last executing test programs:

4.565681076s ago: executing program 1 (id=2555):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d3000000f1000000180a000000000000000000000000000095000000000000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r3}, 0x8)
ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0)
openat$cgroup_int(r4, &(0x7f00000000c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a000000feb9fb4c5159c48a0500000400000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000200"/28], 0x50)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="00010000000000000000002f41b09aa4355c1eafacf706e1", 0x18}], 0x1}, 0x20040040)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

3.548314493s ago: executing program 1 (id=2561):
socket$kcm(0x2, 0x5, 0x84)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdaa, 0x0, 0x41000, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000, 0x4}, {0x4, 0xfffffffd, 0x0, 0x9}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a40), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe4, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a80), &(0x7f0000000840), 0x8, 0x80002d, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=r2, @ANYRES32, @ANYBLOB="feffffff0500"/21], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', r2, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x5, 0x5}, 0x10, 0x1e650, r1, 0x2, &(0x7f0000000bc0)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x2, 0x1, 0x1}, {0x3, 0x3, 0xc, 0xb}], 0x10, 0x6}, 0x94)
r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8818, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$tun(0xffffffffffffff9c, 0x0, 0x123001, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2953}, 0x94)
recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x10000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000ac0)="c4ec7882f2910c55a795f28476ae3b9a6c0d0258335575bb552a0a5391db8b9937c43df52e233d0f3e9099be47386ef13c0071013659b76bb46f7c0ce29a7fe5ade4d4d603215a65cdc1e76ad794fcdd19aa36244cbd36bfde4bda4bd3e960ae6991fdf5818694784674968fbf104752fec29ef4875d953fd45d68609e7bd44bffff23213c433324f0d80f125afd221a0e84b70aec7d8e477198e440", 0x9c}, {&(0x7f0000000c40)="ee31aa6c7bcdff902eb6383d3a7ba1e555474798ab9ca7dbb86e30d0086a12ff386d76114feed6ab97c106ae3ba23b3df092c1df088b8eb33dd7faff6a2047fc0a47f317069372de46024d41ad1777492672148c805864a5d752d15c058eb7", 0x5f}, {&(0x7f00000023c0)="837d88a62b7ec10de6316fcb81a24f861c7090e8ee86537a1bdb0be6f12ce048f00aa7c135a345786df376287aeb487c941aa0b10cf40b6ba3c844e138d6f7ae58a35480e705b46d65c5baf5105da120a517bdc1b644a19114a8c2119d751bbcd23f395d369596e6083d4cff64f680655bab78d0f0280a29f1a72c63e5dc28e748b093ca921adeba917ac7115f29a6680b0de9d766042969dced27eac825c5ede02caa4b01efed35fcb69a0bdc73cff1d3d63f4996cce2e1fa46b058ef39c5fcb67ee60ba2b9ff985d5146667cc9c7a59c6fad", 0xd3}, {&(0x7f0000001e80)="aad0ea5fd38d0e1bfce0102229b1475827ad4c16aa391a6e6891d62a1f092d9778ecf6001e00e920aa751ebd4bd9748e260be9549fd78f5c5bde24fd7d14d6deb143e39266ad642a7981bcc6a3953c771e0c6d975af407d988b18464ae2450f630ae43b54d6093fffff815f4508e5bd540bf5470e9a7d87a631fe6a6a1a767a692d517725df50cac228d9827094fcd0beb3683991e714d37e228bf2a738fd2f2ebc0f05bce278afe2d45a250da9c0d00669bc3b0ef65d1d618285949e7ec82fdcf4e369d5d629045d78a3de2110b31ccd1ea5047c4bbe6a63e6f2304", 0xdc}, {&(0x7f0000001f80)}, {&(0x7f0000002040)="b7a2f112217cc88bf8200297f97deff1cdc4a9ba721384954db5333328121c59ffa07b6d4ee79c6e4dcd2628b47907873dde985b333efd290ff8d6218507128f80109e2d80d23366eca832176a59b466834913d37ac25f4202e691196c0a630791273cc88470ccadc9cff1366b3413f1936ec031657ca2faa3c74fd35ee69313596231016311af5d61affd18a7d5765b47ee79ecf0370b689949eee93804fea4edeb9dc72a7f392d74985e7f9b1fd7c8cf4feae130d4d4b29512f4d06daa7007e682f6741609ac426610962ec4c6762c98295968fb73ea", 0xd7}, {&(0x7f0000002140)="eb7c3d48f7da896bf8ac3b1d70f4d4fcacb5c559a721583b7a9e6d66409de7cc306a3e8a17c6ac43bde635cd5d8a77998b70279b2eb611d21059a3f7a6e79426b87b83f07e0df1b6e4542f90d0cf6fc144593e1167bb318efdd64b72e51a8323acd86ca7e7b9704cb4ef82f005a1be4c70f42ef29e6d8387ea27df0537e18a3d9f62c5ae0e01c7174813cb8fb7b0", 0x8e}, {&(0x7f0000002200)}, {&(0x7f0000002240)="7b4daf69a1a0e76b176d553076840c83a770e7a01be2bffea4ac4a71d23b0ae280b284a69a142a223b23ec33a2e8d898304583d2eca7329388e504a7495584fbb4ed0abec2b6f083c82119f6962ecdd2bc352b5f94c26c6eb6e6bec7dec6bbbdf135c3cd2835e43a0d25aae8d16366d40e00b004b436c8eb3c43047a9dfed3b5d2fd9b29ae2f34d5c7753775de3912c61797e3930343653725eb8e8ed0feed1f86d1975b6de766cee96c31b7295430ba287b9da9dbb06da1499e062f82062cad", 0xc0}], 0x9}, 0x41)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x50)

3.547516493s ago: executing program 2 (id=2562):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = gettid()
sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x800}, 0x40800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900)
sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804)
r5 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

3.540973284s ago: executing program 0 (id=2564):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x182510, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10)

3.277510451s ago: executing program 3 (id=2565):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x5, 0x84)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffe56)
perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3"], 0x48)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a0"], 0xfe33)
r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x6}, 0x100000, 0x200, 0xffffffff, 0x0, 0x9, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x100000032}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001000000000000000000000184b00000200000000000000ef0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
close(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
recvmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x222)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.194142833s ago: executing program 0 (id=2566):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x20000)
r5 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0xe, 0x0, &(0x7f0000000480)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r8, @ANYRES8=r10], 0x12)
r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x10, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r13 = openat$cgroup_ro(r9, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r13}, 0x8)
r14 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
r15 = openat$cgroup_devices(r14, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES16=r15], 0xfe33)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r12, 0x2000000, 0x8, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.271567518s ago: executing program 1 (id=2567):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2b637075201409346a7320"], 0xb)
socketpair(0x10, 0x4, 0x8, &(0x7f00000005c0))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd2, 0x3, 0x0, 0x0, 0x0, 0x5, 0x81030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xd7, 0x1}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000400000000007d57f8ff0400000085000000230000040000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r6)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000a1d9d76fe6c418efc6d81a9779493389a6e2be962ab2aa71567162f65d7535d2802b992c1a40bfc2d04d4cc226c619cdd5b90cde1bef0df625a1ade6b5f33dbeda45612fafd0fd887288704f6d87696beca6f70af537b5e828c37370e40c7cbb7496ff05385eb02af1d0df4c9a12db4653772c028792773565680d3ebf2409aafe239e0836124e0ccf71ee532b1ca247a5fe4c9b2b9416faf7f2c7af0798f9da9d8e88cac91f7c9f6fdd9cd73a8cef2ffe59f180ee39"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94)
r8 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='dB', 0x64}], 0x1}, 0x22044880)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r4, @ANYBLOB="000001bce60000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r9, 0x0, 0x0}, 0x10)

2.271313978s ago: executing program 2 (id=2568):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0x7fffffff}, 0x28)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x0, 0x3, 0x7fff, 0x6, 0x0, 0x10000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1)
recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000500)=""/151, 0x97}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2}, 0x40)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2.245013199s ago: executing program 3 (id=2569):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4   \x00'}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0xfffffffc}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d00000008000000040000000900000008000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9c79000000decd425400000000000000000000000000000000000000a35ef3e8a32429b0fe6f0d8a94cfe5efd30a7bc25ff8d71a91072140c8c79d65c20fef9a28"], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x80000001, r4, 0x4}, 0x38)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0)

