075][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  568.637575][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  568.679053][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  568.706505][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  569.064287][T13301] device veth0_vlan entered promiscuous mode
[  569.077088][T13602] netlink: 'syz.1.3047': attribute type 2 has an invalid length.
[  569.134155][T13602] netlink: 'syz.1.3047': attribute type 8 has an invalid length.
[  569.158758][T13602] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3047'.
[  569.243153][T13301] device veth1_vlan entered promiscuous mode
[  569.381560][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  569.398118][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  569.435192][T13301] device veth0_macvtap entered promiscuous mode
[  569.542507][T13301] device veth1_macvtap entered promiscuous mode
[  569.599704][T13607] netlink: 'syz.4.3049': attribute type 10 has an invalid length.
[  569.632673][T13607] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3049'.
[  569.703641][T13607] device hsr0 entered promiscuous mode
[  569.804144][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  569.833446][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  569.955718][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.980779][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.005158][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.031119][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.056438][T13301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.111737][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  570.174997][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  570.209659][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.259404][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.294804][T13301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.339352][T13301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.361622][T13301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.470934][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  570.503587][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  570.574946][T13634] netlink: 'syz.2.3055': attribute type 3 has an invalid length.
[  570.608765][T13301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.634171][T13634] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3055'.
[  570.652401][T13301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.689422][T13301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.698226][T13301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.935942][ T7330] team0: Port device wlan1 removed
[  570.984153][T13645] netlink: 'syz.4.3058': attribute type 10 has an invalid length.
[  571.005416][T13645] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3058'.
[  571.227441][ T7350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  571.254502][ T7350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.292436][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  571.334345][T13649] netlink: 'syz.0.3061': attribute type 12 has an invalid length.
[  571.375605][T13649] netlink: 'syz.0.3061': attribute type 15 has an invalid length.
[  571.385982][ T7330] device veth0_to_team left promiscuous mode
[  571.394414][ T7330] Ÿë
: port 1(veth0_to_team) entered disabled state
[  571.404908][ T7330] bridge0: port 3(bond0) entered disabled state
[  571.413379][ T7330] device bridge_slave_1 left promiscuous mode
[  571.420208][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.431378][ T7330] device bridge_slave_0 left promiscuous mode
[  571.437860][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.086451][ T7330] team0 (unregistering): Port device team_slave_1 removed
[  572.153526][ T7330] team0 (unregistering): Port device C removed
[  572.246254][ T7330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.261790][ T7330] device bond_slave_1 left promiscuous mode
[  572.743024][ T7330] bond0 (unregistering): Released all slaves
[  572.889063][ T7350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.907384][ T7350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.936977][ T7344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  573.197843][T13677] FAULT_INJECTION: forcing a failure.
[  573.197843][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.214306][T13677] CPU: 1 PID: 13677 Comm: syz.4.3067 Not tainted syzkaller #0
[  573.221852][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  573.231959][T13677] Call Trace:
[  573.235369][T13677]  <TASK>
[  573.238779][T13677]  dump_stack_lvl+0x188/0x24e
[  573.243524][T13677]  ? show_regs_print_info+0x12/0x12
[  573.248790][T13677]  ? load_image+0x400/0x400
[  573.253404][T13677]  ? __lock_acquire+0x7d10/0x7d10
[  573.258498][T13677]  should_fail_ex+0x399/0x4d0
[  573.263234][T13677]  _copy_from_user+0x2c/0x170
[  573.267979][T13677]  __sys_bpf+0x2ea/0x780
[  573.272288][T13677]  ? bpf_link_show_fdinfo+0x380/0x380
[  573.277733][T13677]  ? lock_chain_count+0x20/0x20
[  573.282654][T13677]  __x64_sys_bpf+0x78/0x90
[  573.287139][T13677]  do_syscall_64+0x4c/0xa0
[  573.291626][T13677]  ? clear_bhb_loop+0x60/0xb0
[  573.296369][T13677]  ? clear_bhb_loop+0x60/0xb0
[  573.301116][T13677]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  573.307069][T13677] RIP: 0033:0x7ff2a0b9c819
[  573.311606][T13677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.331284][T13677] RSP: 002b:00007ff2a19b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  573.339782][T13677] RAX: ffffffffffffffda RBX: 00007ff2a0e15fa0 RCX: 00007ff2a0b9c819
[  573.347913][T13677] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a
[  573.355952][T13677] RBP: 00007ff2a19b2090 R08: 0000000000000000 R09: 0000000000000000
[  573.364073][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  573.372100][T13677] R13: 00007ff2a0e16038 R14: 00007ff2a0e15fa0 R15: 00007fff33a0f298
[  573.380150][T13677]  </TASK>
[  573.687601][T13681] netlink: 'syz.1.3068': attribute type 2 has an invalid length.
[  573.749504][T13681] netlink: 'syz.1.3068': attribute type 8 has an invalid length.
[  573.758120][T13681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3068'.
[  573.939026][T13687] netlink: 'syz.2.3072': attribute type 3 has an invalid length.
[  573.981147][T13687] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3072'.
[  574.401662][T13695] netlink: 'syz.3.3074': attribute type 2 has an invalid length.
[  574.428679][T13695] device 0 entered promiscuous mode
[  575.151858][ T4286] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  575.163643][ T4286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  575.172163][ T4286] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  575.187794][ T4286] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  575.200874][ T4286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  575.208596][ T4286] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  575.527493][T13714] FAULT_INJECTION: forcing a failure.
[  575.527493][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  575.548141][T13714] CPU: 1 PID: 13714 Comm: syz.2.3079 Not tainted syzkaller #0
[  575.555701][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  575.565902][T13714] Call Trace:
[  575.569226][T13714]  <TASK>
[  575.572202][T13714]  dump_stack_lvl+0x188/0x24e
[  575.576948][T13714]  ? show_regs_print_info+0x12/0x12
[  575.582202][T13714]  ? load_image+0x400/0x400
[  575.586747][T13714]  ? __lock_acquire+0x7d10/0x7d10
[  575.592155][T13714]  ? __virt_addr_valid+0x188/0x540
[  575.597309][T13714]  should_fail_ex+0x399/0x4d0
[  575.602035][T13714]  _copy_from_user+0x2c/0x170
[  575.606747][T13714]  bpf_test_init+0xde/0x140
[  575.611285][T13714]  bpf_prog_test_run_xdp+0x484/0xf10
[  575.616618][T13714]  ? dev_put+0x80/0x80
[  575.620741][T13714]  ? dev_put+0x80/0x80
[  575.624852][T13714]  bpf_prog_test_run+0x31e/0x390
[  575.629933][T13714]  __sys_bpf+0x62b/0x780
[  575.634209][T13714]  ? bpf_link_show_fdinfo+0x380/0x380
[  575.639632][T13714]  ? lock_chain_count+0x20/0x20
[  575.644543][T13714]  __x64_sys_bpf+0x78/0x90
[  575.649021][T13714]  do_syscall_64+0x4c/0xa0
[  575.653476][T13714]  ? clear_bhb_loop+0x60/0xb0
[  575.658192][T13714]  ? clear_bhb_loop+0x60/0xb0
[  575.662913][T13714]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  575.668839][T13714] RIP: 0033:0x7f925119c819
[  575.673285][T13714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.693016][T13714] RSP: 002b:00007f925214c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  575.701459][T13714] RAX: ffffffffffffffda RBX: 00007f9251415fa0 RCX: 00007f925119c819
[  575.709457][T13714] RDX: 000000000000004c RSI: 0000200000000440 RDI: 000000000000000a
[  575.717458][T13714] RBP: 00007f925214c090 R08: 0000000000000000 R09: 0000000000000000
[  575.725460][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.733462][T13714] R13: 00007f9251416038 R14: 00007f9251415fa0 R15: 00007fff9ddf5a68
[  575.741489][T13714]  </TASK>
[  575.887599][ T7335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.055587][T13722] netlink: 'syz.3.3080': attribute type 11 has an invalid length.
[  576.104408][T13722] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3080'.
[  576.159492][ T7335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.563299][T13720] netlink: 'syz.3.3080': attribute type 10 has an invalid length.
[  577.256962][T13720] team0 (unregistering): Port device team_slave_0 removed
[  577.280855][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[  577.300177][T13738] netlink: 'syz.2.3085': attribute type 3 has an invalid length.
[  577.314964][T13720] team0 (unregistering): Port device team_slave_1 removed
[  577.322770][T13738] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3085'.
[  577.354714][T13729] netlink: 'syz.0.3083': attribute type 21 has an invalid length.
[  577.434185][ T7335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.713463][T13746] FAULT_INJECTION: forcing a failure.
[  577.713463][T13746] name failslab, interval 1, probability 0, space 0, times 0
[  577.728853][ T7335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.744267][T13746] CPU: 0 PID: 13746 Comm: syz.0.3087 Not tainted syzkaller #0
[  577.751804][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  577.761909][T13746] Call Trace:
[  577.765237][T13746]  <TASK>
[  577.768211][T13746]  dump_stack_lvl+0x188/0x24e
[  577.773137][T13746]  ? show_regs_print_info+0x12/0x12
[  577.778402][T13746]  ? load_image+0x400/0x400
[  577.782962][T13746]  ? __lock_acquire+0x7d10/0x7d10
[  577.788056][T13746]  should_fail_ex+0x399/0x4d0
[  577.792878][T13746]  should_failslab+0x5/0x20
[  577.797433][T13746]  slab_pre_alloc_hook+0x59/0x310
[  577.802558][T13746]  kmem_cache_alloc_lru+0x49/0x2e0
[  577.807716][T13746]  ? __d_alloc+0x31/0x700
[  577.812091][T13746]  ? alloc_fd+0x58f/0x630
[  577.816482][T13746]  __d_alloc+0x31/0x700
[  577.820683][T13746]  ? do_raw_spin_lock+0x128/0x2f0
[  577.825773][T13746]  d_alloc_pseudo+0x19/0x70
[  577.828170][T13705] chnl_net:caif_netlink_parms(): no params data found
[  577.830303][T13746]  alloc_file_pseudo+0xe0/0x200
[  577.830337][T13746]  ? alloc_empty_file_noaccount+0x80/0x80
[  577.847754][T13746]  ? alloc_fd+0x58f/0x630
[  577.852158][T13746]  anon_inode_getfd+0xc6/0x1c0
[  577.856999][T13746]  btf_new_fd+0x5f1/0x780
[  577.861412][T13746]  __sys_bpf+0x612/0x780
[  577.865743][T13746]  ? bpf_link_show_fdinfo+0x380/0x380
[  577.871335][T13746]  ? lock_chain_count+0x20/0x20
[  577.876265][T13746]  __x64_sys_bpf+0x78/0x90
[  577.880746][T13746]  do_syscall_64+0x4c/0xa0
[  577.885240][T13746]  ? clear_bhb_loop+0x60/0xb0
[  577.890002][T13746]  ? clear_bhb_loop+0x60/0xb0
[  577.894833][T13746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  577.900783][T13746] RIP: 0033:0x7fed7639c819
[  577.905237][T13746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.924999][T13746] RSP: 002b:00007fed7732b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  577.933481][T13746] RAX: ffffffffffffffda RBX: 00007fed76615fa0 RCX: 00007fed7639c819
[  577.941507][T13746] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  577.949707][T13746] RBP: 00007fed7732b090 R08: 0000000000000000 R09: 0000000000000000
[  577.958000][T13746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  577.966030][T13746] R13: 00007fed76616038 R14: 00007fed76615fa0 R15: 00007ffdfe7956c8
[  577.974167][T13746]  </TASK>
[  578.185041][T13754] netlink: 'syz.3.3090': attribute type 10 has an invalid length.
[  578.309745][T13754] device veth1_macvtap left promiscuous mode
[  578.655217][T13756] netlink: 'syz.2.3089': attribute type 10 has an invalid length.
[  578.695228][T13756] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3089'.
[  579.332736][T13705] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.350161][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[  579.491479][T13705] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.550585][T13705] device bridge_slave_0 entered promiscuous mode
[  579.592845][T13771] netlink: 'syz.0.3093': attribute type 3 has an invalid length.
[  579.597738][T13705] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.643938][T13705] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.670120][T13771] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  579.690913][T13705] device bridge_slave_1 entered promiscuous mode
[  579.739571][T13771] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3093'.
[  579.819621][ T7335] tipc: Left network mode
[  579.878048][T13705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.912443][T13777] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3095'.
[  579.955491][T13705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.593633][T13705] team0: Port device team_slave_0 added
[  580.613129][T13792] netlink: 'syz.3.3098': attribute type 3 has an invalid length.
[  580.672084][T13792] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3098'.
[  580.822844][T13705] team0: Port device team_slave_1 added
[  581.380327][T13705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.399365][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.403987][T13813] netlink: 'syz.2.3102': attribute type 16 has an invalid length.