2.135819642s ago: executing program 0 (id=2570):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000840)={&(0x7f0000000280)="7a2836b200040000200b79802bb395ea35d33ab10a076c773b9e21b7127b2f6b2375ce53aa1e11a87fe709cba146c5aa3020bc5af54baebdc46eaaef0673ddaa896f2fe7e415da906b3d8e085b3d6318915c649aea6fadf4940fd6c4f074aa7747385bae67f4f5c5d9f77b11b0dc7fb55f3a90f7c1ef022400d05c7c8c59a612ab3ae6e57277754e046f6fbb450163d8d27aee9588d6a27c9a67d1ce6fdc1ba4632209a66b7cdec56c1899900393a1341391b43404ca56605d1942366130408c887a25d424d450d972e0740ffd98a66e28ab90909e6252", &(0x7f0000000500)=""/200, &(0x7f0000000640)="f1e51483080c0ed702923977f8b2b2e402eb00000000800000001736f2bd7a52a653ca68ebe50d392af05a119707b8f04d95c3f0e8086c01963c50da22d99864f75ea8a32f234646301cdde9d0a9eb16a83f6af798f7a595fc10d5e88d3607ec247a8bc171a62d16c278d828720000", &(0x7f0000001a80)="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", 0x2, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b11890000000000851000008c0f98b566f35d7fb99abddba06f1302000000850000007600000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r2 = socket$kcm(0x10, 0x2, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1, 0x0, 0x0, 0x35}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b12d25a80648c2594f90324fc601000084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpu<-0||!')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000240)=r5)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@generic={0x0, 0xc, 0xa, 0x5}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000880)=""/4096, 0x41100, 0x28, '\x00', r5, @fallback=0xf, r6, 0x8, &(0x7f00000018c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x9, 0x5}, 0x10, 0xffffffffffffffff, r1, 0x3, &(0x7f0000001940)=[r0], &(0x7f0000001980)=[{0x2, 0x5, 0xe, 0x7}, {0x1, 0x4, 0x10, 0x2}, {0x0, 0x3, 0xc, 0x3}]}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='*(+[;%\'\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080))
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc04005e140602000000000e0027001000004556df17f9000200000000000000", 0x2e}, {&(0x7f00000000c0)="990d06000000b9d883175b33c7474422486854bec9842969c40c64563ae0fb7cdb25c5cb8572c3d2ad59159d199494db231f90c90cb884f95ee4e6ea95c985c7cbecf4706b4b9c76bea9e9f678f2688b85e2cba735bdb4e153934ff7cb82c60c9807a0c48b452cecbb2b6c4147ba", 0x6e}], 0x2}, 0x4044)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095ce4dc65988e11b00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)

2.099499203s ago: executing program 3 (id=2571):
r0 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x40000000)
write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
openat$cgroup_pressure(r5, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000004bc0)="b90600076008008c989e08f00800bcd28c742ad2", 0x0, 0xfffffdfb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x29, 0x3}], 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xc00000000000000, 0x12)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c001a0008286d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004000300c5bb5b64f6985300", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080)

897.594035ms ago: executing program 3 (id=2572):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5)
r8 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000080), 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$kcm(r2, 0x0, 0x4004000)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)}, 0x1800)

896.710685ms ago: executing program 0 (id=2580):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

896.158625ms ago: executing program 2 (id=2573):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x182510, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10)

830.114017ms ago: executing program 1 (id=2574):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x182510, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10)

611.216893ms ago: executing program 2 (id=2575):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17aa31076b876c3e0000007ea60864160af36514001ac0080002000f000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4ff938037e786a6d0001800000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x9, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1b, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @jmp={0x5, 0x0, 0x0, 0x3, 0x9, 0x0, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x3, 0x2, 0xa, 0x4, 0xfffffffffffffff0}, @exit, @alu={0x3, 0x1, 0x1, 0x8, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xa, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x3, 0x2, 0x0, 0x9}], 0x10, 0x9b2}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x3a)
setsockopt$sock_attach_bpf(r4, 0x29, 0x3, 0x0, 0x500)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a80016002000014003fc000007391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

582.718004ms ago: executing program 3 (id=2576):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x104, 0x1108, 0x9, 0x1}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x7602, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab895d92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r5, 0x0, 0x8080)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x8d, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000b708000000000000dbaaf8fff1000000b5080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r9 = socket$kcm(0x22, 0x2, 0x21)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x80044943, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40))
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001480)={&(0x7f0000000000)="2e57c900aa055952445dbd6113e31e79a2bcc497661af2422ea6f4a0ffaade0e6f656fc69f3bc1856ddfc9b881aa0f1404448bb97f9bb6483f2fed8ede762d2873bbbaf7c01f95dd016ecbe2c07751b0bf0a89368dd24395e1b9eb30070eb98fe0e713a16e470c68e960b6ebc45c9c662a152da415db3af5be79e9b2180ee01fc4efa51bee2a1b623f188cd530c1f21bfae8d3f5bc9a55df884ce7ea6c68745a143683d79f8f5bd455e6e75710e7caba6c9a0696b691bea5595d0eaa7e29c7a07ebeae7bac5aa64095f6b2c4ca00022130ac58dd0f4630970512b23eb7dad4bbd277b2db24018fadd9256b60313f5b73", &(0x7f0000000180)=""/136, &(0x7f0000000240)="13e4ddc90c9ef1a58a9181aa3e98df895c0bb602fa9a16350625bf2b7feeadd79060bd60ebaf9ba7019b6837d3b09ea6ca086ff0bfab25f548da32ccbe5a66e1e503aeab491a18080f4757728b0c67c539b6a50b5b186a32f7d5a7b38088bf1caa084b8068dedf8feb0262597dd0feb58b766daa8931", &(0x7f0000000480)="8218f834714462c427f4bda840b0f17147b4e93ff96a82f995af7ca487dd61dc889c64bb92fb9abdc86f7117445a2cea61dabd3889953ca85bbf244b8a65c475a83ea39703fee1d68987258fa21469d78a4f2e81eda633e83d755536a20bc662a2bff73390d18135472e04de3723fc5b6a522634b0e182f67aac8a89c924f1f5c3b2308ca5919e3bc723423f15664613ff97aeff906ecf9f2c76b817cd0056cf66511e0bda27fbdb570b09fad506eb9bb8672938713dbc94c09cbc56855f10d9b2db4b953d19936acaed815ff2e479dc3db4fc20d4dc74f3b2e505b3add22d62c2e3de8e16427405cdb3b26c5688ee23262d70b32a8e186fef6608e27cc1fe098ebe27f1e3ebf0f8ba1d614a88dc54bd9ae888bed3ad05e73206bd762aeabf05768b3fa3bf9521cb38c59c0a82fd0b8a4f44575b7bb29077bf373b54d8bcabdda96b64f4c55cd8d28915aa5453991e5456905145064a0b49c0e93e1053feb1cf02a07dd397c8e129a6b75e084fb0ece52791641322baece37560bbd90ff916175653251cf04b36617ec79475f631994b09fa35072c34ed7290ad0b994ffd31017f9a9d44b5222c75f98a846395f7c7f74d24009ab735ce3c714ebecec4d6090ccc64bf0747b86e5399d24ffa0e6033ccac2a8d27ba3fa84044ef59e191323fecfd923c4c7c4af058d07bf1a4a4535dbee46d22766d9f9e80bcd0ae4c838b8f13e351ad5f61021f792d4f51b77d23c29a72c592d7908ab6f967aadd0d6f7d242ef067a6e224b5920895dd50d88e33fa065de9174c0b85ced7714420b475b5f5e13103c4e01b985d98c23f9f193468a7ae3f02e935f37ae74f40349edcca02c4a16c4ec4c389680f323e7e927ec04570f884ece0763e19c177d8235be5e6b08c75828c4df70ebc78b553e678ff343ce377f2138baeb12df39221a3121fdbbaa6428aad9138060d0b76f9b53caeaeb8d5bc51ae1c8bebe90a6aea4fc0266e5b5a69b64558906b386a166b752df6f1c131745ef3996fe8c9aee900245c181f0055f77edcb733b8587a6f64872f6f48d8453f84ab92cdba4cea1ccf8993bfa4fb22c30f0278fd9e687bf68bc5ca84536e27477b0d8a1e9d1d96df15e9a6d7178efd7575bd5bd0f023f480e7e80acff1e85962e2ec877abf99a845ed9a90fdaabc95bdea3b772d8e7f8a9c8b23b0773d63d81b0ea2b6ef6e34084cffcb211bdb3272366d66f4cd20e473a16ca17e27b91ebf5e89f40c98708f504138fcf4bd69804ae684c4909f0c5fe4fa3c752edee2f13bdcb9d9e7c9a99f3437ec8e3a51bbe0198ce35608510a89ff7da7ccf866b8fa0ffcd2dbf298831257cc6037c590ad5f88d85cce81b354cd12b121485710d75b4181fb1b587a4b581cdf76264f3cef08d988c7840f89bb1f2b2db0959a5249b94b5ff1b3e4e368a6cb0a1d6f207e6d79d9c5d921f047efe6c1e4a653ec28b66bf270e80f9c30326ca5ec4549948f5a5c7bf4ac3a14d1d60b7130b265e3b4374b5aaa9f02e4150f9964397040ca9b0231d556f41f3804c5aff279c1df3e3450087a792a0db2e4cd2d00466c3a6f3403cd77bc6dbb0117f28dad359c50839f3f9ecce4fcff3e8457d6ddda4b49afeea4de4cafc530d7314e0397e51f88d483f06387a8cf9b109b24da37563e5d2aa394d7d26ddf7eba03610638f7778ba86eb9638e588fcc8bfbccf2d83fb146a8c2687c9b7b4b979f7c019244954af3b686d51d580dc43c44bfcc1545ebd47d2e3dc164d0c30d49126737c40d70c6ef268378d27fcb9c5332c0b6aeb14cd1c3b4760deffbd50c83ecebf1741dc4c05a1ece3742352a73f5addc31f951ab33677a5b8410d5a8b541a007699d821062724086508cd0d9e745aafd9b85f572550e7d03b48c43d88756369d6e8a09c9c09faf12734870590286ecf250afccc102549ee32f73cb8a7ca30a504d48248b0c36bec2a22b15f2c9f7da9e35896cc31e43279a2d3d1341a257d02fa84c57c4c35619a1d6fe402f9b4caa96cbf7498580b0867f40862171e347c99f1bae77c379efd567066df3e10f966e28376a5337c298a783a12b9afcbf8399acdf3f9345e12f6d62e127da256f5830100b51d47d913fb120062004dcd155dc501fb1108160025c102efc408a9df512bb066cfcfaff0140e264915e6222a4a53d4ab62c5918c92a6c701cecceb1ff1c70fd48407dfc85eacb2ec01b92f8f5a801a943aa73f48a7752b6c592d1c30ebbec60857cf937b1ae2f8e2914985df6cf651cc6b3a607f061c6bc00eb358c6c3a9e4339942639e11e1c8c4d0e497bf2cedcd911937315ee7c544e22e3b49a19d33cbdf23569d5a1c6181f1d1fc12dddc9b1aaa7b91f2802f75fe687e7b344876ddfc80d85c8048ef11cd2ac55354ed4506f45bd700a64bfe5d787ba004b7f962b96cd1bf5e3fde823d8357d29619c10ae60b5e59fef874538e6216d1096fcfe08f183bd1adf8f901e12402ed7a05546897e13a237f40666c3a2848dc9d478e2f0002b56074fdf8ba5f0e8016a1f0857f874c23e647386a770f946f2eaed2faea0712f23f6dd9fc18c92e90c983766517b1e0242de8b71b30cc0e886cde0cf3db47516ee2f7ff122c839b68789a01ad576f3b06df542e85d3527020ef5b0eb90b78614ce12846abb666fb6b7d6f8b879572c1360fe558157b0555fc178813f28ce00d62abdc6da904a016524ca99f53b203cd93f0397db162716a4eff70707d7db6436a0190f2ea505aceb29606f0a7a24dc69d1d64667b4a16564420658bc3bc6a11f127f725e02a2144b53457cef89e679dff1a7011abcabc6044a70f25877afe3e922a8bd33afe0652435aeb2edcc2db03eda81de35a931f511815d73ed00dd55755c28b8a48de60328a5ffad1b41810cafa21a803eb4f2ac5edce279b5767f30de1576270c2d2b1125e0efaa71c95b80b0c368d70d0c236dbac432088f96618770d7bf70ca22d312e1ed639e35ab8ed42627708f814d33f635f71126952d917c60ad68f444293f99b96071185590ce013c41272b4e9428d78ca28688f8d5e9557453defbda6c22de157b537177e7297844819eb15152e200c6f7f58da7b12781c256393a498a45b540b88754fed63df82bea4620ff906cc2add75eeddb44196815fef80f2785d12db2728c824b8b18a0b2b2859561db57f1372e08e095c3c6a36b155a7da2e0d4cae3230b9dd02228598ba342d0bf2a0ec6ed0ce8f23a5babf5bec4a3866c27c604a166b7ac473d702312e5678c7789656ebd29f17e4347d84f28a5861769628d2829873d7f8a63d735157d05fe6c44144d7e3576eba879bade3dcba2f8682b1e649b9264874e1914752aa8cbc5d78dc557a0aac1db8125acba2b2e76501a263e1cf79f16197d8ea253bbc421ee9cb422858ca34ea0c6f501fe24331ec6ecda2711e324daecd974f4ec9753df50aee62c0b65e25b22af2c5d406773008fd4198b99884f9810631da5d8efb89921977eb147c3366973e5b55c52c63e6fb0dc66ff227984d0176733712cc914537966d7db31ef2bf4cbab198beecb70795f25acdcbc1501c7fd1bb6009fe36fad3693caf679bada2a1275ac875ff9a4b37076c5d7faf04e7bf36d5e3715c7940a0a3a0d8c2b46a8bf74e80edf8f359258c58f1a9eb0c203a6e00829c0b840d0a7a0d315289172997a96f63947c058bd3b38ad4daa38822de863b7d62af8b9bea9d8a29a212fe6f90551882c6e89d152607053bd91edfca057dd1d02325b5d45afb4050dd29cf9da19cc90fdbf806932eb2d1cc7c548657b4ec06a2175b2c18d0a2cd31048e1d5152c6a823afb64c456c3aa7381f90ef8c88190ce3e008467d70281dc0710c19099762e3df49a058657addd4ad7176aa8354ebe03b3b79993ee6abd45043d8cc4000cc8ed5088e680a70f2ee589b6f0ac429c6bb3d492cf6f6921cbb207aca3b40b8f6faf4338c2f61ca9f6c0d9803732412f29e9b2a4b34a40c5b300e28785d14f3b573887c74d14c0a431900c3b3f9ed32a0aff00ae9142ba27baa1e60bd5decae43ca3cecd2ccd9b4d4980a8df0cb57e374ab91f93d2649b8efb63bc1497446b2022bf63cce9bc5c4415ff689ec2969da64d8ff84f816f38dfd7fab82c4e17ed1f9b24f6525a00e45d19179235fc233759a3306733d4fe6f3058723015447edc66f73924ffb37e64867358f274e4733a9d7b8396af250c901c9a3838d89ab8baa402b67af82bb2de271da81a240861a7b2f4bddf4856c9a7454a916d5ca40ef7d514b305b2dcccb2b556986c1621b19fece63ce13d1f3960f8bd1512941bd307654b981015f9436ff8f6e43ea134f24c1bf28d541c277b8f3e40757120446d9bb415de45056bf1b9f1a11900040109a267a38aa9b39061683a0b096c3d2a6a929ed5248bee7902bc1a4d667da321d7a6c800f3a36eb09b7ad2e114772199e6e090acf6407f8d77180b05c13bb604e5c05e8d81f678937dc7677f238b93e56b56118f5b6e878413c7fe6ef19968ee52bdce27c4e4ae932aa784302e3f24a8969dcd50dd77288c923aa7dda51c68977166401dcd641db971273c290e79225add798b25a7f22081776c006f58c926d53a1097c105e8d6567061922c2b7bb71de27b7343f27c60b288b4d4611156b6c21f5cb73f3629b8746ad7de8866e04eec37de096f2038450176fd0a6b3f0f208ce35598338998947dd146f1d5fdf50031ce687a59e72759a27e296c89178ddcc979bc59b8c996df985a5b7736a6578cc901166b54f4138f343871972094bf5ce96d07fe52aab65b5ee32487cc551320582d661577432b6664cd447192ba94af53db16097a5f9bf3c9cd3ccb0ce848c188542117961448438d5422f9f78b5ecb31b89560118f0a00c93e3b829f55fd6e47b836fa71f592107c2e78f105d90e4bd926cee8876f714a8d2721350b99bab3ad039189ff80994dda15b63d3c91ac3cb9f884c61b1ef7738fba5644fb2884183dc259abbbb75743d63acd7baabf6178da543b1fa4aa25515f21b80c4792269a349e8553f16436dc36d8f04a377adac4c126d55a8d06d05d5291939743a318a9d94687584eae82c3475bf86399f021fd61d8815d3739307e2249c473fef77431eac04ed00dbe7b72ab4a0fb20fa2bd793d69eefca7353133c894302eac3329da30f1d3539663c0b09ecddc1a6c0bf64813a54959a3cb6052e2f30b85e604dbd81def902be8bf6406e582bfdee50ced4aca2abbc4a23fc8d8a5f68f2e0263c98936c4576b849c7e8302855988e81df91f46ed8136ed156343abf7015a067dfaa832bab77adfc7eefec1a53327f7474fbf996d621e0af5f92dcba17c3661c82592a70f0a132189a57b8756b8c5369490726bfb9181709f66eb6e7ebffea9e9e3090f78228bfd1bd3b2e499c996b263fbbe0c9adea3205582ef4e5e151a59b09c35a23ab2fa027f2652d5bf9202f00cc9ede4eade485e3784d934a9ee258f15a73fe0dc4cc44fb499e306d71e268555ad375046778e073676efdd83299818f0f1aab01c725e1de07b33a9c59f9b6ebc54b6be868907dc2ff83d81e4bfb217610b27167c20a241ca2503d10b60949c73e0a451d94848f47e9ffd6140f9f5853c99b64ce1950fb8b6cffd11168dafc2c2c0b3f63dc3aa163bf7dc67260d25ddfc3d514cac03f87a187bc810ef6893159a2c4e8349c331da7abab8ccfe703f0f3f08d713ba85f93352398781ee9b74c2c093574b3d6f1ba22b8a6fbac3d9581a3403d82ba1f5027603b0e21ae770c5d7b735bd2fdd60a9fb", 0x0, r0}, 0x38)