[  581.436241][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[  581.486450][T13813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3102'.
[  581.526769][T13705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.545078][T13815] netlink: 'syz.3.3103': attribute type 2 has an invalid length.
[  581.643715][T13705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.664383][T13705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.754319][T13705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.793238][T13813] netlink: 'syz.2.3102': attribute type 10 has an invalid length.
[  582.100855][T13813] team0: Port device macvlan0 added
[  582.126468][T13815] device 1 entered promiscuous mode
[  582.408808][T13705] device hsr_slave_0 entered promiscuous mode
[  582.492347][T13705] device hsr_slave_1 entered promiscuous mode
[  583.104112][T13705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  583.112567][T13705] Cannot create hsr debugfs directory
[  583.509631][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  583.785613][T13843] netlink: 'syz.0.3109': attribute type 21 has an invalid length.
[  583.984914][T13850] netlink: 'syz.1.3112': attribute type 3 has an invalid length.
[  584.034881][T13850] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3112'.
[  584.475645][T13868] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3117'.
[  584.521501][ T4286] Bluetooth: hci3: ISO packet for unknown connection handle 2
[  586.589054][T13705] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  586.664281][T13705] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  586.699886][T13705] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  586.830331][T13705] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  587.317241][T13705] 8021q: adding VLAN 0 to HW filter on device bond0
[  587.421969][T13931] netlink: 'syz.3.3131': attribute type 1 has an invalid length.
[  587.432283][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  587.460238][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  587.481698][T13705] 8021q: adding VLAN 0 to HW filter on device team0
[  587.510792][T13929] netlink: 'syz.1.3130': attribute type 10 has an invalid length.
[  587.515423][T13931] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3131'.
[  587.521203][T13929] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3130'.
[  587.559025][T13929] device batadv_slave_1 entered promiscuous mode
[  587.577867][T13929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.599088][T13929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  587.699775][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  587.709064][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  587.770279][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.777521][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.799983][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  587.819719][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  587.839909][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.847206][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.871139][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  587.948299][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  587.984343][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  587.996213][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  588.032146][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  588.072735][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  588.115365][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  588.136288][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  588.210608][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  588.841644][T13705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  588.891376][T13705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  588.926240][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  588.950252][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  588.986579][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  592.675611][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  592.692598][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  592.769533][T13705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.016202][T14013] netlink: 'syz.0.3146': attribute type 29 has an invalid length.
[  593.868401][T14013] netlink: 'syz.0.3146': attribute type 29 has an invalid length.
[  593.899619][T14027] device syzkaller0 entered promiscuous mode
[  594.309771][T14048] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  594.349584][T14048] device syzkaller0 entered promiscuous mode
[  594.413757][ T7335] device hsr_slave_0 left promiscuous mode
[  594.451278][ T7335] device hsr_slave_1 left promiscuous mode
[  594.520224][ T7335] device veth1_macvtap left promiscuous mode
[  594.540265][ T7335] device veth1_vlan left promiscuous mode
[  594.569038][ T7335] device veth0_vlan left promiscuous mode
[  597.866969][ T7335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  597.946538][ T7335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  598.655523][ T7335] bond0 (unregistering): Released all slaves
[  598.839781][T14088] netlink: 'syz.1.3158': attribute type 10 has an invalid length.
[  598.847704][T14088] team0: Device vxcan1 is up. Set it down before adding it as a team port
[  598.941981][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  598.985010][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  599.029921][T13705] device veth0_vlan entered promiscuous mode
[  599.085091][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  599.120346][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  599.150765][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  599.173631][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  599.215074][T13705] device veth1_vlan entered promiscuous mode
[  599.751042][T14117] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.3166'.
[  599.792204][T14123] netlink: 'syz.3.3166': attribute type 10 has an invalid length.
[  601.144131][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  601.153800][ T7342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  601.287631][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  601.347450][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  601.392538][T13705] device veth0_macvtap entered promiscuous mode
[  601.471324][T13705] device veth1_macvtap entered promiscuous mode
[  601.551770][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.606514][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.616528][T14141] netlink: 'syz.0.3173': attribute type 3 has an invalid length.
[  601.616555][T14141] netlink: 'syz.0.3173': attribute type 1 has an invalid length.
[  601.646682][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.657415][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.671620][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  601.682229][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.707551][T13705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.739480][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  601.748177][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  601.828375][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  601.848846][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  601.884143][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.910761][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  601.938894][T13705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  601.987690][T13705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.013193][T13705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.052330][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  602.092399][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  602.158874][T13705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.188397][T13705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.209105][T13705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.228725][T13705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  602.348745][T14152] netlink: 'syz.2.3178': attribute type 10 has an invalid length.
[  602.400055][T14152] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3178'.
[  603.638363][T14168] device lo entered promiscuous mode
[  603.782659][ T7340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.806228][ T7340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.053354][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  605.434939][ T5341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.447084][ T5341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.457708][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  605.865546][T14202] netlink: 'syz.2.3188': attribute type 22 has an invalid length.
[  605.911754][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'.
[  606.161931][T14205] netlink: 'syz.1.3191': attribute type 10 has an invalid length.
[  606.189442][T14205] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3191'.
[  606.198699][T14205] device hsr0 entered promiscuous mode
[  606.269660][T14205] bridge0: port 3(hsr0) entered blocking state
[  606.366184][T14205] bridge0: port 3(hsr0) entered disabled state
[  606.414068][T14205] bridge0: port 3(hsr0) entered blocking state
[  606.420545][T14205] bridge0: port 3(hsr0) entered forwarding state
[  606.534936][T14213] netlink: 'syz.2.3193': attribute type 39 has an invalid length.
[  607.168035][T14215] FAULT_INJECTION: forcing a failure.
[  607.168035][T14215] name failslab, interval 1, probability 0, space 0, times 0
[  607.209396][T14215] CPU: 1 PID: 14215 Comm: syz.3.3195 Not tainted syzkaller #0
[  607.216989][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  607.227131][T14215] Call Trace:
[  607.230495][T14215]  <TASK>
[  607.233490][T14215]  dump_stack_lvl+0x188/0x24e
[  607.238269][T14215]  ? show_regs_print_info+0x12/0x12
[  607.243559][T14215]  ? load_image+0x400/0x400
[  607.248264][T14215]  should_fail_ex+0x399/0x4d0
[  607.253047][T14215]  should_failslab+0x5/0x20
[  607.257626][T14215]  slab_pre_alloc_hook+0x59/0x310
[  607.262778][T14215]  kmem_cache_alloc+0x56/0x2f0
[  607.267681][T14215]  ? skb_clone+0x1e7/0x370
[  607.272200][T14215]  skb_clone+0x1e7/0x370
[  607.276536][T14215]  bpf_clone_redirect+0x163/0x4a0
[  607.281717][T14215]  bpf_prog_6893982b85ceadf7+0x56/0x5b
[  607.287355][T14215]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  607.293557][T14215]  ? lock_chain_count+0x20/0x20
[  607.298530][T14215]  ? seqcount_lockdep_reader_access+0x127/0x1d0
[  607.304865][T14215]  ? lockdep_hardirqs_on+0x94/0x140
[  607.310142][T14215]  ? ktime_get+0x7b/0x270
[  607.314529][T14215]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  607.320924][T14215]  ? ktime_get_real_ts64+0x440/0x440
[  607.326282][T14215]  ? read_lock_is_recursive+0x10/0x10
[  607.331731][T14215]  ? __cant_sleep+0x220/0x220
[  607.336562][T14215]  ? bpf_test_timer_continue+0x142/0x380
[  607.342258][T14215]  bpf_test_run+0x2b6/0x830
[  607.346920][T14215]  ? convert___skb_to_skb+0x580/0x580
[  607.352393][T14215]  ? eth_get_headlen+0x200/0x200
[  607.357407][T14215]  ? __build_skb+0x257/0x3c0
[  607.362071][T14215]  ? convert___skb_to_skb+0x3d/0x580
[  607.367431][T14215]  bpf_prog_test_run_skb+0xaa6/0x12a0
[  607.372906][T14215]  ? cpu_online+0xa0/0xa0
[  607.377294][T14215]  bpf_prog_test_run+0x31e/0x390
[  607.382303][T14215]  __sys_bpf+0x62b/0x780
[  607.386614][T14215]  ? bpf_link_show_fdinfo+0x380/0x380
[  607.392099][T14215]  ? lock_chain_count+0x20/0x20
[  607.397030][T14215]  __x64_sys_bpf+0x78/0x90
[  607.401511][T14215]  do_syscall_64+0x4c/0xa0
[  607.406072][T14215]  ? clear_bhb_loop+0x60/0xb0
[  607.410800][T14215]  ? clear_bhb_loop+0x60/0xb0
[  607.415534][T14215]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  607.421480][T14215] RIP: 0033:0x7f610039c819
[  607.425949][T14215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.445603][T14215] RSP: 002b:00007f61012da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  607.454609][T14215] RAX: ffffffffffffffda RBX: 00007f6100615fa0 RCX: 00007f610039c819
[  607.462645][T14215] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  607.470673][T14215] RBP: 00007f61012da090 R08: 0000000000000000 R09: 0000000000000000
[  607.478691][T14215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  607.486702][T14215] R13: 00007f6100616038 R14: 00007f6100615fa0 R15: 00007ffe58af8f28
[  607.494761][T14215]  </TASK>
[  607.668021][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  607.678801][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  607.688769][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  607.697159][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  607.706408][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  607.714026][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  608.684264][ T4286] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  608.752062][T14220] chnl_net:caif_netlink_parms(): no params data found
[  608.966025][T14220] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.000795][T14220] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.016555][T14220] device bridge_slave_0 entered promiscuous mode
[  609.028180][T14220] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.087637][T14220] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.105552][T14220] device bridge_slave_1 entered promiscuous mode
[  609.247455][T14244] netlink: 'syz.2.3204': attribute type 10 has an invalid length.
[  609.264836][T14244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3204'.
[  609.386231][T14244] bridge0: port 4(ipvlan1) entered blocking state
[  609.414651][T14244] bridge0: port 4(ipvlan1) entered disabled state
[  609.524426][T14244] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  609.625682][T14220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  609.688066][T14220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  609.713016][T14252] netlink: 'syz.4.3206': attribute type 10 has an invalid length.
[  609.723188][T14252] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3206'.
[  609.733926][T14252] device hsr0 entered promiscuous mode
[  609.740132][T14252] bridge0: port 3(hsr0) entered blocking state
[  609.747017][T14252] bridge0: port 3(hsr0) entered disabled state
[  609.759564][ T4286] Bluetooth: hci0: command 0x0409 tx timeout
[  609.800589][T14252] bridge0: port 3(hsr0) entered blocking state
[  609.806936][T14252] bridge0: port 3(hsr0) entered forwarding state
[  609.894111][T14220] team0: Port device team_slave_0 added
[  609.947005][T14220] team0: Port device team_slave_1 added
[  609.998069][T14220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.040264][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.135098][T14220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.162700][T14220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.174817][T14220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.211806][T14220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.352789][T14220] device hsr_slave_0 entered promiscuous mode
[  610.411173][T14220] device hsr_slave_1 entered promiscuous mode
[  610.458146][T14220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  610.493438][T14220] Cannot create hsr debugfs directory
[  610.499461][T14265] netlink: 'syz.1.3213': attribute type 10 has an invalid length.
[  610.530570][T14265] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3213'.
[  610.844191][ T4286] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  611.829537][ T4286] Bluetooth: hci0: command 0x041b tx timeout
[  612.143319][T14290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3221'.
[  612.176693][T14288] netlink: 'syz.3.3220': attribute type 10 has an invalid length.
[  612.221410][T14288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3220'.
[  612.305488][T14288] bridge0: port 3(ipvlan1) entered blocking state
[  612.322652][T14288] bridge0: port 3(ipvlan1) entered disabled state
[  612.407588][T14288] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  612.918881][T14308] netlink: 'syz.2.3226': attribute type 10 has an invalid length.
[  612.993469][T14308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3226'.
[  613.438188][T14220] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  613.804202][T14220] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  613.814387][T14341] FAULT_INJECTION: forcing a failure.