571.302224ms ago: executing program 0 (id=2577):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x200001e0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0xfffffffe}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="140000000000000000000000000000b35ce550000000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async)
r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r6) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x2000000}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x51}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r7}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xd, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="18280a00", @ANYRES32, @ANYBLOB="00000000ff010000"], &(0x7f00000009c0)='syzkaller\x00', 0x44d, 0x0, &(0x7f0000000a00), 0x41100, 0x10, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x5, 0x8, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000c00)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c40)=[{0x4, 0x2, 0x7}, {0x5, 0x3, 0x8, 0x8}, {0x0, 0x4, 0x0, 0x6}, {0x0, 0x1, 0xf, 0xa}], 0x10, 0x3}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x5, 0x8, 0x7, 0x10841, 0xffffffffffffffff, 0xe1a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x8}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1836000004000000004ad7b0a0c4b9dffd990200fcffffff0000000000800000"], &(0x7f0000000300)='syzkaller\x00', 0xe78, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000dc0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e00), &(0x7f0000000e40)=[{0x4, 0x3, 0x9}], 0x10, 0x400}, 0x94) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000440), 0x23, r7}, 0x38)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map=r7, r2, 0x16, 0x14, 0x0, @void, @value=r2}, 0x20) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff})
recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r10 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000380)=""/255, 0xff, <r11=>0x0, &(0x7f0000000480)=""/248, 0xf8}}, 0x10) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x4, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) (async)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="00ee000000000000b70500000800000085000000a700000000007d00ff7f0000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1f, 0x1d, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func, @jmp={0x5, 0x1, 0xa, 0x2, 0x8, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfce6, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x7, 0xd, 0x20, 0x10}, @ldst={0x2, 0x3, 0xe8193fca78b11982, 0x7, 0x8, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x23, r9, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x8, 0xfff}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f0000000b80)=[r12, r13, r14, r15], &(0x7f0000000bc0)=[{0x0, 0x3, 0xe, 0x3}], 0x10, 0x3}, 0x94)

425.521158ms ago: executing program 2 (id=2578):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10800fefffffe37153e370248078000f01700d1bd", 0x2e}], 0x1, 0x0, 0x64}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x10]}}, &(0x7f0000000100)=""/151, 0x28, 0x97, 0x1, 0x7}, 0x28)
unlink(&(0x7f0000000200)='./file0\x00')

414.759668ms ago: executing program 1 (id=2579):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000000), 0x4) (fail_nth: 2)

332.45332ms ago: executing program 2 (id=2581):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[{0x10, 0x84, 0x2}], 0x10}, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x6, 0x603}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5)
r8 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000080), 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$kcm(r2, 0x0, 0x4004000)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x1800)

285.553582ms ago: executing program 0 (id=2582):
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x6, 0x16, 0x20128}, 0x50)
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="c2e512c476edbffe2d10", 0xa}, {&(0x7f0000000000)="5ab488fb", 0x4}], 0x2}, 0x4000080)

35.288779ms ago: executing program 3 (id=2583):
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x9a, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00', 0x8000})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101200"/24], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)

0s ago: executing program 1 (id=2584):
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x182510, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r1], 0x10)

kernel console output (not intermixed with test programs):

etlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'.
[  631.662954][T10820] netlink: 'syz.2.1597': attribute type 12 has an invalid length.
[  631.680423][T10820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'.
[  631.798637][T10826] netlink: 'syz.3.1600': attribute type 10 has an invalid length.
[  631.812474][T10826] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1600'.
[  632.508201][T10840] net_ratelimit: 31614 callbacks suppressed
[  632.508242][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.546455][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.587916][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.631739][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.691791][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.751907][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.806533][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.841705][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.892322][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  632.931685][T10840] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  635.612333][T10848] netlink: 'syz.2.1606': attribute type 10 has an invalid length.
[  635.620242][T10848] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1606'.
[  635.987412][T10860] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1611'.
[  636.362244][T10868] netlink: 'syz.0.1614': attribute type 9 has an invalid length.
[  636.370331][T10868] netlink: 375 bytes leftover after parsing attributes in process `syz.0.1614'.
[  637.512962][T10871] net_ratelimit: 4060 callbacks suppressed
[  637.512998][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.529754][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.540576][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.552099][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.563027][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.573976][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.585141][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.596046][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.607106][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  637.620944][T10871] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  639.794840][T10887] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1622'.
[  639.866692][T10890] macsec0: entered promiscuous mode
[  639.883170][T10890] macsec0: entered allmulticast mode
[  639.908955][T10890] veth1_macvtap: entered allmulticast mode
[  640.052797][T10895] netlink: 'syz.1.1623': attribute type 10 has an invalid length.
[  640.101237][T10895] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1623'.
[  640.641988][T10907] netlink: 'syz.3.1627': attribute type 10 has an invalid length.
[  640.660946][T10907] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1627'.
[  641.275827][T10917] FAULT_INJECTION: forcing a failure.
[  641.275827][T10917] name failslab, interval 1, probability 0, space 0, times 0
[  641.288850][T10917] CPU: 1 PID: 10917 Comm: syz.3.1631 Not tainted syzkaller #0
[  641.296360][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  641.306455][T10917] Call Trace:
[  641.309774][T10917]  <TASK>
[  641.312739][T10917]  dump_stack_lvl+0x18c/0x250
[  641.317472][T10917]  ? show_regs_print_info+0x20/0x20
[  641.322721][T10917]  ? load_image+0x420/0x420
[  641.327266][T10917]  should_fail_ex+0x39d/0x4d0
[  641.331990][T10917]  should_failslab+0x9/0x20
[  641.336520][T10917]  slab_pre_alloc_hook+0x59/0x310
[  641.341582][T10917]  kmem_cache_alloc+0x5a/0x2d0
[  641.346379][T10917]  ? fib6_add_1+0xa41/0x1450
[  641.351006][T10917]  fib6_add_1+0xa41/0x1450
[  641.355490][T10917]  fib6_add+0x1ea/0x49c0
[  641.359767][T10917]  ? lockdep_hardirqs_on+0x98/0x150
[  641.364995][T10917]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  641.371193][T10917]  ? lock_acquire+0x208/0x420
[  641.375929][T10917]  ? fib6_update_sernum_stub+0x1e0/0x1e0
[  641.381600][T10917]  ? do_raw_spin_lock+0x11f/0x2c0
[  641.386670][T10917]  ? __rwlock_init+0x150/0x150
[  641.391465][T10917]  ? ip6_route_add+0x75/0x160
[  641.396171][T10917]  ip6_route_add+0x8a/0x160
[  641.400708][T10917]  addrconf_prefix_route+0x24d/0x330
[  641.406040][T10917]  ? fib6_may_remove_gc_list+0x290/0x290
[  641.411703][T10917]  ? atomic_notifier_call_chain+0x26/0x180
[  641.417546][T10917]  ? ipv6_count_addresses+0x190/0x190
[  641.422947][T10917]  ? __might_fault+0xaa/0x120
[  641.427649][T10917]  inet6_addr_add+0x64a/0xb60
[  641.432374][T10917]  addrconf_add_ifaddr+0x15a/0x1c0
[  641.437516][T10917]  ? addrconf_set_dstaddr+0x320/0x320
[  641.442924][T10917]  ? __lock_acquire+0x7d40/0x7d40
[  641.447985][T10917]  ? slab_free_freelist_hook+0x130/0x1a0
[  641.453657][T10917]  inet6_ioctl+0x14f/0x2d0
[  641.458096][T10917]  ? inet6_getname+0x650/0x650
[  641.462887][T10917]  ? tomoyo_path_number_perm+0x5b4/0x620
[  641.468553][T10917]  ? tomoyo_path_number_perm+0x217/0x620
[  641.474218][T10917]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  641.479714][T10917]  sock_do_ioctl+0xfc/0x310
[  641.484247][T10917]  ? sock_show_fdinfo+0xb0/0xb0
[  641.489125][T10917]  sock_ioctl+0x5ba/0x7e0
[  641.493472][T10917]  ? sock_poll+0x3e0/0x3e0
[  641.497915][T10917]  ? bpf_lsm_file_ioctl+0x9/0x10
[  641.502880][T10917]  ? security_file_ioctl+0x80/0xa0
[  641.508029][T10917]  ? sock_poll+0x3e0/0x3e0
[  641.512468][T10917]  __se_sys_ioctl+0xfd/0x170
[  641.517092][T10917]  do_syscall_64+0x55/0xa0
[  641.521530][T10917]  ? clear_bhb_loop+0x40/0x90
[  641.526255][T10917]  ? clear_bhb_loop+0x40/0x90
[  641.530980][T10917]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.536894][T10917] RIP: 0033:0x7f1a3ef9cdd9
[  641.541353][T10917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.560984][T10917] RSP: 002b:00007f1a3fd7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  641.569424][T10917] RAX: ffffffffffffffda RBX: 00007f1a3f215fa0 RCX: 00007f1a3ef9cdd9
[  641.577419][T10917] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000008
[  641.586029][T10917] RBP: 00007f1a3fd7f090 R08: 0000000000000000 R09: 0000000000000000
[  641.594021][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  641.602013][T10917] R13: 00007f1a3f216038 R14: 00007f1a3f215fa0 R15: 00007ffe6b49ac38
[  641.610029][T10917]  </TASK>
[  641.664966][ T3438] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  641.710270][T10919] FAULT_INJECTION: forcing a failure.
[  641.710270][T10919] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.749207][T10919] CPU: 1 PID: 10919 Comm: syz.2.1632 Not tainted syzkaller #0
[  641.756733][T10919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  641.766823][T10919] Call Trace:
[  641.770138][T10919]  <TASK>
[  641.773102][T10919]  dump_stack_lvl+0x18c/0x250
[  641.777833][T10919]  ? show_regs_print_info+0x20/0x20
[  641.783093][T10919]  ? load_image+0x420/0x420
[  641.787659][T10919]  ? __might_fault+0xaa/0x120
[  641.792387][T10919]  ? __lock_acquire+0x7d40/0x7d40
[  641.797455][T10919]  ? __might_fault+0xaa/0x120
[  641.802179][T10919]  should_fail_ex+0x39d/0x4d0
[  641.806928][T10919]  _copy_from_iter+0x1d9/0x12e0
[  641.811832][T10919]  ? __might_fault+0xaa/0x120
[  641.816552][T10919]  ? _copy_from_iter+0x24e/0x12e0
[  641.821645][T10919]  ? __virt_addr_valid+0x18c/0x540
[  641.826802][T10919]  ? __lock_acquire+0x7d40/0x7d40
[  641.831866][T10919]  ? copyout_mc+0x70/0x70
[  641.836237][T10919]  ? copyout_mc+0x70/0x70
[  641.840619][T10919]  ? __virt_addr_valid+0x18c/0x540
[  641.845780][T10919]  ? page_copy_sane+0x16a/0x270
[  641.850691][T10919]  copy_page_from_iter+0x7b/0x100
[  641.855761][T10919]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  641.861644][T10919]  tun_get_user+0x15db/0x3ca0
[  641.866372][T10919]  ? aa_file_perm+0x11b/0xee0
[  641.871121][T10919]  ? rcu_read_unlock+0xa0/0xa0
[  641.875951][T10919]  ? tun_get+0x1c/0x2e0
[  641.880253][T10919]  ? __lock_acquire+0x7d40/0x7d40
[  641.885352][T10919]  ? tun_get+0x1c/0x2e0
[  641.889577][T10919]  tun_chr_write_iter+0x119/0x200
[  641.894661][T10919]  vfs_write+0x46c/0x990
[  641.898960][T10919]  ? file_end_write+0x250/0x250
[  641.903878][T10919]  ? __fget_files+0x43d/0x4b0
[  641.908621][T10919]  ? __fdget_pos+0x1d8/0x330
[  641.913274][T10919]  ? ksys_write+0x75/0x260
[  641.917746][T10919]  ksys_write+0x150/0x260
[  641.922138][T10919]  ? __ia32_sys_read+0x90/0x90
[  641.926954][T10919]  ? lockdep_hardirqs_on+0x98/0x150
[  641.932204][T10919]  do_syscall_64+0x55/0xa0
[  641.936657][T10919]  ? clear_bhb_loop+0x40/0x90
[  641.941376][T10919]  ? clear_bhb_loop+0x40/0x90
[  641.946109][T10919]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.952048][T10919] RIP: 0033:0x7ff870f9cdd9
[  641.956505][T10919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.976156][T10919] RSP: 002b:00007ff871d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  641.984624][T10919] RAX: ffffffffffffffda RBX: 00007ff871215fa0 RCX: 00007ff870f9cdd9
[  641.992630][T10919] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  642.000651][T10919] RBP: 00007ff871d79090 R08: 0000000000000000 R09: 0000000000000000
[  642.008689][T10919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  642.016695][T10919] R13: 00007ff871216038 R14: 00007ff871215fa0 R15: 00007fffd63b9558
[  642.024728][T10919]  </TASK>
[  642.810239][T10939] FAULT_INJECTION: forcing a failure.
[  642.810239][T10939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  642.863369][T10939] CPU: 1 PID: 10939 Comm: syz.2.1637 Not tainted syzkaller #0
[  642.870951][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  642.881087][T10939] Call Trace:
[  642.884428][T10939]  <TASK>
[  642.887434][T10939]  dump_stack_lvl+0x18c/0x250
[  642.892219][T10939]  ? show_regs_print_info+0x20/0x20
[  642.897510][T10939]  ? load_image+0x420/0x420
[  642.902119][T10939]  ? __lock_acquire+0x7d40/0x7d40
[  642.907272][T10939]  ? snprintf+0xe9/0x140
[  642.911704][T10939]  should_fail_ex+0x39d/0x4d0
[  642.916489][T10939]  _copy_to_user+0x2f/0xa0
[  642.920995][T10939]  simple_read_from_buffer+0xe7/0x150
[  642.926490][T10939]  proc_fail_nth_read+0x1e8/0x260
[  642.931619][T10939]  ? proc_fault_inject_write+0x360/0x360
[  642.937376][T10939]  ? fsnotify_perm+0x271/0x5e0
[  642.942241][T10939]  ? proc_fault_inject_write+0x360/0x360
[  642.947970][T10939]  vfs_read+0x28b/0x970
[  642.952241][T10939]  ? kernel_read+0x1e0/0x1e0
[  642.957009][T10939]  ? __fget_files+0x28/0x4b0
[  642.961740][T10939]  ? __fget_files+0x28/0x4b0
[  642.966422][T10939]  ? __fget_files+0x43d/0x4b0
[  642.971217][T10939]  ? __fdget_pos+0x2a3/0x330
[  642.975897][T10939]  ? ksys_read+0x75/0x260
[  642.980324][T10939]  ksys_read+0x150/0x260
[  642.984670][T10939]  ? vfs_write+0x990/0x990
[  642.989213][T10939]  ? lockdep_hardirqs_on+0x98/0x150
[  642.994504][T10939]  do_syscall_64+0x55/0xa0
[  642.998999][T10939]  ? clear_bhb_loop+0x40/0x90
[  643.003754][T10939]  ? clear_bhb_loop+0x40/0x90
[  643.008520][T10939]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  643.014511][T10939] RIP: 0033:0x7ff870f5d60e
[  643.019003][T10939] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  643.038685][T10939] RSP: 002b:00007ff871d78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  643.047193][T10939] RAX: ffffffffffffffda RBX: 00007ff871d796c0 RCX: 00007ff870f5d60e