[  613.814387][T14341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  613.846708][T14220] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  613.869941][T14341] CPU: 1 PID: 14341 Comm: syz.1.3235 Not tainted syzkaller #0
[  613.877499][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  613.887715][T14341] Call Trace:
[  613.891131][T14341]  <TASK>
[  613.894105][T14341]  dump_stack_lvl+0x188/0x24e
[  613.898854][T14341]  ? show_regs_print_info+0x12/0x12
[  613.904118][T14341]  ? load_image+0x400/0x400
[  613.908771][T14341]  ? __lock_acquire+0x7d10/0x7d10
[  613.913861][T14341]  should_fail_ex+0x399/0x4d0
[  613.918589][T14341]  _copy_from_user+0x2c/0x170
[  613.923334][T14341]  __sys_bpf+0x2ea/0x780
[  613.927652][T14341]  ? bpf_link_show_fdinfo+0x380/0x380
[  613.933111][T14341]  ? lock_chain_count+0x20/0x20
[  613.938030][T14341]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  613.944082][T14341]  __x64_sys_bpf+0x78/0x90
[  613.948565][T14341]  do_syscall_64+0x4c/0xa0
[  613.953047][T14341]  ? clear_bhb_loop+0x60/0xb0
[  613.957880][T14341]  ? clear_bhb_loop+0x60/0xb0
[  613.962631][T14341]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.968599][T14341] RIP: 0033:0x7f584cf9c819
[  613.973094][T14341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.992940][T14341] RSP: 002b:00007f584de4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.001398][T14341] RAX: ffffffffffffffda RBX: 00007f584d215fa0 RCX: 00007f584cf9c819
[  614.009424][T14341] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005
[  614.017716][T14341] RBP: 00007f584de4c090 R08: 0000000000000000 R09: 0000000000000000
[  614.025748][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.033764][T14341] R13: 00007f584d216038 R14: 00007f584d215fa0 R15: 00007ffd27cff998
[  614.041790][T14341]  </TASK>
[  614.060012][ T4286] Bluetooth: hci0: command 0x040f tx timeout
[  614.077113][T14328] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3233'.
[  614.133241][T14337] device wg2 entered promiscuous mode
[  614.144924][T14220] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  614.337663][T14220] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.391471][T14346] netlink: 'syz.1.3236': attribute type 11 has an invalid length.
[  614.429830][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  614.458003][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  614.495172][T14220] 8021q: adding VLAN 0 to HW filter on device team0
[  614.535585][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  614.578563][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  614.620942][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.628211][ T7350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.681320][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  614.736210][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  614.756671][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  614.796065][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.803317][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.844289][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  614.878656][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  614.901642][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  614.938569][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  614.989139][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  615.026398][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  615.058402][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  615.113970][T14220] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  615.166086][T14220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  615.244742][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  615.271777][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  615.296892][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  615.331162][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  615.374468][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  615.815758][T14368] netlink: 'syz.2.3243': attribute type 10 has an invalid length.
[  615.835520][T14368] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3243'.
[  615.944284][T14370] netlink: 'syz.1.3244': attribute type 10 has an invalid length.
[  615.974530][T14370] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3244'.
[  616.069583][ T4276] Bluetooth: hci0: command 0x0419 tx timeout
[  616.195703][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  616.214055][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  616.230140][T14220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  616.304179][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  616.315883][ T7334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  616.388363][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  616.412516][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  616.431959][T14220] device veth0_vlan entered promiscuous mode
[  616.441492][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  616.456791][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  616.511859][T14220] device veth1_vlan entered promiscuous mode
[  616.617386][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  616.633973][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  616.653868][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  616.668859][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  616.692424][T14220] device veth0_macvtap entered promiscuous mode
[  616.720604][T14220] device veth1_macvtap entered promiscuous mode
[  616.765616][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.802546][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.893860][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  616.950192][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.984912][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.012297][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.047520][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  617.058796][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.081590][T14220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.110805][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  617.133368][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  617.153672][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  617.180857][ T7340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  617.215496][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.226984][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.238909][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.257409][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.274916][T14220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  617.297788][T14220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  617.322249][T14220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.369055][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  617.384026][ T5341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  617.453003][T14220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.466409][T14220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.475356][T14220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.500965][T14220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.584590][T14399] netlink: 'syz.4.3254': attribute type 10 has an invalid length.
[  617.615272][T14399] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3254'.
[  617.765624][ T7340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.797722][ T7340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.891307][ T7330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  618.004176][ T7350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.024392][ T7350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.037158][ T7350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  618.069113][T14410] netlink: 'syz.1.3255': attribute type 10 has an invalid length.
[  618.098257][T14410] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3255'.
[  618.206798][T14408] FAULT_INJECTION: forcing a failure.
[  618.206798][T14408] name failslab, interval 1, probability 0, space 0, times 0
[  618.299656][T14408] CPU: 1 PID: 14408 Comm: syz.4.3257 Not tainted syzkaller #0
[  618.307215][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  618.317337][T14408] Call Trace:
[  618.320672][T14408]  <TASK>
[  618.323651][T14408]  dump_stack_lvl+0x188/0x24e
[  618.328416][T14408]  ? show_regs_print_info+0x12/0x12
[  618.333696][T14408]  ? load_image+0x400/0x400
[  618.338263][T14408]  ? __lock_acquire+0x7d10/0x7d10
[  618.343476][T14408]  should_fail_ex+0x399/0x4d0
[  618.348221][T14408]  should_failslab+0x5/0x20
[  618.352774][T14408]  slab_pre_alloc_hook+0x59/0x310
[  618.357870][T14408]  ? verify_lock_unused+0x140/0x140
[  618.363138][T14408]  ? bpf_test_init+0x9f/0x140
[  618.367896][T14408]  __kmem_cache_alloc_node+0x4f/0x260
[  618.373334][T14408]  ? bpf_test_init+0x9f/0x140
[  618.378066][T14408]  __kmalloc+0xa0/0x240
[  618.382299][T14408]  bpf_test_init+0x9f/0x140
[  618.386962][T14408]  bpf_prog_test_run_xdp+0x484/0xf10
[  618.392436][T14408]  ? dev_put+0x80/0x80
[  618.396597][T14408]  ? dev_put+0x80/0x80
[  618.400809][T14408]  bpf_prog_test_run+0x31e/0x390
[  618.405828][T14408]  __sys_bpf+0x62b/0x780
[  618.410246][T14408]  ? bpf_link_show_fdinfo+0x380/0x380
[  618.415730][T14408]  ? lock_chain_count+0x20/0x20
[  618.420699][T14408]  __x64_sys_bpf+0x78/0x90
[  618.425195][T14408]  do_syscall_64+0x4c/0xa0
[  618.429775][T14408]  ? clear_bhb_loop+0x60/0xb0
[  618.434522][T14408]  ? clear_bhb_loop+0x60/0xb0
[  618.439274][T14408]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  618.445229][T14408] RIP: 0033:0x7ff97639c819
[  618.449692][T14408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  618.469383][T14408] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  618.477956][T14408] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  618.485990][T14408] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a
[  618.494111][T14408] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  618.502146][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  618.510180][T14408] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  618.518327][T14408]  </TASK>
[  618.679177][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'.
[  618.712605][T14420] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3190'.
[  618.835445][T14420] netlink: 17331 bytes leftover after parsing attributes in process `syz.0.3190'.
[  619.353406][ T4286] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  619.362426][ T4286] Bluetooth: hci3: Injecting HCI hardware error event
[  619.374359][ T4276] Bluetooth: hci3: hardware error 0x00
[  620.211712][T14445] netlink: 'syz.4.3268': attribute type 10 has an invalid length.
[  620.240715][T14445] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3268'.
[  620.983118][T14462] FAULT_INJECTION: forcing a failure.
[  620.983118][T14462] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  621.011575][T14462] CPU: 1 PID: 14462 Comm: syz.1.3273 Not tainted syzkaller #0
[  621.019130][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  621.029243][T14462] Call Trace:
[  621.032594][T14462]  <TASK>
[  621.035594][T14462]  dump_stack_lvl+0x188/0x24e
[  621.040357][T14462]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  621.046585][T14462]  ? show_regs_print_info+0x12/0x12
[  621.051853][T14462]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  621.058091][T14462]  should_fail_ex+0x399/0x4d0
[  621.062822][T14462]  copyin+0x1b/0x120
[  621.066756][T14462]  _copy_from_iter+0x447/0x1130
[  621.071663][T14462]  ? copyout_mc+0x110/0x110
[  621.076213][T14462]  ? __virt_addr_valid+0x188/0x540
[  621.081372][T14462]  ? __virt_addr_valid+0x188/0x540
[  621.086541][T14462]  ? __virt_addr_valid+0x465/0x540
[  621.091738][T14462]  ? __check_object_size+0x500/0xa40
[  621.097091][T14462]  netlink_sendmsg+0x755/0xbd0
[  621.101953][T14462]  ? netlink_getsockopt+0x550/0x550
[  621.107230][T14462]  ? aa_sock_msg_perm+0x94/0x150
[  621.112234][T14462]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  621.117571][T14462]  ? security_socket_sendmsg+0x7c/0xa0
[  621.123193][T14462]  ? netlink_getsockopt+0x550/0x550
[  621.128454][T14462]  ____sys_sendmsg+0x5be/0x970
[  621.133471][T14462]  ? __sys_sendmsg_sock+0x30/0x30
[  621.138554][T14462]  ? __import_iovec+0x315/0x500
[  621.143471][T14462]  ? import_iovec+0x6f/0xa0
[  621.148051][T14462]  ___sys_sendmsg+0x2a2/0x360
[  621.152794][T14462]  ? __sys_sendmsg+0x290/0x290
[  621.157745][T14462]  __se_sys_sendmsg+0x1bb/0x2a0
[  621.162654][T14462]  ? __x64_sys_sendmsg+0x80/0x80
[  621.167690][T14462]  do_syscall_64+0x4c/0xa0
[  621.172160][T14462]  ? clear_bhb_loop+0x60/0xb0
[  621.176878][T14462]  ? clear_bhb_loop+0x60/0xb0
[  621.181626][T14462]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  621.187603][T14462] RIP: 0033:0x7f584cf9c819
[  621.192104][T14462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.211925][T14462] RSP: 002b:00007f584de4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  621.220376][T14462] RAX: ffffffffffffffda RBX: 00007f584d215fa0 RCX: 00007f584cf9c819
[  621.228402][T14462] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  621.236528][T14462] RBP: 00007f584de4c090 R08: 0000000000000000 R09: 0000000000000000
[  621.244629][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.252639][T14462] R13: 00007f584d216038 R14: 00007f584d215fa0 R15: 00007ffd27cff998
[  621.260711][T14462]  </TASK>
[  621.349807][ T4286] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  621.358852][ T4286] Bluetooth: hci1: Injecting HCI hardware error event
[  621.371451][ T4286] Bluetooth: hci1: hardware error 0x00
[  621.429629][ T4276] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  622.465112][T14481] netlink: 'syz.4.3281': attribute type 10 has an invalid length.
[  622.501838][T14481] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3281'.
[  622.623876][T14484] netlink: 'syz.3.3280': attribute type 10 has an invalid length.
[  623.430407][ T4286] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  623.513130][T14504] netlink: 'syz.4.3288': attribute type 3 has an invalid length.
[  623.537613][T14504] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3288'.
[  623.600399][T14502] netlink: 'syz.4.3288': attribute type 3 has an invalid length.
[  623.660441][T14502] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3288'.
[  624.107156][ T4286] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  624.114950][T14510] netlink: 'syz.1.3291': attribute type 3 has an invalid length.
[  624.144300][T14510] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3291'.
[  625.070148][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  625.076706][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  625.114751][T14530] netlink: 'syz.1.3295': attribute type 10 has an invalid length.
[  625.145595][T14530] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3295'.
[  625.171020][ T5341] device 0 left promiscuous mode
[  625.335780][T14533] netlink: 'syz.0.3297': attribute type 3 has an invalid length.
[  625.365536][T14533] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3297'.
[  625.924541][T14547] netlink: 'syz.1.3303': attribute type 7 has an invalid length.
[  626.293110][T14547] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3303'.
[  626.433276][T14555] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3306'.
[  627.249946][T14555] team0: Port device team_slave_0 removed
[  627.256644][T14555] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  627.452841][T14569] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3309'.
[  627.479456][T14573] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3311'.
[  627.829064][T14580] FAULT_INJECTION: forcing a failure.
[  627.829064][T14580] name failslab, interval 1, probability 0, space 0, times 0
[  627.930815][T14580] CPU: 0 PID: 14580 Comm: syz.4.3312 Not tainted syzkaller #0
[  627.938416][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  627.948732][T14580] Call Trace:
[  627.952087][T14580]  <TASK>
[  627.955082][T14580]  dump_stack_lvl+0x188/0x24e
[  627.959900][T14580]  ? show_regs_print_info+0x12/0x12
[  627.965197][T14580]  ? load_image+0x400/0x400
[  627.969894][T14580]  ? __might_sleep+0xd0/0xd0
[  627.974566][T14580]  ? __lock_acquire+0x7d10/0x7d10
[  627.979696][T14580]  should_fail_ex+0x399/0x4d0
[  627.984478][T14580]  should_failslab+0x5/0x20
[  627.989155][T14580]  slab_pre_alloc_hook+0x59/0x310
[  627.994275][T14580]  ? __get_vm_area_node+0x122/0x330
[  627.999565][T14580]  __kmem_cache_alloc_node+0x4f/0x260
[  628.005033][T14580]  ? __get_vm_area_node+0x122/0x330
[  628.010312][T14580]  kmalloc_node_trace+0x22/0xe0
[  628.015355][T14580]  __get_vm_area_node+0x122/0x330
[  628.020463][T14580]  ? __local_bh_enable_ip+0x136/0x1c0
[  628.025950][T14580]  __vmalloc_node_range+0x357/0x13b0
[  628.031315][T14580]  ? netlink_sendmsg+0x5ec/0xbd0
[  628.036327][T14580]  ? netlink_insert+0x1034/0x13c0
[  628.041461][T14580]  ? free_vm_area+0x50/0x50
[  628.046038][T14580]  ? netlink_sendmsg+0x5ec/0xbd0
[  628.051116][T14580]  vmalloc+0x75/0x80
[  628.055148][T14580]  ? netlink_sendmsg+0x5ec/0xbd0
[  628.060144][T14580]  netlink_sendmsg+0x5ec/0xbd0
[  628.065164][T14580]  ? netlink_getsockopt+0x550/0x550
[  628.070419][T14580]  ? aa_file_perm+0x3ea/0xf00
[  628.075186][T14580]  ? aa_file_perm+0x112/0xf00
[  628.080440][T14580]  ? aa_sock_msg_perm+0x94/0x150
[  628.085457][T14580]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  628.090824][T14580]  ? security_socket_sendmsg+0x7c/0xa0
[  628.096385][T14580]  sock_write_iter+0x2d9/0x3e0
[  628.101395][T14580]  ? sock_read_iter+0x3a0/0x3a0
[  628.106411][T14580]  ? common_file_perm+0x171/0x1c0
[  628.111508][T14580]  vfs_write+0x4b1/0xa30
[  628.115828][T14580]  ? file_end_write+0x250/0x250
[  628.120753][T14580]  ? __fget_files+0x43d/0x4b0
[  628.125506][T14580]  ? __fdget_pos+0x1d4/0x360
[  628.130144][T14580]  ? ksys_write+0x71/0x250
[  628.134634][T14580]  ksys_write+0x14c/0x250
[  628.139027][T14580]  ? __ia32_sys_read+0x80/0x80
[  628.143945][T14580]  ? lockdep_hardirqs_on+0x94/0x140
[  628.149234][T14580]  do_syscall_64+0x4c/0xa0
[  628.153768][T14580]  ? clear_bhb_loop+0x60/0xb0
[  628.158521][T14580]  ? clear_bhb_loop+0x60/0xb0
[  628.163265][T14580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.169221][T14580] RIP: 0033:0x7ff97639c819
[  628.173699][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.193453][T14580] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  628.202039][T14580] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  628.210154][T14580] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004
[  628.218192][T14580] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  628.226354][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.234591][T14580] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  628.242660][T14580]  </TASK>
[  628.429713][T14580] syz.4.3312: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[  628.649574][T14580] CPU: 1 PID: 14580 Comm: syz.4.3312 Not tainted syzkaller #0
[  628.657166][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  628.667486][T14580] Call Trace:
[  628.670856][T14580]  <TASK>
[  628.673875][T14580]  dump_stack_lvl+0x188/0x24e
[  628.678651][T14580]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  628.685155][T14580]  ? show_regs_print_info+0x12/0x12
[  628.690449][T14580]  ? load_image+0x400/0x400
[  628.695052][T14580]  ? cpuset_print_current_mems_allowed+0x1b/0x360
[  628.701565][T14580]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  628.708177][T14580]  warn_alloc+0x242/0x330
[  628.712606][T14580]  ? __get_vm_area_node+0x122/0x330
[  628.717914][T14580]  ? zone_watermark_ok_safe+0x270/0x270
[  628.723551][T14580]  ? rcu_is_watching+0x11/0xa0
[  628.728427][T14580]  ? __get_vm_area_node+0x318/0x330
[  628.733716][T14580]  ? __local_bh_enable_ip+0x136/0x1c0
[  628.739273][T14580]  __vmalloc_node_range+0x37c/0x13b0
[  628.744757][T14580]  ? netlink_insert+0x1034/0x13c0
[  628.749953][T14580]  ? free_vm_area+0x50/0x50
[  628.754575][T14580]  ? netlink_sendmsg+0x5ec/0xbd0
[  628.759603][T14580]  vmalloc+0x75/0x80
[  628.763586][T14580]  ? netlink_sendmsg+0x5ec/0xbd0
[  628.768613][T14580]  netlink_sendmsg+0x5ec/0xbd0
[  628.773507][T14580]  ? netlink_getsockopt+0x550/0x550
[  628.778799][T14580]  ? aa_file_perm+0x3ea/0xf00
[  628.783575][T14580]  ? aa_file_perm+0x112/0xf00
[  628.788322][T14580]  ? aa_sock_msg_perm+0x94/0x150
[  628.793374][T14580]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  628.798738][T14580]  ? security_socket_sendmsg+0x7c/0xa0
[  628.804302][T14580]  sock_write_iter+0x2d9/0x3e0
[  628.809158][T14580]  ? sock_read_iter+0x3a0/0x3a0
[  628.814131][T14580]  ? common_file_perm+0x171/0x1c0
[  628.819361][T14580]  vfs_write+0x4b1/0xa30
[  628.823729][T14580]  ? file_end_write+0x250/0x250
[  628.828695][T14580]  ? __fget_files+0x43d/0x4b0
[  628.833493][T14580]  ? __fdget_pos+0x1d4/0x360
[  628.838155][T14580]  ? ksys_write+0x71/0x250
[  628.842686][T14580]  ksys_write+0x14c/0x250
[  628.847110][T14580]  ? __ia32_sys_read+0x80/0x80
[  628.851986][T14580]  ? lockdep_hardirqs_on+0x94/0x140
[  628.857283][T14580]  do_syscall_64+0x4c/0xa0
[  628.861883][T14580]  ? clear_bhb_loop+0x60/0xb0
[  628.866645][T14580]  ? clear_bhb_loop+0x60/0xb0
[  628.871503][T14580]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.877470][T14580] RIP: 0033:0x7ff97639c819
[  628.882006][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.901780][T14580] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  628.910296][T14580] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  628.918384][T14580] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004
[  628.926445][T14580] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  628.934501][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.942551][T14580] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  628.950766][T14580]  </TASK>
[  629.126515][T14588] netlink: 'syz.2.3316': attribute type 3 has an invalid length.
[  629.135102][T14588] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3316'.
[  629.147073][T14580] Mem-Info:
[  629.150786][T14580] active_anon:9694 inactive_anon:0 isolated_anon:0
[  629.150786][T14580]  active_file:21342 inactive_file:40161 isolated_file:0
[  629.150786][T14580]  unevictable:768 dirty:378 writeback:0
[  629.150786][T14580]  slab_reclaimable:21950 slab_unreclaimable:97550
[  629.150786][T14580]  mapped:30977 shmem:1361 pagetables:646
[  629.150786][T14580]  sec_pagetables:0 bounce:0
[  629.150786][T14580]  kernel_misc_reclaimable:0
[  629.150786][T14580]  free:1307329 free_pcp:12308 free_cma:0
[  629.690274][T14580] Node 0 active_anon:38976kB inactive_anon:0kB active_file:85368kB inactive_file:160444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128304kB dirty:1512kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11216kB pagetables:2560kB sec_pagetables:0kB all_unreclaimable? no
[  630.306897][T14580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  630.396984][T14580] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  630.483554][T14580] lowmem_reserve[]: 0 2527 2528 2528 2528
[  630.522560][T14580] Node 0 DMA32 free:1313284kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38800kB inactive_anon:0kB active_file:85368kB inactive_file:160452kB unevictable:1536kB writepending:1528kB present:3129332kB managed:2592968kB mlocked:0kB bounce:0kB free_pcp:34384kB local_pcp:14104kB free_cma:0kB
[  630.592002][T14580] lowmem_reserve[]: 0 0 1 1 1
[  630.596989][T14580] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  630.626468][T14580] lowmem_reserve[]: 0 0 0 0 0
[  630.639968][T14580] Node 1 Normal free:3899916kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16844kB local_pcp:6248kB free_cma:0kB
[  630.737524][T14580] lowmem_reserve[]: 0 0 0 0 0
[  630.782817][T14580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  630.824784][T14580] Node 0 DMA32: 21*4kB (ME) 1082*8kB (UME) 1206*16kB (UME) 602*32kB (ME) 905*64kB (UME) 886*128kB (UME) 222*256kB (UM) 85*512kB (UME) 31*1024kB (UME) 6*2048kB (UME) 232*4096kB (UM) = 1313284kB
[  630.869762][T14580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  630.937088][T14580] Node 1 Normal: 235*4kB (UE) 50*8kB (UE) 31*16kB (UME) 39*32kB (UME) 22*64kB (UME) 13*128kB (UME) 4*256kB (UM) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3899916kB
[  630.960242][T14580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  630.972588][T14580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  630.982907][T14580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  631.023454][T14580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  631.033719][T14580] 62866 total pagecache pages
[  631.038492][T14580] 0 pages in swap cache
[  631.043478][T14580] Free swap  = 124996kB
[  631.047716][T14580] Total swap = 124996kB
[  631.069416][T14580] 2097051 pages RAM
[  631.073318][T14580] 0 pages HighMem/MovableOnly
[  631.078034][T14580] 415208 pages reserved
[  631.098948][T14580] 0 pages cma reserved
[  631.295956][T14613] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3332'.
[  631.459105][T14615] netlink: 'syz.2.3322': attribute type 3 has an invalid length.
[  631.496223][T14615] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3322'.
[  632.015015][T14613] team0: Port device team_slave_0 removed
[  632.112476][T14613] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  633.541951][T14655] netlink: 'syz.0.3333': attribute type 3 has an invalid length.
[  633.601676][T14655] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3333'.
[  635.936527][T14698] netlink: 'syz.0.3353': attribute type 3 has an invalid length.
[  635.953978][T14697] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3342'.
[  636.007254][T14698] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3353'.
[  636.053222][T14691] netlink: 'syz.3.3341': attribute type 3 has an invalid length.
[  636.105800][T14691] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3341'.
[  636.389061][T14697] team0: Port device team_slave_0 removed
[  636.411634][T14697] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  636.772957][ T5341] device hsr_slave_0 left promiscuous mode
[  636.792674][ T5341] device hsr_slave_1 left promiscuous mode
[  636.865118][ T5341] device bridge_slave_1 left promiscuous mode
[  636.878658][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.913061][ T5341] device bridge_slave_0 left promiscuous mode
[  636.943152][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.219137][ T5341] device veth1_macvtap left promiscuous mode
[  637.522207][T14734] netlink: 'syz.1.3355': attribute type 3 has an invalid length.
[  637.540425][T14734] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.3355'.
[  638.793699][ T5341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  638.845393][ T5341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.129135][ T5341] bond0 (unregistering): Released all slaves
[  639.424359][T14756] netlink: 22 bytes leftover after parsing attributes in process `syz.3.3362'.
[  639.484731][T14756] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3362'.
[  639.516644][T14756] bridge_slave_1: default FDB implementation only supports local addresses
[  639.609900][T14759] netlink: 'syz.0.3360': attribute type 3 has an invalid length.
[  639.627897][T14759] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3360'.
[  641.403426][T14788] netlink: 192956 bytes leftover after parsing attributes in process `syz.2.3372'.
[  641.892458][ T4286] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  643.094826][T14808] netlink: 'syz.1.3377': attribute type 3 has an invalid length.
[  643.120043][T14808] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3377'.
[  644.159419][T14832] FAULT_INJECTION: forcing a failure.
[  644.159419][T14832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  644.176878][T14834] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3386'.
[  644.200064][T14832] CPU: 0 PID: 14832 Comm: syz.2.3385 Not tainted syzkaller #0
[  644.207619][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.217739][T14832] Call Trace:
[  644.221082][T14832]  <TASK>
[  644.224056][T14832]  dump_stack_lvl+0x188/0x24e
[  644.228813][T14832]  ? show_regs_print_info+0x12/0x12
[  644.234175][T14832]  ? load_image+0x400/0x400
[  644.238749][T14832]  ? __lock_acquire+0x7d10/0x7d10
[  644.243843][T14832]  should_fail_ex+0x399/0x4d0
[  644.248579][T14832]  _copy_from_user+0x2c/0x170
[  644.253411][T14832]  __copy_msghdr+0x3b7/0x580
[  644.258076][T14832]  ___sys_sendmsg+0x210/0x360
[  644.262926][T14832]  ? __sys_sendmsg+0x290/0x290
[  644.267776][T14832]  ? __lock_acquire+0x7d10/0x7d10
[  644.272890][T14832]  __se_sys_sendmsg+0x1bb/0x2a0
[  644.277855][T14832]  ? __x64_sys_sendmsg+0x80/0x80
[  644.282972][T14832]  ? lockdep_hardirqs_on+0x94/0x140
[  644.288246][T14832]  do_syscall_64+0x4c/0xa0
[  644.292723][T14832]  ? clear_bhb_loop+0x60/0xb0
[  644.297458][T14832]  ? clear_bhb_loop+0x60/0xb0
[  644.302201][T14832]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.308156][T14832] RIP: 0033:0x7f925119c819
[  644.312619][T14832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.332273][T14832] RSP: 002b:00007f925214c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.340821][T14832] RAX: ffffffffffffffda RBX: 00007f9251415fa0 RCX: 00007f925119c819
[  644.348843][T14832] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000006
[  644.356861][T14832] RBP: 00007f925214c090 R08: 0000000000000000 R09: 0000000000000000
[  644.364901][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.372904][T14832] R13: 00007f9251416038 R14: 00007f9251415fa0 R15: 00007fff9ddf5a68
[  644.380935][T14832]  </TASK>
[  644.423425][T14834] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3386'.