[  643.055236][T10939] RDX: 000000000000000f RSI: 00007ff871d790a0 RDI: 0000000000000007
[  643.063308][T10939] RBP: 00007ff871d79090 R08: 0000000000000000 R09: 0000000000000000
[  643.071370][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.079414][T10939] R13: 00007ff871216038 R14: 00007ff871215fa0 R15: 00007fffd63b9558
[  643.087610][T10939]  </TASK>
[  643.261203][T10943] netlink: 'syz.3.1638': attribute type 10 has an invalid length.
[  643.281021][T10943] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1638'.
[  643.290423][T10943] net_ratelimit: 7103 callbacks suppressed
[  643.290442][T10943] openvswitch: netlink: Flow key attr not present in new flow.
[  643.573030][T10951] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  643.607309][T10951] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1641'.
[  643.640298][T10951] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1641'.
[  643.738102][T10955] netlink: 'syz.0.1642': attribute type 21 has an invalid length.
[  643.759405][T10955] IPv6: NLM_F_CREATE should be specified when creating new route
[  643.793791][T10955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.801214][T10955] IPv6: NLM_F_CREATE should be set when creating new route
[  643.808548][T10955] IPv6: NLM_F_CREATE should be set when creating new route
[  643.815889][T10955] IPv6: NLM_F_CREATE should be set when creating new route
[  643.862590][T10956] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1642'.
[  643.905699][T10956] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1642'.
[  643.923284][T10957] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1642'.
[  644.107333][T10961] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  644.114073][T10961] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  644.912864][T10986] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1651'.
[  644.939152][T10986] bridge: RTM_NEWNEIGH with invalid state 0x1
[  645.131600][T10993] netlink: 'syz.2.1653': attribute type 10 has an invalid length.
[  645.162883][T10993] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1653'.
[  645.175646][T10993] openvswitch: netlink: Flow key attr not present in new flow.
[  645.508998][T11003] batadv_slave_0: entered promiscuous mode
[  645.515073][T11003] batadv_slave_0: entered allmulticast mode
[  645.532942][T11003] macsec0: entered promiscuous mode
[  645.538429][T11003] macsec0: entered allmulticast mode
[  645.569000][T11003] veth1_macvtap: entered allmulticast mode
[  645.678145][T11005] netlink: 'syz.3.1658': attribute type 3 has an invalid length.
[  645.686206][T11005] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1658'.
[  645.707842][T11005] netlink: 'syz.3.1658': attribute type 10 has an invalid length.
[  646.225887][T11012] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1662'.
[  646.238800][T11012] bridge_slave_1: default FDB implementation only supports local addresses
[  646.826135][T11028] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1667'.
[  646.942932][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  646.990970][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  647.022290][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  647.050967][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  647.081765][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  647.115858][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  647.506985][T11039] netlink: 'syz.1.1669': attribute type 10 has an invalid length.
[  647.515022][T11039] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1669'.
[  648.290755][T11027] net_ratelimit: 3792 callbacks suppressed
[  648.290794][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.307585][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.318083][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.328606][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.339124][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.356492][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.367324][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.377825][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.388350][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  648.398985][T11027] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  652.525120][T11077] netlink: 'syz.3.1683': attribute type 3 has an invalid length.
[  652.525632][T11078] netlink: 'syz.2.1682': attribute type 10 has an invalid length.
[  652.541033][T11077] netlink: 'syz.3.1683': attribute type 2 has an invalid length.
[  652.541059][T11077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1683'.
[  652.621127][T11078] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1682'.
[  653.301333][T11073] net_ratelimit: 6521 callbacks suppressed
[  653.301371][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.318551][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.331515][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.342593][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.353432][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.364402][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.375415][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.390163][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.408935][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  653.420170][T11073] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  655.224255][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  656.166552][T11096] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1691'.
[  656.504060][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  657.326076][T11115] netlink: 'syz.1.1697': attribute type 10 has an invalid length.
[  657.340908][T11115] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1697'.
[  658.310896][T11109] net_ratelimit: 9440 callbacks suppressed
[  658.310934][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.330867][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.342172][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.353198][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.364415][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.375023][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.386159][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.396653][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.408098][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  658.418384][T11109] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  660.612749][T11135] FAULT_INJECTION: forcing a failure.
[  660.612749][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  660.687526][T11135] CPU: 0 PID: 11135 Comm: syz.2.1704 Not tainted syzkaller #0
[  660.695063][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  660.705174][T11135] Call Trace:
[  660.708521][T11135]  <TASK>
[  660.711509][T11135]  dump_stack_lvl+0x18c/0x250
[  660.716274][T11135]  ? show_regs_print_info+0x20/0x20
[  660.721533][T11135]  ? load_image+0x420/0x420
[  660.726103][T11135]  ? __might_fault+0xaa/0x120
[  660.730831][T11135]  ? __lock_acquire+0x7d40/0x7d40
[  660.735915][T11135]  ? __might_fault+0xaa/0x120
[  660.740642][T11135]  should_fail_ex+0x39d/0x4d0
[  660.745455][T11135]  _copy_from_iter+0x1d9/0x12e0
[  660.750377][T11135]  ? __might_fault+0xaa/0x120
[  660.755110][T11135]  ? _copy_from_iter+0x24e/0x12e0
[  660.760201][T11135]  ? __virt_addr_valid+0x18c/0x540
[  660.765372][T11135]  ? __lock_acquire+0x7d40/0x7d40
[  660.770572][T11135]  ? copyout_mc+0x70/0x70
[  660.775059][T11135]  ? copyout_mc+0x70/0x70
[  660.779453][T11135]  ? __virt_addr_valid+0x18c/0x540
[  660.784630][T11135]  ? page_copy_sane+0x16a/0x270
[  660.789548][T11135]  copy_page_from_iter+0x7b/0x100
[  660.794643][T11135]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  660.800532][T11135]  tun_get_user+0x15db/0x3ca0
[  660.805278][T11135]  ? aa_file_perm+0x11b/0xee0
[  660.810016][T11135]  ? rcu_read_unlock+0xa0/0xa0
[  660.814850][T11135]  ? tun_get+0x1c/0x2e0
[  660.819055][T11135]  ? __lock_acquire+0x7d40/0x7d40
[  660.824134][T11135]  ? tun_get+0x1c/0x2e0
[  660.828357][T11135]  tun_chr_write_iter+0x119/0x200
[  660.833457][T11135]  vfs_write+0x46c/0x990
[  660.837764][T11135]  ? file_end_write+0x250/0x250
[  660.842728][T11135]  ? __fget_files+0x43d/0x4b0
[  660.847480][T11135]  ? __fdget_pos+0x1d8/0x330
[  660.852116][T11135]  ? ksys_write+0x75/0x260
[  660.856618][T11135]  ksys_write+0x150/0x260
[  660.861003][T11135]  ? __ia32_sys_read+0x90/0x90
[  660.865859][T11135]  ? lockdep_hardirqs_on+0x98/0x150
[  660.871118][T11135]  do_syscall_64+0x55/0xa0
[  660.875578][T11135]  ? clear_bhb_loop+0x40/0x90
[  660.880302][T11135]  ? clear_bhb_loop+0x40/0x90
[  660.885037][T11135]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.890999][T11135] RIP: 0033:0x7ff870f9cdd9
[  660.895469][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.915160][T11135] RSP: 002b:00007ff871d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  660.923627][T11135] RAX: ffffffffffffffda RBX: 00007ff871215fa0 RCX: 00007ff870f9cdd9
[  660.931654][T11135] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  660.939671][T11135] RBP: 00007ff871d79090 R08: 0000000000000000 R09: 0000000000000000
[  660.947681][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  660.955704][T11135] R13: 00007ff871216038 R14: 00007ff871215fa0 R15: 00007fffd63b9558
[  660.963743][T11135]  </TASK>
[  661.503759][T11146] netlink: 'syz.1.1709': attribute type 10 has an invalid length.
[  661.582971][T11146] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1709'.
[  663.320799][T11141] net_ratelimit: 11371 callbacks suppressed
[  663.320838][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.338240][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.349404][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.360577][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.371999][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.383645][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.394918][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.405748][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.417739][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  663.430408][T11141] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  665.012421][T11173] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0
[  668.163702][T11186] netlink: 'syz.1.1721': attribute type 10 has an invalid length.
[  668.201045][T11186] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1721'.
[  669.135042][T11205] net_ratelimit: 30846 callbacks suppressed
[  669.135087][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.210813][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.277099][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.307535][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.323388][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.336844][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.351095][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.365162][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.376676][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.396279][T11205] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  669.514812][T11214] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  672.303425][T11228] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1738'.