[  644.480418][T14834] bridge_slave_1: default FDB implementation only supports local addresses
[  645.027178][ T4286] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  646.765759][T14869] netlink: 'syz.4.3395': attribute type 3 has an invalid length.
[  646.808616][T14869] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3395'.
[  647.295526][T14885] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3402'.
[  647.394247][T14885] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3402'.
[  647.458109][T14885] bridge_slave_1: default FDB implementation only supports local addresses
[  647.924189][T14899] netlink: 'syz.3.3406': attribute type 15 has an invalid length.
[  647.959319][T14899] netlink: 'syz.3.3406': attribute type 7 has an invalid length.
[  648.517995][ T4286] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  648.728621][T14918] FAULT_INJECTION: forcing a failure.
[  648.728621][T14918] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  648.781752][T14918] CPU: 0 PID: 14918 Comm: syz.4.3411 Not tainted syzkaller #0
[  648.789315][T14918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  648.799434][T14918] Call Trace:
[  648.802763][T14918]  <TASK>
[  648.805741][T14918]  dump_stack_lvl+0x188/0x24e
[  648.810490][T14918]  ? show_regs_print_info+0x12/0x12
[  648.815746][T14918]  ? load_image+0x400/0x400
[  648.820329][T14918]  ? __lock_acquire+0x7d10/0x7d10
[  648.825509][T14918]  should_fail_ex+0x399/0x4d0
[  648.830287][T14918]  _copy_to_user+0x2c/0x130
[  648.834855][T14918]  bpf_verifier_vlog+0x172/0x390
[  648.839867][T14918]  __btf_verifier_log+0xdf/0x130
[  648.844882][T14918]  ? btf_check_sec_info+0x350/0x350
[  648.850214][T14918]  ? __virt_addr_valid+0x188/0x540
[  648.855372][T14918]  ? btf_parse_hdr+0x1e0/0x7e0
[  648.860178][T14918]  btf_parse_hdr+0x3db/0x7e0
[  648.865019][T14918]  btf_new_fd+0x3c6/0x780
[  648.869427][T14918]  __sys_bpf+0x612/0x780
[  648.873731][T14918]  ? bpf_link_show_fdinfo+0x380/0x380
[  648.879155][T14918]  ? lock_chain_count+0x20/0x20
[  648.884068][T14918]  __x64_sys_bpf+0x78/0x90
[  648.888530][T14918]  do_syscall_64+0x4c/0xa0
[  648.892988][T14918]  ? clear_bhb_loop+0x60/0xb0
[  648.897701][T14918]  ? clear_bhb_loop+0x60/0xb0
[  648.902417][T14918]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  648.908342][T14918] RIP: 0033:0x7ff97639c819
[  648.912786][T14918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.932427][T14918] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  648.940893][T14918] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  648.948903][T14918] RDX: 0000000000000028 RSI: 00002000000004c0 RDI: 0000000000000012
[  648.956988][T14918] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  648.964989][T14918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  648.972996][T14918] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  648.981009][T14918]  </TASK>
[  649.599787][T14937] syzkaller0: tun_chr_ioctl cmd 2148553947
[  649.623097][T14937] syzkaller0: tun_chr_ioctl cmd 1074025680
[  650.199082][T14946] netlink: 'syz.1.3424': attribute type 10 has an invalid length.
[  650.239755][T14946] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3424'.
[  650.436024][T14956] netlink: 'syz.4.3427': attribute type 39 has an invalid length.
[  651.339889][T14956] device hsr_slave_1 left promiscuous mode
[  651.665781][T14976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3434'.
[  651.779603][T14976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3434'.
[  651.815199][T14976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3434'.
[  652.477577][T14993] netlink: 'syz.3.3440': attribute type 10 has an invalid length.
[  652.494842][T14995] FAULT_INJECTION: forcing a failure.
[  652.494842][T14995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  652.508211][T14993] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3440'.
[  652.509250][T14993] device hsr0 entered promiscuous mode
[  652.531080][T14995] CPU: 1 PID: 14995 Comm: syz.4.3441 Not tainted syzkaller #0
[  652.538612][T14995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  652.548715][T14995] Call Trace:
[  652.552071][T14995]  <TASK>
[  652.555046][T14995]  dump_stack_lvl+0x188/0x24e
[  652.559795][T14995]  ? show_regs_print_info+0x12/0x12
[  652.565066][T14995]  ? load_image+0x400/0x400
[  652.569626][T14995]  ? __might_fault+0xa6/0x120
[  652.574480][T14995]  should_fail_ex+0x399/0x4d0
[  652.579254][T14995]  copyin+0x1b/0x120
[  652.580057][T14993] bridge0: port 3(hsr0) entered blocking state
[  652.583214][T14995]  _copy_from_iter+0x447/0x1130
[  652.583250][T14995]  ? copyout_mc+0x110/0x110
[  652.583289][T14995]  ? copyout_mc+0x110/0x110
[  652.583323][T14995]  ? __virt_addr_valid+0x188/0x540
[  652.583360][T14995]  ? __virt_addr_valid+0x465/0x540
[  652.614276][T14995]  ? page_copy_sane+0x4e/0x390
[  652.619132][T14995]  copy_page_from_iter+0x77/0x100
[  652.624223][T14995]  skb_copy_datagram_from_iter+0x2b3/0x690
[  652.630075][T14995]  packet_sendmsg+0x3727/0x4e60
[  652.635062][T14995]  ? __might_sleep+0xd0/0xd0
[  652.639683][T14995]  ? verify_lock_unused+0x140/0x140
[  652.645008][T14995]  ? aa_sk_perm+0x81f/0x950
[  652.649553][T14995]  ? packet_getsockopt+0x9a0/0x9a0
[  652.654697][T14995]  ? aa_sock_msg_perm+0x94/0x150
[  652.659763][T14995]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  652.665077][T14995]  ? security_socket_sendmsg+0x7c/0xa0
[  652.670584][T14995]  ? packet_getsockopt+0x9a0/0x9a0
[  652.675759][T14995]  ____sys_sendmsg+0x5be/0x970
[  652.680655][T14995]  ? __sys_sendmsg_sock+0x30/0x30
[  652.685716][T14995]  ? __import_iovec+0x315/0x500
[  652.690689][T14995]  ? import_iovec+0x6f/0xa0
[  652.695219][T14995]  ___sys_sendmsg+0x2a2/0x360
[  652.699933][T14995]  ? __sys_sendmsg+0x290/0x290
[  652.704746][T14995]  ? __lock_acquire+0x7d10/0x7d10
[  652.709921][T14995]  __se_sys_sendmsg+0x1bb/0x2a0
[  652.714813][T14995]  ? __x64_sys_sendmsg+0x80/0x80
[  652.719799][T14995]  ? lockdep_hardirqs_on+0x94/0x140
[  652.725032][T14995]  do_syscall_64+0x4c/0xa0
[  652.729518][T14995]  ? clear_bhb_loop+0x60/0xb0
[  652.734234][T14995]  ? clear_bhb_loop+0x60/0xb0
[  652.738947][T14995]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  652.744973][T14995] RIP: 0033:0x7ff97639c819
[  652.749422][T14995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  652.769079][T14995] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  652.777721][T14995] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  652.785760][T14995] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  652.793774][T14995] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  652.801792][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  652.809799][T14995] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  652.817825][T14995]  </TASK>
[  652.830085][T14993] bridge0: port 3(hsr0) entered disabled state
[  652.908717][T14993] bridge0: port 3(hsr0) entered blocking state
[  652.916243][T14993] bridge0: port 3(hsr0) entered forwarding state
[  655.700375][T15038] device veth1_macvtap left promiscuous mode
[  655.912675][T15043] netlink: 'syz.1.3457': attribute type 3 has an invalid length.
[  655.960794][T15043] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.3457'.
[  655.976124][T15048] netlink: 'syz.4.3458': attribute type 29 has an invalid length.
[  656.084416][T15048] netlink: 'syz.4.3458': attribute type 29 has an invalid length.
[  656.759158][T15056] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3462'.
[  656.862501][T15058] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3462'.
[  657.102592][T15056] team0: Port device team_slave_0 removed
[  657.157091][T15056] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  659.132845][T15084] netlink: 'syz.3.3470': attribute type 10 has an invalid length.
[  659.160764][T15084] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3470'.
[  659.472477][T15083] netlink: 'syz.0.3471': attribute type 10 has an invalid length.
[  659.559360][T15083] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3471'.
[  659.597057][T15083] device hsr0 entered promiscuous mode
[  659.623690][T15083] bridge0: port 3(hsr0) entered blocking state
[  659.665711][T15083] bridge0: port 3(hsr0) entered disabled state
[  659.675236][T15083] bridge0: port 3(hsr0) entered blocking state
[  659.681624][T15083] bridge0: port 3(hsr0) entered forwarding state
[  660.443946][T15104] FAULT_INJECTION: forcing a failure.
[  660.443946][T15104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.505636][T15104] CPU: 1 PID: 15104 Comm: syz.0.3476 Not tainted syzkaller #0
[  660.513199][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  660.523321][T15104] Call Trace:
[  660.526643][T15104]  <TASK>
[  660.529626][T15104]  dump_stack_lvl+0x188/0x24e
[  660.534381][T15104]  ? show_regs_print_info+0x12/0x12
[  660.539646][T15104]  ? load_image+0x400/0x400
[  660.544230][T15104]  ? __lock_acquire+0x7d10/0x7d10
[  660.549324][T15104]  ? snprintf+0xe5/0x140
[  660.553647][T15104]  should_fail_ex+0x399/0x4d0
[  660.558387][T15104]  _copy_to_user+0x2c/0x130
[  660.563047][T15104]  simple_read_from_buffer+0xe3/0x150
[  660.568522][T15104]  proc_fail_nth_read+0x1a6/0x220
[  660.573875][T15104]  ? proc_fault_inject_write+0x310/0x310
[  660.579661][T15104]  ? fsnotify_perm+0x248/0x550
[  660.584482][T15104]  ? proc_fault_inject_write+0x310/0x310
[  660.590181][T15104]  vfs_read+0x2de/0xa00
[  660.594495][T15104]  ? kernel_read+0x1e0/0x1e0
[  660.599207][T15104]  ? __fget_files+0x28/0x4b0
[  660.603942][T15104]  ? __fget_files+0x28/0x4b0
[  660.608753][T15104]  ? __fget_files+0x43d/0x4b0
[  660.613559][T15104]  ? __fdget_pos+0x2ae/0x360
[  660.618255][T15104]  ? ksys_read+0x71/0x250
[  660.622665][T15104]  ksys_read+0x14c/0x250
[  660.626989][T15104]  ? vfs_write+0xa30/0xa30
[  660.631477][T15104]  ? lockdep_hardirqs_on+0x94/0x140
[  660.636827][T15104]  do_syscall_64+0x4c/0xa0
[  660.641307][T15104]  ? clear_bhb_loop+0x60/0xb0
[  660.646063][T15104]  ? clear_bhb_loop+0x60/0xb0
[  660.650804][T15104]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.656782][T15104] RIP: 0033:0x7f5cc6d5d04e
[  660.661247][T15104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  660.681003][T15104] RSP: 002b:00007f5cc7ce5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  660.689530][T15104] RAX: ffffffffffffffda RBX: 00007f5cc7ce66c0 RCX: 00007f5cc6d5d04e
[  660.697755][T15104] RDX: 000000000000000f RSI: 00007f5cc7ce60a0 RDI: 0000000000000007
[  660.705812][T15104] RBP: 00007f5cc7ce6090 R08: 0000000000000000 R09: 0000000000000000
[  660.713953][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  660.721977][T15104] R13: 00007f5cc7016038 R14: 00007f5cc7015fa0 R15: 00007ffdc09404e8
[  660.730032][T15104]  </TASK>
[  661.391906][ T4286] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  665.209974][T15154] netlink: 'syz.0.3493': attribute type 10 has an invalid length.
[  665.218558][T15154] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3493'.
[  665.628667][T15173] delete_channel: no stack
[  665.646724][T15173] delete_channel: no stack
[  666.562173][T15186] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3504'.
[  667.824587][T15214] netlink: 'syz.2.3514': attribute type 25 has an invalid length.
[  667.853833][T15214] netlink: 'syz.2.3514': attribute type 28 has an invalid length.
[  668.210007][ T4286] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  668.851039][T15229] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3519'.
[  668.923427][T15229] netlink: zone id is out of range
[  668.933060][T15229] netlink: zone id is out of range
[  668.952918][T15226] netlink: 'syz.4.3518': attribute type 10 has an invalid length.
[  668.970669][T15229] netlink: get zone limit has 8 unknown bytes
[  668.982217][T15226] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3518'.
[  669.162823][T15234] netlink: 'syz.1.3521': attribute type 10 has an invalid length.
[  669.178578][T15234] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3521'.
[  670.334940][T15254] device syzkaller0 entered promiscuous mode
[  672.959855][ T4276] Bluetooth: hci4: command 0x0406 tx timeout
[  674.710985][T15275] netlink: 'syz.4.3534': attribute type 10 has an invalid length.
[  674.756630][T15275] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.3534'.
[  675.339533][T15290] netlink: 'syz.1.3539': attribute type 10 has an invalid length.
[  675.348748][T15290] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3539'.
[  675.690341][T15292] netlink: 'syz.0.3541': attribute type 10 has an invalid length.
[  675.731940][T15292] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3541'.
[  675.796710][T15302] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3545'.
[  676.704149][T15324] netlink: 'syz.3.3553': attribute type 10 has an invalid length.
[  676.713165][T15324] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3553'.
[  676.835578][T15329] netlink: 'syz.1.3555': attribute type 10 has an invalid length.
[  676.856640][T15329] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3555'.
[  677.577335][T15341] netlink: 'syz.4.3560': attribute type 10 has an invalid length.
[  677.686848][T15341] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3560'.
[  679.176040][T15368] netlink: 'syz.1.3569': attribute type 10 has an invalid length.
[  679.219747][T15368] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3569'.
[  679.263262][T15374] netlink: 'syz.0.3570': attribute type 10 has an invalid length.
[  679.279921][T15374] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3570'.
[  679.453306][T15380] netlink: 'syz.3.3575': attribute type 27 has an invalid length.
[  679.509763][T15380] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3575'.
[  680.051121][T15390] netlink: 'syz.1.3577': attribute type 10 has an invalid length.
[  680.073214][T15390] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3577'.
[  680.954217][T15415] netlink: 'syz.1.3588': attribute type 10 has an invalid length.
[  680.992941][T15415] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3588'.
[  684.620460][T15440] netlink: 'syz.2.3594': attribute type 10 has an invalid length.
[  684.648534][T15440] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3594'.
[  685.645965][T15461] netlink: 'syz.1.3602': attribute type 10 has an invalid length.
[  685.679643][T15461] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3602'.
[  685.806195][T15472] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3607'.
[  685.833840][T15472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3607'.
[  686.169035][T15477] netlink: 'syz.4.3608': attribute type 10 has an invalid length.
[  686.178147][T15477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3608'.
[  686.240729][T15477] batman_adv: batadv0: Adding interface: vlan1
[  686.260496][T15477] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  686.290744][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  686.297233][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  686.402443][T15477] batman_adv: batadv0: Interface activated: vlan1
[  687.118169][T15498] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3616'.
[  687.330445][T15504] netlink: 'syz.3.3620': attribute type 10 has an invalid length.
[  687.370163][T15504] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3620'.
[  687.915271][T15521] netlink: 'syz.1.3626': attribute type 10 has an invalid length.
[  687.979640][T15521] device veth0_macvtap left promiscuous mode
[  688.518064][T15523] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3626'.
[  689.359082][T15544] netlink: 'syz.0.3634': attribute type 10 has an invalid length.
[  689.389604][T15544] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3634'.
[  689.720886][T15559] netlink: 'syz.0.3639': attribute type 10 has an invalid length.
[  689.743446][T15559] device veth0_macvtap left promiscuous mode
[  689.939774][T15557] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3636'.
[  690.024941][T15557] device hsr_slave_0 left promiscuous mode
[  690.278545][T15557] bridge0: port 3(hsr0) entered disabled state
[  690.627018][T15557] bridge0: port 3(hsr0) entered disabled state
[  690.707571][T15562] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3639'.
[  691.112608][T15592] netlink: 'syz.1.3645': attribute type 2 has an invalid length.
[  691.121887][T15592] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.3645'.
[  692.019797][T15606] netlink: 'syz.4.3649': attribute type 10 has an invalid length.
[  692.028241][T15606] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3649'.
[  692.546083][ T4286] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  692.967985][T15624] netlink: 814 bytes leftover after parsing attributes in process `syz.2.3655'.
[  693.551931][T15646] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3663'.
[  693.752671][T15652] bridge0: port 3(hsr0) entered disabled state
[  693.847644][T15652] device bridge_slave_1 left promiscuous mode
[  693.873728][T15652] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.047516][T15652] device bridge_slave_0 left promiscuous mode
[  694.096401][T15652] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.711061][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3665'.
[  694.837454][T15663] netlink: 'syz.1.3669': attribute type 10 has an invalid length.
[  694.884464][T15663] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3669'.
[  695.887962][ T4286] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  697.502068][T15709] netlink: 'syz.4.3685': attribute type 10 has an invalid length.
[  697.621478][T15709] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3685'.
[  697.860177][T15723] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.867901][T15723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  698.559494][ T4276] Bluetooth: hci2: command 0x0406 tx timeout
[  698.581964][T15728] netlink: 'syz.1.3689': attribute type 21 has an invalid length.
[  698.599809][T15728] netlink: 'syz.1.3689': attribute type 6 has an invalid length.
[  698.618094][T15728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3689'.
[  698.636883][ T4276] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  699.227607][T15746] FAULT_INJECTION: forcing a failure.
[  699.227607][T15746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  699.289308][T15746] CPU: 1 PID: 15746 Comm: syz.3.3693 Not tainted syzkaller #0
[  699.296941][T15746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  699.307070][T15746] Call Trace:
[  699.310407][T15746]  <TASK>
[  699.313398][T15746]  dump_stack_lvl+0x188/0x24e
[  699.318161][T15746]  ? show_regs_print_info+0x12/0x12
[  699.323440][T15746]  ? load_image+0x400/0x400
[  699.328014][T15746]  ? __lock_acquire+0x7d10/0x7d10
[  699.333095][T15746]  ? snprintf+0xe5/0x140
[  699.337390][T15746]  should_fail_ex+0x399/0x4d0
[  699.342141][T15746]  _copy_to_user+0x2c/0x130
[  699.346734][T15746]  simple_read_from_buffer+0xe3/0x150
[  699.352276][T15746]  proc_fail_nth_read+0x1a6/0x220
[  699.357362][T15746]  ? proc_fault_inject_write+0x310/0x310
[  699.363064][T15746]  ? fsnotify_perm+0x248/0x550
[  699.368105][T15746]  ? proc_fault_inject_write+0x310/0x310
[  699.373789][T15746]  vfs_read+0x2de/0xa00
[  699.378048][T15746]  ? kernel_read+0x1e0/0x1e0
[  699.382719][T15746]  ? __fget_files+0x28/0x4b0
[  699.387400][T15746]  ? __fget_files+0x28/0x4b0
[  699.392045][T15746]  ? __fget_files+0x43d/0x4b0
[  699.396783][T15746]  ? __fdget_pos+0x2ae/0x360
[  699.401421][T15746]  ? ksys_read+0x71/0x250
[  699.406057][T15746]  ksys_read+0x14c/0x250
[  699.410345][T15746]  ? vfs_write+0xa30/0xa30
[  699.414801][T15746]  ? lockdep_hardirqs_on+0x94/0x140
[  699.420038][T15746]  do_syscall_64+0x4c/0xa0
[  699.424495][T15746]  ? clear_bhb_loop+0x60/0xb0
[  699.429210][T15746]  ? clear_bhb_loop+0x60/0xb0
[  699.433937][T15746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  699.439862][T15746] RIP: 0033:0x7f610035d04e
[  699.444418][T15746] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  699.464146][T15746] RSP: 002b:00007f61012d9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  699.472775][T15746] RAX: ffffffffffffffda RBX: 00007f61012da6c0 RCX: 00007f610035d04e
[  699.480782][T15746] RDX: 000000000000000f RSI: 00007f61012da0a0 RDI: 0000000000000007
[  699.488815][T15746] RBP: 00007f61012da090 R08: 0000000000000000 R09: 0000000000000000
[  699.496808][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  699.504806][T15746] R13: 00007f6100616038 R14: 00007f6100615fa0 R15: 00007ffe58af8f28
[  699.512822][T15746]  </TASK>
[  700.088521][T15748] netlink: 814 bytes leftover after parsing attributes in process `syz.1.3694'.
[  700.610623][T15769] netlink: 'syz.2.3699': attribute type 10 has an invalid length.
[  700.801862][T15769] device veth0_macvtap left promiscuous mode
[  701.186985][T15771] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3699'.
[  701.323831][T15770] mac80211_hwsim hwsim107 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  702.265181][T15798] netlink: 'syz.3.3711': attribute type 10 has an invalid length.
[  702.298199][T15798] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3711'.
[  703.665065][T15827] netlink: 'syz.1.3719': attribute type 10 has an invalid length.
[  703.793958][T15827] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3719'.
[  704.122677][T15836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'.
[  704.218585][T15836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'.
[  704.432889][T15838] netlink: 'syz.2.3725': attribute type 10 has an invalid length.
[  704.506235][T15838] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3725'.
[  704.643630][T15839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3724'.
[  704.745865][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  704.854367][T15847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  705.020830][T15847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  705.028475][T15847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  705.122155][T15847] batman_adv: batadv0: Interface deactivated: vlan1
[  705.170516][T15847] batman_adv: batadv0: Removing interface: vlan1
[  705.588442][T15863] netlink: 'syz.1.3732': attribute type 2 has an invalid length.
[  706.425580][T15880] netlink: 'syz.0.3738': attribute type 10 has an invalid length.
[  706.614685][T15880] team0: Device vxcan1 is of different type
[  707.051003][T15885] netlink: 'syz.0.3738': attribute type 10 has an invalid length.
[  707.111754][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  707.342237][T15885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.367591][T15885] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  707.395774][T15893] netlink: 'syz.3.3741': attribute type 10 has an invalid length.
[  707.420396][T15893] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3741'.
[  708.338890][T15917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.367638][T15917] batman_adv: batadv0: Removing interface: batadv_slave_1
[  708.464525][T15922] FAULT_INJECTION: forcing a failure.
[  708.464525][T15922] name failslab, interval 1, probability 0, space 0, times 0
[  708.499479][T15922] CPU: 0 PID: 15922 Comm: syz.1.3751 Not tainted syzkaller #0
[  708.507051][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  708.517162][T15922] Call Trace:
[  708.520483][T15922]  <TASK>
[  708.523445][T15922]  dump_stack_lvl+0x188/0x24e
[  708.528177][T15922]  ? show_regs_print_info+0x12/0x12
[  708.533422][T15922]  ? load_image+0x400/0x400
[  708.537965][T15922]  ? __might_sleep+0xd0/0xd0
[  708.542595][T15922]  ? __lock_acquire+0x7d10/0x7d10
[  708.547669][T15922]  should_fail_ex+0x399/0x4d0
[  708.552428][T15922]  should_failslab+0x5/0x20
[  708.557002][T15922]  slab_pre_alloc_hook+0x59/0x310
[  708.562206][T15922]  ? sk_prot_alloc+0xe7/0x210
[  708.567142][T15922]  __kmem_cache_alloc_node+0x4f/0x260
[  708.572746][T15922]  ? sk_prot_alloc+0xe7/0x210
[  708.577565][T15922]  __kmalloc+0xa0/0x240
[  708.581812][T15922]  sk_prot_alloc+0xe7/0x210
[  708.586467][T15922]  ? sk_alloc+0x20/0x340
[  708.590851][T15922]  sk_alloc+0x36/0x340
[  708.594972][T15922]  ? bpf_ctx_init+0x163/0x1a0
[  708.599718][T15922]  ? bpf_prog_test_run_skb+0x26f/0x12a0
[  708.605317][T15922]  bpf_prog_test_run_skb+0x35e/0x12a0
[  708.610734][T15922]  ? __fget_files+0x28/0x4b0
[  708.615365][T15922]  ? __fget_files+0x43d/0x4b0
[  708.620089][T15922]  ? cpu_online+0xa0/0xa0
[  708.624459][T15922]  bpf_prog_test_run+0x31e/0x390
[  708.629463][T15922]  __sys_bpf+0x62b/0x780
[  708.633765][T15922]  ? bpf_link_show_fdinfo+0x380/0x380
[  708.639213][T15922]  ? lock_chain_count+0x20/0x20
[  708.644122][T15922]  __x64_sys_bpf+0x78/0x90
[  708.648625][T15922]  do_syscall_64+0x4c/0xa0
[  708.653147][T15922]  ? clear_bhb_loop+0x60/0xb0
[  708.657915][T15922]  ? clear_bhb_loop+0x60/0xb0
[  708.662784][T15922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  708.668867][T15922] RIP: 0033:0x7f584cf9c819
[  708.673330][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  708.693416][T15922] RSP: 002b:00007f584de4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  708.701962][T15922] RAX: ffffffffffffffda RBX: 00007f584d215fa0 RCX: 00007f584cf9c819
[  708.709972][T15922] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  708.717998][T15922] RBP: 00007f584de4c090 R08: 0000000000000000 R09: 0000000000000000
[  708.726016][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  708.734149][T15922] R13: 00007f584d216038 R14: 00007f584d215fa0 R15: 00007ffd27cff998
[  708.742462][T15922]  </TASK>
[  708.897115][T15925] netlink: 'syz.0.3750': attribute type 21 has an invalid length.