[  672.455050][T11239] netlink: 'syz.1.1741': attribute type 10 has an invalid length.
[  672.482878][T11239] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1741'.
[  673.216701][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  673.925400][T11257] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  674.363303][T11272] netlink: 'syz.1.1751': attribute type 10 has an invalid length.
[  674.385393][T11272] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1751'.
[  674.410604][T11272] .`: entered promiscuous mode
[  674.438905][T11272] bond_slave_0: entered promiscuous mode
[  674.464467][T11272] bond_slave_1: entered promiscuous mode
[  674.487873][T11272] team0: entered promiscuous mode
[  674.493493][T11272] team_slave_0: entered promiscuous mode
[  674.499721][T11272] team_slave_1: entered promiscuous mode
[  674.520496][T11272] batadv0: entered promiscuous mode
[  674.527605][T11272] 8021q: adding VLAN 0 to HW filter on device .`
[  674.539811][T11277] netlink: 'syz.0.1754': attribute type 10 has an invalid length.
[  674.546798][T11272] bridge0: port 3(.`) entered blocking state
[  674.554029][T11277] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1754'.
[  674.571144][T11277] net_ratelimit: 9375 callbacks suppressed
[  674.571162][T11277] openvswitch: netlink: Flow key attr not present in new flow.
[  674.574684][T11272] bridge0: port 3(.`) entered disabled state
[  674.604250][T11272] .`: entered allmulticast mode
[  674.609173][T11272] bond_slave_0: entered allmulticast mode
[  674.620025][T11272] bond_slave_1: entered allmulticast mode
[  674.630109][T11272] team0: entered allmulticast mode
[  674.639796][T11272] team_slave_0: entered allmulticast mode
[  674.646188][T11272] team_slave_1: entered allmulticast mode
[  674.660016][T11272] geneve0: entered allmulticast mode
[  674.685875][T11272] batadv0: entered allmulticast mode
[  674.707786][T11272] bridge0: port 3(.`) entered blocking state
[  674.714030][T11272] bridge0: port 3(.`) entered forwarding state
[  675.129141][ T3450] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  675.139424][ T3450] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  678.077246][T11304] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0
[  678.536107][T11314] netlink: 'syz.1.1765': attribute type 10 has an invalid length.
[  678.575535][T11314] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1765'.
[  678.630883][T11314] openvswitch: netlink: Flow key attr not present in new flow.
[  680.037540][T11335] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1775'.
[  680.634799][T11349] netlink: 'syz.3.1779': attribute type 10 has an invalid length.
[  680.692245][T11349] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1779'.
[  680.747360][T11349] openvswitch: netlink: Flow key attr not present in new flow.
[  683.123661][T11385] netlink: 'syz.2.1791': attribute type 10 has an invalid length.
[  683.183307][T11383] netlink: 'syz.0.1792': attribute type 46 has an invalid length.
[  683.197136][T11383] netlink: 'syz.0.1792': attribute type 46 has an invalid length.
[  683.202393][T11385] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1791'.
[  683.301687][T11385] openvswitch: netlink: Flow key attr not present in new flow.
[  685.049544][T11430] netlink: 'syz.2.1809': attribute type 10 has an invalid length.
[  685.070815][T11430] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1809'.
[  685.110626][T11430] openvswitch: netlink: Flow key attr not present in new flow.
[  685.944383][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  685.954220][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.321611][T11458] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  686.336304][T11458] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  686.410087][T11458] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1820'.
[  686.687467][T11470] netlink: 'syz.0.1825': attribute type 10 has an invalid length.
[  686.700303][T11470] netlink: 'syz.0.1825': attribute type 10 has an invalid length.
[  686.711761][T11470] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1825'.
[  686.730897][T11470] openvswitch: netlink: Message has 4 unknown bytes.
[  687.223146][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  687.802268][T11494] netlink: 'syz.2.1834': attribute type 39 has an invalid length.
[  688.022050][T11501] netlink: 'syz.3.1837': attribute type 10 has an invalid length.
[  688.029964][T11501] netlink: 'syz.3.1837': attribute type 10 has an invalid length.
[  688.044764][T11501] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1837'.
[  688.055158][T11501] openvswitch: netlink: Message has 4 unknown bytes.
[  688.885365][T11519] netlink: 'syz.0.1845': attribute type 10 has an invalid length.
[  688.911440][T11519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1845'.
[  688.946184][T11519] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  688.963663][T11519] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  689.141350][T11534] netlink: 'syz.0.1849': attribute type 10 has an invalid length.
[  689.167707][T11534] netlink: 'syz.0.1849': attribute type 10 has an invalid length.
[  689.189436][T11534] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1849'.
[  689.212244][T11534] openvswitch: netlink: Message has 4 unknown bytes.
[  689.908846][T11550] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  689.923257][T11550] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  690.038566][T11550] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1854'.
[  690.414399][T11557] netlink: 'syz.1.1857': attribute type 10 has an invalid length.
[  690.422578][  T341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  690.431588][T11557] netlink: 'syz.1.1857': attribute type 10 has an invalid length.
[  690.440629][T11557] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1857'.
[  690.459154][T11557] openvswitch: netlink: Message has 4 unknown bytes.
[  690.826953][T11569] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1860'.
[  690.860864][T11569] openvswitch: netlink: Message has 4 unknown bytes.
[  691.032896][T11566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1859'.
[  691.070536][T11566] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  691.082340][T11566] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  691.129829][T11566] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  691.412891][T11580] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1865'.
[  691.440946][T11580] openvswitch: netlink: Flow key attr not present in new flow.
[  692.259648][T11603] validate_nla: 4 callbacks suppressed
[  692.259666][T11603] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  692.310415][T11603] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  692.379609][T11603] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1872'.
[  692.450978][T11603] openvswitch: netlink: Message has 4 unknown bytes.
[  692.530102][T11607] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  692.551023][T11607] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  692.696468][T11606] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1873'.
[  692.824166][T11612] netlink: 'syz.0.1883': attribute type 10 has an invalid length.
[  692.839250][T11612] netlink: 'syz.0.1883': attribute type 10 has an invalid length.
[  692.850196][T11612] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1883'.
[  692.869390][T11614] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  692.877612][T11614] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  692.885895][T11612] openvswitch: netlink: Message has 4 unknown bytes.
[  692.887851][T11614] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1875'.
[  692.903413][T11614] openvswitch: netlink: Message has 4 unknown bytes.
[  693.002285][T11619] netlink: 'syz.3.1876': attribute type 10 has an invalid length.
[  693.021248][T11619] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1876'.
[  693.036971][T11619] openvswitch: netlink: Flow key attr not present in new flow.
[  693.967971][T11642] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1886'.
[  694.269858][T11646] netlink: 'syz.0.1887': attribute type 10 has an invalid length.
[  694.295850][T11648] netlink: 'syz.3.1888': attribute type 10 has an invalid length.
[  694.314276][T11648] openvswitch: netlink: Flow key attr not present in new flow.
[  694.324085][T11646] netlink: 'syz.0.1887': attribute type 10 has an invalid length.
[  694.367221][T11646] openvswitch: netlink: Message has 4 unknown bytes.
[  695.361432][T11675] openvswitch: netlink: Flow key attr not present in new flow.
[  695.682994][T11678] __nla_validate_parse: 4 callbacks suppressed
[  695.683012][T11678] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1898'.
[  695.737364][T11678] openvswitch: netlink: Message has 4 unknown bytes.
[  696.385692][T11694] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1905'.
[  696.505746][T11697] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.1906'.
[  696.567320][T11697] openvswitch: netlink: Flow key attr not present in new flow.
[  696.827859][T11706] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1909'.
[  696.837825][T11706] openvswitch: netlink: Message has 4 unknown bytes.
[  697.807242][T11728] validate_nla: 6 callbacks suppressed
[  697.807279][T11728] netlink: 'syz.2.1918': attribute type 10 has an invalid length.
[  697.838855][T11728] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1918'.
[  697.849131][T11728] openvswitch: netlink: Flow key attr not present in new flow.
[  697.879026][T11730] netlink: 'syz.1.1919': attribute type 10 has an invalid length.
[  697.895999][T11730] netlink: 'syz.1.1919': attribute type 10 has an invalid length.
[  697.922046][T11730] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1919'.
[  697.956489][T11730] openvswitch: netlink: Message has 4 unknown bytes.
[  699.345023][T11761] netlink: 'syz.0.1930': attribute type 10 has an invalid length.
[  699.355035][T11763] netlink: 'syz.1.1931': attribute type 10 has an invalid length.
[  699.368662][T11761] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1930'.
[  699.383542][T11763] netlink: 'syz.1.1931': attribute type 10 has an invalid length.
[  699.392157][T11761] openvswitch: netlink: Flow key attr not present in new flow.
[  699.411792][T11763] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1931'.
[  699.451171][T11763] openvswitch: netlink: Message has 4 unknown bytes.
[  700.952935][T11795] netlink: 'syz.2.1943': attribute type 10 has an invalid length.
[  700.981141][T11795] netlink: 'syz.2.1943': attribute type 10 has an invalid length.
[  700.989059][T11795] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1943'.
[  701.006659][T11796] netlink: 'syz.3.1942': attribute type 10 has an invalid length.
[  701.016383][T11796] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1942'.
[  701.026641][T11795] openvswitch: netlink: Message has 4 unknown bytes.
[  701.034464][T11796] openvswitch: netlink: Flow key attr not present in new flow.
[  702.640010][T11830] netlink: 'syz.3.1955': attribute type 10 has an invalid length.