[  708.914343][T15925] netlink: 'syz.0.3750': attribute type 6 has an invalid length.
[  708.924628][T15925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3750'.
[  712.426231][T15957] netlink: 'syz.3.3758': attribute type 10 has an invalid length.
[  712.482450][T15957] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3758'.
[  713.396794][T15978] FAULT_INJECTION: forcing a failure.
[  713.396794][T15978] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  713.435348][T15978] CPU: 1 PID: 15978 Comm: syz.4.3769 Not tainted syzkaller #0
[  713.443033][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  713.453256][T15978] Call Trace:
[  713.456591][T15978]  <TASK>
[  713.459583][T15978]  dump_stack_lvl+0x188/0x24e
[  713.464372][T15978]  ? show_regs_print_info+0x12/0x12
[  713.469671][T15978]  ? load_image+0x400/0x400
[  713.474357][T15978]  ? __might_fault+0xa6/0x120
[  713.479129][T15978]  should_fail_ex+0x399/0x4d0
[  713.484059][T15978]  copyin+0x1b/0x120
[  713.488088][T15978]  _copy_from_iter+0x447/0x1130
[  713.493034][T15978]  ? copyout_mc+0x110/0x110
[  713.497614][T15978]  ? __virt_addr_valid+0x188/0x540
[  713.502901][T15978]  ? __virt_addr_valid+0x188/0x540
[  713.508097][T15978]  ? __virt_addr_valid+0x465/0x540
[  713.513297][T15978]  ? __check_object_size+0x500/0xa40
[  713.518670][T15978]  netlink_sendmsg+0x755/0xbd0
[  713.523539][T15978]  ? netlink_getsockopt+0x550/0x550
[  713.528938][T15978]  ? aa_sock_msg_perm+0x94/0x150
[  713.533947][T15978]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  713.539308][T15978]  ? security_socket_sendmsg+0x7c/0xa0
[  713.544955][T15978]  ? netlink_getsockopt+0x550/0x550
[  713.550251][T15978]  ____sys_sendmsg+0x5be/0x970
[  713.555134][T15978]  ? __sys_sendmsg_sock+0x30/0x30
[  713.560241][T15978]  ? __import_iovec+0x315/0x500
[  713.565193][T15978]  ? import_iovec+0x6f/0xa0
[  713.569790][T15978]  ___sys_sendmsg+0x2a2/0x360
[  713.574602][T15978]  ? __sys_sendmsg+0x290/0x290
[  713.579569][T15978]  ? __lock_acquire+0x7d10/0x7d10
[  713.584724][T15978]  __se_sys_sendmsg+0x1bb/0x2a0
[  713.589658][T15978]  ? __x64_sys_sendmsg+0x80/0x80
[  713.594750][T15978]  ? lockdep_hardirqs_on+0x94/0x140
[  713.600063][T15978]  do_syscall_64+0x4c/0xa0
[  713.604554][T15978]  ? clear_bhb_loop+0x60/0xb0
[  713.609296][T15978]  ? clear_bhb_loop+0x60/0xb0
[  713.614238][T15978]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  713.620217][T15978] RIP: 0033:0x7ff97639c819
[  713.624692][T15978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.644372][T15978] RSP: 002b:00007ff9772c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  713.652901][T15978] RAX: ffffffffffffffda RBX: 00007ff976615fa0 RCX: 00007ff97639c819
[  713.661027][T15978] RDX: 00000000040000d0 RSI: 0000200000000080 RDI: 0000000000000003
[  713.669166][T15978] RBP: 00007ff9772c5090 R08: 0000000000000000 R09: 0000000000000000
[  713.677216][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  713.685265][T15978] R13: 00007ff976616038 R14: 00007ff976615fa0 R15: 00007ffd2644a238
[  713.693340][T15978]  </TASK>
[  714.475423][T15995] netlink: 'syz.4.3775': attribute type 10 has an invalid length.
[  714.550820][T15995] team0: Device vxcan1 is of different type
[  714.727383][T15998] netlink: 'syz.3.3776': attribute type 10 has an invalid length.
[  714.740609][T15998] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3776'.
[  714.905881][T15997] netlink: 'syz.4.3775': attribute type 10 has an invalid length.
[  715.054703][T15997] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  715.424208][T16013] netlink: 'syz.0.3782': attribute type 21 has an invalid length.
[  715.439610][T16013] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3782'.
[  717.491414][T16042] netlink: 'syz.4.3791': attribute type 10 has an invalid length.
[  717.520886][T16042] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3791'.
[  718.751916][T16058] netlink: 'syz.2.3796': attribute type 10 has an invalid length.
[  718.777776][T16058] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3796'.
[  719.132538][T16069] netlink: 'syz.3.3797': attribute type 21 has an invalid length.
[  719.151215][T16069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3797'.
[  719.629799][T16093] netlink: 3711 bytes leftover after parsing attributes in process `syz.2.3808'.
[  719.720436][T16088] netlink: 'syz.0.3805': attribute type 10 has an invalid length.
[  719.756316][T16088] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3805'.
[  720.092557][T16103] netlink: 'syz.3.3809': attribute type 153 has an invalid length.
[  720.161641][T16103] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.3809'.
[  720.405596][T16111] netlink: 'syz.0.3812': attribute type 10 has an invalid length.
[  720.418730][T16111] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3812'.
[  721.455407][T16136] FAULT_INJECTION: forcing a failure.
[  721.455407][T16136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.660000][T16137] netlink: 'syz.1.3818': attribute type 21 has an invalid length.
[  721.691901][T16136] CPU: 1 PID: 16136 Comm: syz.3.3819 Not tainted syzkaller #0
[  721.699472][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  721.709577][T16136] Call Trace:
[  721.712906][T16136]  <TASK>
[  721.715881][T16136]  dump_stack_lvl+0x188/0x24e
[  721.720648][T16136]  ? show_regs_print_info+0x12/0x12
[  721.726007][T16136]  ? load_image+0x400/0x400
[  721.730571][T16136]  ? __lock_acquire+0x7d10/0x7d10
[  721.735672][T16136]  should_fail_ex+0x399/0x4d0
[  721.740440][T16136]  _copy_from_user+0x2c/0x170
[  721.745281][T16136]  bpf_prog_test_run_skb+0x262/0x12a0
[  721.750747][T16136]  ? __fget_files+0x28/0x4b0
[  721.755401][T16136]  ? __fget_files+0x28/0x4b0
[  721.760146][T16136]  ? __fget_files+0x43d/0x4b0
[  721.764895][T16136]  ? cpu_online+0xa0/0xa0
[  721.769380][T16136]  bpf_prog_test_run+0x31e/0x390
[  721.774395][T16136]  __sys_bpf+0x62b/0x780
[  721.778794][T16136]  ? bpf_link_show_fdinfo+0x380/0x380
[  721.784245][T16136]  ? lock_chain_count+0x20/0x20
[  721.789310][T16136]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  721.795433][T16136]  __x64_sys_bpf+0x78/0x90
[  721.799896][T16136]  do_syscall_64+0x4c/0xa0
[  721.804354][T16136]  ? clear_bhb_loop+0x60/0xb0
[  721.809066][T16136]  ? clear_bhb_loop+0x60/0xb0
[  721.813783][T16136]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  721.819813][T16136] RIP: 0033:0x7f610039c819
[  721.824277][T16136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.844176][T16136] RSP: 002b:00007f61012da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  721.852724][T16136] RAX: ffffffffffffffda RBX: 00007f6100615fa0 RCX: 00007f610039c819
[  721.860735][T16136] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a
[  721.868743][T16136] RBP: 00007f61012da090 R08: 0000000000000000 R09: 0000000000000000
[  721.876746][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.884745][T16136] R13: 00007f6100616038 R14: 00007f6100615fa0 R15: 00007ffe58af8f28
[  721.892780][T16136]  </TASK>
[  721.956142][T16137] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3818'.
[  722.540557][T16148] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.3824'.
[  722.738627][T16149] netlink: 'syz.4.3823': attribute type 10 has an invalid length.
[  722.753040][T16149] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3823'.
[  723.288085][T16166] netlink: 'syz.3.3830': attribute type 10 has an invalid length.
[  724.420754][T16192] netlink: 'syz.4.3840': attribute type 10 has an invalid length.
[  724.437367][T16192] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3840'.
[  724.891542][T16210] netlink: 'syz.1.3846': attribute type 10 has an invalid length.
[  724.923330][T16210] team0: Device vxcan1 is of different type
[  725.449637][T16232] netlink: 'syz.1.3854': attribute type 10 has an invalid length.
[  725.544861][T16232] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.665730][T16232] device bridge_slave_1 left promiscuous mode
[  725.703450][T16232] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.786911][T16237] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  725.795535][T16237] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  725.985704][T16232] team0: Port device bridge_slave_1 added
[  726.056710][T16228] netlink: 'syz.3.3853': attribute type 10 has an invalid length.
[  726.099026][T16228] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3853'.
[  726.153120][T16242] netlink: 'syz.4.3857': attribute type 2 has an invalid length.
[  726.163510][T16242] netlink: 196452 bytes leftover after parsing attributes in process `syz.4.3857'.
[  726.769225][T16255] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3863'.
[  726.771549][T16258] netlink: 'syz.4.3864': attribute type 10 has an invalid length.
[  726.834558][T16258] team0: Device vxcan1 is of different type
[  727.346049][T16276] netlink: 'syz.0.3870': attribute type 10 has an invalid length.
[  727.389346][T16276] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3870'.
[  727.695816][ T4276] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  728.800018][T16312] netlink: 'syz.0.3884': attribute type 10 has an invalid length.
[  728.828727][T16312] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3884'.
[  729.132525][T16323] FAULT_INJECTION: forcing a failure.
[  729.132525][T16323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  729.199784][T16323] CPU: 0 PID: 16323 Comm: syz.3.3889 Not tainted syzkaller #0
[  729.207370][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  729.217522][T16323] Call Trace:
[  729.221225][T16323]  <TASK>
[  729.224236][T16323]  dump_stack_lvl+0x188/0x24e
[  729.229020][T16323]  ? show_regs_print_info+0x12/0x12
[  729.234308][T16323]  ? load_image+0x400/0x400
[  729.238929][T16323]  ? __might_fault+0xa6/0x120
[  729.243707][T16323]  should_fail_ex+0x399/0x4d0
[  729.248530][T16323]  copyin+0x1b/0x120
[  729.252611][T16323]  _copy_from_iter+0x447/0x1130
[  729.257595][T16323]  ? copyout_mc+0x110/0x110
[  729.262210][T16323]  ? __virt_addr_valid+0x188/0x540
[  729.267441][T16323]  ? __virt_addr_valid+0x188/0x540
[  729.272828][T16323]  ? __virt_addr_valid+0x465/0x540
[  729.278046][T16323]  ? __check_object_size+0x500/0xa40
[  729.283451][T16323]  pfkey_sendmsg+0x1ff/0x1090
[  729.288322][T16323]  ? __might_sleep+0xd0/0xd0
[  729.293028][T16323]  ? pfkey_release+0x310/0x310
[  729.297885][T16323]  ? aa_sk_perm+0x81f/0x950
[  729.302481][T16323]  ? __might_fault+0xa6/0x120
[  729.307235][T16323]  ? aa_af_perm+0x340/0x340
[  729.311823][T16323]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  729.318443][T16323]  ? aa_sock_msg_perm+0x94/0x150
[  729.323495][T16323]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  729.328866][T16323]  ? security_socket_sendmsg+0x7c/0xa0
[  729.334440][T16323]  ? pfkey_release+0x310/0x310
[  729.339314][T16323]  ____sys_sendmsg+0x5be/0x970
[  729.344208][T16323]  ? __sys_sendmsg_sock+0x30/0x30
[  729.349496][T16323]  ? __import_iovec+0x315/0x500
[  729.354457][T16323]  ? import_iovec+0x6f/0xa0
[  729.359059][T16323]  ___sys_sendmsg+0x2a2/0x360
[  729.363850][T16323]  ? __sys_sendmsg+0x290/0x290
[  729.368934][T16323]  ? __lock_acquire+0x7d10/0x7d10
[  729.374117][T16323]  __se_sys_sendmsg+0x1bb/0x2a0
[  729.379087][T16323]  ? __x64_sys_sendmsg+0x80/0x80
[  729.384196][T16323]  ? lockdep_hardirqs_on+0x94/0x140
[  729.389504][T16323]  do_syscall_64+0x4c/0xa0
[  729.394010][T16323]  ? clear_bhb_loop+0x60/0xb0
[  729.398858][T16323]  ? clear_bhb_loop+0x60/0xb0
[  729.403627][T16323]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  729.409602][T16323] RIP: 0033:0x7f610039c819
[  729.414108][T16323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.434010][T16323] RSP: 002b:00007f61012da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.442523][T16323] RAX: ffffffffffffffda RBX: 00007f6100615fa0 RCX: 00007f610039c819
[  729.450589][T16323] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004
[  729.458646][T16323] RBP: 00007f61012da090 R08: 0000000000000000 R09: 0000000000000000
[  729.466684][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.474809][T16323] R13: 00007f6100616038 R14: 00007f6100615fa0 R15: 00007ffe58af8f28
[  729.482901][T16323]  </TASK>
[  729.564377][T16331] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3893'.
[  729.619790][T16331] netlink: 'syz.2.3893': attribute type 10 has an invalid length.
[  729.878599][T16331] team0 (unregistering): Port device team_slave_1 removed
[  730.022675][T16331] team0 (unregistering): Port device macvlan0 removed
[  730.041642][ T4276] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  730.364262][T16350] netlink: 'syz.3.3900': attribute type 10 has an invalid length.
[  730.399969][T16350] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3900'.
[  730.805864][T16360] netlink: 'syz.2.3904': attribute type 3 has an invalid length.
[  730.816257][T16360] netlink: 'syz.2.3904': attribute type 1 has an invalid length.
[  730.826140][T16360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3904'.
[  731.101768][T16379] netlink: 'syz.2.3911': attribute type 10 has an invalid length.
[  731.149380][T16377] netlink: 'syz.4.3912': attribute type 10 has an invalid length.
[  731.263926][T16377] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.343372][T16377] device bridge_slave_1 left promiscuous mode
[  731.350046][T16377] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.372292][T16377] team0: Port device bridge_slave_1 added
[  732.599086][T16376] delete_channel: no stack
[  733.215781][T16417] netlink: 'syz.1.3926': attribute type 3 has an invalid length.
[  733.230614][T16417] netlink: 'syz.1.3926': attribute type 1 has an invalid length.
[  733.243899][T16417] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3926'.
[  734.399341][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  735.262888][T16422] netlink: 'syz.3.3928': attribute type 10 has an invalid length.
[  735.291200][T16423] netlink: 'syz.2.3938': attribute type 40 has an invalid length.
[  735.426732][T16427] netlink: 'syz.4.3930': attribute type 3 has an invalid length.
[  735.465410][T16427] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3930'.
[  735.543429][T16428] netlink: 'syz.4.3930': attribute type 3 has an invalid length.
[  735.583372][T16428] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3930'.
[  735.893471][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3934'.
[  735.929333][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3934'.
[  736.044740][T16446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3934'.
[  736.087129][T16449] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.3937'.
[  736.099708][T16449] openvswitch: netlink: Flow actions attr not present in new flow.
[  736.705871][T16457] netlink: 'syz.4.3940': attribute type 10 has an invalid length.
[  736.726054][T16457] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3940'.
[  736.921799][T16466] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  736.936507][T16466] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  736.952200][T16466] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  737.003450][T16466] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  737.061988][T16469] netlink: 'syz.1.3943': attribute type 29 has an invalid length.
[  737.202456][T16477] netlink: 'syz.3.3946': attribute type 10 has an invalid length.
[  737.306985][T16480] netlink: 'syz.2.3947': attribute type 29 has an invalid length.
[  737.341623][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'.
[  737.364270][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3947'.
[  737.755898][T16489] device 0 entered promiscuous mode
[  738.925306][    C1] 
[  738.925318][    C1] ================================
[  738.925325][    C1] WARNING: inconsistent lock state
[  738.925344][    C1] syzkaller #0 Not tainted
[  738.925356][    C1] --------------------------------
[  738.925362][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  738.925371][    C1] syz.1.3967/16531 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  738.925395][    C1] ffff888018442820 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[  738.925456][    C1] {INITIAL USE} state was registered at:
[  738.925465][    C1]   lock_acquire+0x1bb/0x4a0
[  738.925495][    C1]   _raw_spin_lock+0x2a/0x40
[  738.925518][    C1]   htab_lock_bucket+0x179/0x2f0
[  738.925539][    C1]   htab_lru_map_update_elem+0x31e/0xe80
[  738.925562][    C1]   bpf_map_update_value+0x59e/0x670
[  738.925588][    C1]   map_update_elem+0x4d7/0x680
[  738.925619][    C1]   __sys_bpf+0x4ec/0x780
[  738.925643][    C1]   __x64_sys_bpf+0x78/0x90
[  738.925668][    C1]   do_syscall_64+0x4c/0xa0
[  738.925698][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.925722][    C1] irq event stamp: 1110
[  738.925729][    C1] hardirqs last  enabled at (1109): [<ffffffff81c8f826>] seqcount_lockdep_reader_access+0x106/0x190
[  738.925764][    C1] hardirqs last disabled at (1110): [<ffffffff8a2dc90e>] exc_debug+0x6e/0x130
[  738.925787][    C1] softirqs last  enabled at (988): [<ffffffff88694fb4>] netlink_insert+0x1034/0x13c0
[  738.925824][    C1] softirqs last disabled at (986): [<ffffffff8829539b>] release_sock+0x2b/0x1b0
[  738.925851][    C1] 
[  738.925851][    C1] other info that might help us debug this:
[  738.925857][    C1]  Possible unsafe locking scenario:
[  738.925857][    C1] 
[  738.925861][    C1]        CPU0
[  738.925865][    C1]        ----
[  738.925868][    C1]   lock(&htab->lockdep_key);
[  738.925880][    C1]   <Interrupt>
[  738.925884][    C1]     lock(&htab->lockdep_key);
[  738.925895][    C1] 
[  738.925895][    C1]  *** DEADLOCK ***
[  738.925895][    C1] 
[  738.925899][    C1] no locks held by syz.1.3967/16531.
[  738.925908][    C1] 
[  738.925908][    C1] stack backtrace:
[  738.925915][    C1] CPU: 1 PID: 16531 Comm: syz.1.3967 Not tainted syzkaller #0
[  738.925933][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  738.925945][    C1] Call Trace:
[  738.925952][    C1]  <#DB>
[  738.925962][    C1]  dump_stack_lvl+0x188/0x24e
[  738.925996][    C1]  ? show_regs_print_info+0x12/0x12
[  738.926041][    C1]  ? print_usage_bug+0x42a/0x690
[  738.926071][    C1]  ? verify_lock_unused+0x18/0x140
[  738.926108][    C1]  lock_acquire+0x2df/0x4a0
[  738.926144][    C1]  ? htab_lock_bucket+0x179/0x2f0
[  738.926171][    C1]  ? read_lock_is_recursive+0x10/0x10
[  738.926203][    C1]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  738.926255][    C1]  _raw_spin_lock+0x2a/0x40
[  738.926275][    C1]  ? htab_lock_bucket+0x179/0x2f0
[  738.926299][    C1]  htab_lock_bucket+0x179/0x2f0
[  738.926330][    C1]  ? htab_lru_map_delete_node+0x630/0x630
[  738.926354][    C1]  ? rcu_is_watching+0x11/0xa0
[  738.926396][    C1]  ? htab_map_hash+0x269/0x6d0
[  738.926425][    C1]  htab_lru_map_delete_elem+0x1ad/0x780
[  738.926454][    C1]  ? exc_int3+0xa/0x70
[  738.926485][    C1]  ? asm_exc_int3+0x35/0x40
[  738.926515][    C1]  ? htab_lru_map_update_elem+0xe80/0xe80
[  738.926556][    C1]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  738.926584][    C1]  bpf_overflow_handler+0x6e8/0x7c0
[  738.926610][    C1]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  738.926645][    C1]  ? bpf_overflow_handler+0xd9/0x7c0
[  738.926669][    C1]  ? perf_swevent_overflow+0x230/0x230
[  738.926705][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  738.926744][    C1]  __perf_event_overflow+0x448/0x610
[  738.926794][    C1]  perf_swevent_event+0x315/0x570
[  738.926831][    C1]  ? perf_tp_event+0xc30/0xc30
[  738.926863][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  738.926912][    C1]  perf_bp_event+0x312/0x3f0
[  738.926952][    C1]  ? perf_event_free_bpf_prog+0x110/0x110
[  738.927030][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  738.927061][    C1]  ? read_lock_is_recursive+0x10/0x10
[  738.927104][    C1]  hw_breakpoint_exceptions_notify+0x152/0x470
[  738.927143][    C1]  atomic_notifier_call_chain+0x17a/0x2b0
[  738.927168][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  738.927199][    C1]  notify_die+0x141/0x1a0
[  738.927228][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  738.927275][    C1]  notify_debug+0x20/0x30
[  738.927302][    C1]  exc_debug+0xd9/0x130
[  738.927328][    C1]  asm_exc_debug+0x1a/0x40
[  738.927351][    C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  738.927383][    C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  738.927402][    C1] RSP: 0018:ffffc9000594f788 EFLAGS: 00050206
[  738.927418][    C1] RAX: ffffffff840f3c01 RBX: 0000000000033fe0 RCX: 0000000000033e60
[  738.927434][    C1] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc9000c393180
[  738.927447][    C1] RBP: 0000000000000000 R08: ffffc9000c3c6fdf R09: 1ffff92001878dfb
[  738.927463][    C1] R10: dffffc0000000000 R11: fffff52001878dfc R12: 00007ffffffcb020
[  738.927477][    C1] R13: 0000000000000000 R14: 00002000000001c0 R15: ffffc9000c393000
[  738.927503][    C1]  ? copyin+0x41/0x120
[  738.927534][    C1]  </#DB>
[  738.927539][    C1]  <TASK>
[  738.927546][    C1]  copyin+0xe7/0x120
[  738.927569][    C1]  _copy_from_iter+0x447/0x1130
[  738.927603][    C1]  ? copyout_mc+0x110/0x110
[  738.927634][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  738.927661][    C1]  ? _raw_spin_unlock+0x24/0x40
[  738.927683][    C1]  ? find_vmap_area+0xf8/0x110
[  738.927711][    C1]  ? __check_object_size+0x500/0xa40
[  738.927742][    C1]  netlink_sendmsg+0x755/0xbd0
[  738.927796][    C1]  ? netlink_getsockopt+0x550/0x550
[  738.927832][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  738.927861][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  738.927881][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  738.927917][    C1]  ? netlink_getsockopt+0x550/0x550
[  738.927948][    C1]  ____sys_sendmsg+0x5be/0x970
[  738.927994][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  738.928022][    C1]  ? __import_iovec+0x315/0x500
[  738.928060][    C1]  ? import_iovec+0x6f/0xa0
[  738.928089][    C1]  ___sys_sendmsg+0x2a2/0x360
[  738.928120][    C1]  ? try_to_wake_up+0x6ae/0x1080
[  738.928156][    C1]  ? __sys_sendmsg+0x290/0x290
[  738.928261][    C1]  __se_sys_sendmsg+0x1bb/0x2a0
[  738.928298][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  738.928356][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  738.928386][    C1]  do_syscall_64+0x4c/0xa0
[  738.928414][    C1]  ? clear_bhb_loop+0x60/0xb0
[  738.928439][    C1]  ? clear_bhb_loop+0x60/0xb0
[  738.928469][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.928494][    C1] RIP: 0033:0x7f584cf9c819
[  738.928513][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.928528][    C1] RSP: 002b:00007f584de4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.928549][    C1] RAX: ffffffffffffffda RBX: 00007f584d215fa0 RCX: 00007f584cf9c819
[  738.928562][    C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009
[  738.928576][    C1] RBP: 00007f584d032c91 R08: 0000000000000000 R09: 0000000000000000
[  738.928588][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  738.928600][    C1] R13: 00007f584d216038 R14: 00007f584d215fa0 R15: 00007ffd27cff998
[  738.928639][    C1]  </TASK>
[  747.671166][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  747.677650][ T1265] ieee802154 phy1 wpan1: encryption failed: -22