[  702.668590][T11830] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1955'.
[  702.761372][T11830] openvswitch: netlink: Message has 4 unknown bytes.
[  702.975323][T11826] validate_nla: 1 callbacks suppressed
[  702.975341][T11826] netlink: 'syz.2.1954': attribute type 10 has an invalid length.
[  703.040459][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1954'.
[  703.155502][T11826] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  703.188452][T11826] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  703.699065][T11847] netlink: 'syz.0.1960': attribute type 10 has an invalid length.
[  703.726718][T11847] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1960'.
[  703.756540][T11847] openvswitch: netlink: Flow key attr not present in new flow.
[  703.960445][T11853] netlink: 'syz.0.1971': attribute type 10 has an invalid length.
[  703.981111][T11853] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1971'.
[  703.994028][T11853] openvswitch: netlink: Flow key attr not present in new flow.
[  704.187804][T11857] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1964'.
[  704.281885][ T3431] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  704.311616][T11863] netlink: 'syz.0.1966': attribute type 10 has an invalid length.
[  704.319515][T11863] netlink: 'syz.0.1966': attribute type 10 has an invalid length.
[  704.354338][T11863] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1966'.
[  704.389694][T11863] openvswitch: netlink: Message has 4 unknown bytes.
[  705.270473][T11886] netlink: 'syz.0.1975': attribute type 10 has an invalid length.
[  705.298046][T11886] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1975'.
[  705.333363][T11886] openvswitch: netlink: Flow key attr not present in new flow.
[  705.690468][T11891] netlink: 'syz.0.1984': attribute type 10 has an invalid length.
[  705.788876][T11891] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.1984'.
[  705.800864][T11891] openvswitch: netlink: Flow key attr not present in new flow.
[  705.990209][T11896] netlink: 'syz.3.1979': attribute type 10 has an invalid length.
[  706.008205][T11896] netlink: 'syz.3.1979': attribute type 10 has an invalid length.
[  706.031852][T11896] __nla_validate_parse: 2 callbacks suppressed
[  706.031867][T11896] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1979'.
[  706.073085][T11896] openvswitch: netlink: Message has 4 unknown bytes.
[  708.995105][T11931] netlink: 'syz.2.1990': attribute type 10 has an invalid length.
[  709.045986][T11931] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.1990'.
[  709.095777][T11931] openvswitch: netlink: Flow key attr not present in new flow.
[  709.224382][T11933] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1991'.
[  709.555442][T11936] netlink: 'syz.2.1992': attribute type 10 has an invalid length.
[  709.571463][T11936] netlink: 'syz.2.1992': attribute type 10 has an invalid length.
[  709.579439][T11936] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1992'.
[  709.589280][T11936] openvswitch: netlink: Message has 4 unknown bytes.
[  709.875637][T11951] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1998'.
[  710.175935][T11955] netlink: 'syz.2.2001': attribute type 10 has an invalid length.
[  710.224233][T11955] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.2001'.
[  710.237312][T11955] openvswitch: netlink: Flow key attr not present in new flow.
[  710.492598][T11961] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2002'.
[  712.200249][T11974] netlink: 'syz.3.2007': attribute type 10 has an invalid length.
[  712.270388][T11974] netlink: 'syz.3.2007': attribute type 10 has an invalid length.
[  712.290876][T11974] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2007'.
[  712.331450][T11974] openvswitch: netlink: Message has 4 unknown bytes.
[  713.639600][T11996] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2013'.
[  715.788025][T12005] netlink: 'syz.0.2017': attribute type 10 has an invalid length.
[  715.804385][T12005] netlink: 'syz.0.2017': attribute type 10 has an invalid length.
[  715.821295][T12005] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2017'.
[  715.844022][T12005] openvswitch: netlink: Message has 4 unknown bytes.
[  715.904731][T12007] netlink: 'syz.2.2018': attribute type 1 has an invalid length.
[  715.979498][T12007] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2018'.
[  715.995662][T12007] netlink: 'syz.2.2018': attribute type 1 has an invalid length.
[  717.414445][T12028] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2025'.
[  718.581116][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  719.444329][T12035] netlink: 'syz.1.2028': attribute type 10 has an invalid length.
[  719.460864][T12035] netlink: 'syz.1.2028': attribute type 10 has an invalid length.
[  719.502187][T12035] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2028'.
[  719.547086][T12035] openvswitch: netlink: Message has 4 unknown bytes.
[  719.814381][T12048] delete_channel: no stack
[  719.819113][T12048] delete_channel: no stack
[  719.917253][T12057] netlink: 'syz.3.2033': attribute type 3 has an invalid length.
[  719.925302][T12057] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2033'.
[  722.424498][ T3445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  724.278532][T12074] netlink: 'syz.2.2042': attribute type 10 has an invalid length.
[  724.300860][T12074] netlink: 'syz.2.2042': attribute type 10 has an invalid length.
[  724.323788][T12074] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2042'.
[  724.336311][T12074] openvswitch: netlink: Message has 4 unknown bytes.
[  724.558592][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  724.566708][T12081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  724.580114][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  724.592998][T12081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.606309][T12081] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  724.620063][T12081] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  724.644820][T12081] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  724.653182][T12081] batman_adv: batadv0: Removing interface: virt_wifi0
[  726.917861][T12081] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ
[  727.400030][T12110] delete_channel: no stack
[  727.451147][T12110] delete_channel: no stack
[  727.633198][T12113] netlink: 'syz.2.2054': attribute type 10 has an invalid length.
[  727.641182][T12113] netlink: 'syz.2.2054': attribute type 10 has an invalid length.
[  727.649075][T12113] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2054'.
[  727.658626][T12113] openvswitch: netlink: Message has 4 unknown bytes.
[  729.379659][T12121] netlink: 'syz.2.2057': attribute type 21 has an invalid length.
[  729.387819][T12121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2057'.
[  729.654534][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.662926][T12126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.707337][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.730028][T12126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  730.300518][T12126] .`: (slave batadv0): Releasing backup interface
[  730.315033][T12126] batadv0 (unregistering): left promiscuous mode
[  730.322707][T12126] batadv0 (unregistering): left allmulticast mode
[  730.519515][T12141] netlink: 'syz.0.2065': attribute type 10 has an invalid length.
[  730.527940][T12141] netlink: 'syz.0.2065': attribute type 10 has an invalid length.
[  730.552624][T12141] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2065'.
[  730.577699][T12141] openvswitch: netlink: Message has 4 unknown bytes.
[  731.113807][T12163] delete_channel: no stack
[  731.118495][T12163] delete_channel: no stack
[  732.850920][T12171] netlink: 'syz.1.2073': attribute type 21 has an invalid length.
[  732.860848][T12171] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2073'.
[  733.062572][T12183] netlink: 'syz.1.2077': attribute type 10 has an invalid length.
[  733.070586][T12183] netlink: 'syz.1.2077': attribute type 10 has an invalid length.
[  733.090725][T12183] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2077'.
[  733.175925][T12183] openvswitch: netlink: Message has 4 unknown bytes.
[  733.922804][T12206] delete_channel: no stack
[  733.927399][T12206] delete_channel: no stack
[  734.076154][T12211] netlink: 'syz.3.2088': attribute type 21 has an invalid length.
[  734.111305][T12211] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2088'.
[  734.134600][T12218] FAULT_INJECTION: forcing a failure.
[  734.134600][T12218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  734.149060][T12218] CPU: 0 PID: 12218 Comm: syz.0.2090 Not tainted syzkaller #0
[  734.156576][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  734.166677][T12218] Call Trace:
[  734.169982][T12218]  <TASK>
[  734.172932][T12218]  dump_stack_lvl+0x18c/0x250
[  734.177654][T12218]  ? show_regs_print_info+0x20/0x20
[  734.182900][T12218]  ? load_image+0x420/0x420
[  734.187441][T12218]  ? __might_fault+0xaa/0x120
[  734.192157][T12218]  ? __lock_acquire+0x7d40/0x7d40
[  734.197222][T12218]  should_fail_ex+0x39d/0x4d0
[  734.201937][T12218]  _copy_to_user+0x2f/0xa0
[  734.206389][T12218]  bpf_verifier_vlog+0x45c/0x870
[  734.211363][T12218]  __btf_verifier_log+0xe3/0x140
[  734.216329][T12218]  ? btf_check_sec_info+0x350/0x350
[  734.221556][T12218]  ? __lock_acquire+0x7d40/0x7d40
[  734.226608][T12218]  ? btf_parse_hdr+0x1f5/0x710
[  734.231405][T12218]  btf_parse_hdr+0x35c/0x710
[  734.236026][T12218]  btf_new_fd+0x397/0x9f0
[  734.240395][T12218]  ? bpf_btf_show_fdinfo+0x80/0x80
[  734.245533][T12218]  ? capable+0x88/0xe0
[  734.249648][T12218]  __sys_bpf+0x670/0x890
[  734.253920][T12218]  ? bpf_link_show_fdinfo+0x390/0x390
[  734.259334][T12218]  ? lock_chain_count+0x20/0x20
[  734.264215][T12218]  __x64_sys_bpf+0x7c/0x90
[  734.268663][T12218]  do_syscall_64+0x55/0xa0
[  734.273103][T12218]  ? clear_bhb_loop+0x40/0x90
[  734.277809][T12218]  ? clear_bhb_loop+0x40/0x90
[  734.282518][T12218]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  734.288452][T12218] RIP: 0033:0x7fd817b9cdd9
[  734.292896][T12218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.312538][T12218] RSP: 002b:00007fd818a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  734.320978][T12218] RAX: ffffffffffffffda RBX: 00007fd817e15fa0 RCX: 00007fd817b9cdd9
[  734.328978][T12218] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012
[  734.336986][T12218] RBP: 00007fd818a47090 R08: 0000000000000000 R09: 0000000000000000
[  734.344977][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  734.352985][T12218] R13: 00007fd817e16038 R14: 00007fd817e15fa0 R15: 00007ffd9d547308
[  734.361000][T12218]  </TASK>
[  734.477159][T12221] netlink: 'syz.0.2091': attribute type 10 has an invalid length.
[  734.486309][T12221] netlink: 'syz.0.2091': attribute type 10 has an invalid length.
[  734.497127][T12221] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2091'.
[  734.509758][T12221] openvswitch: netlink: Message has 4 unknown bytes.
[  735.303178][ T3455] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  736.615494][T12239] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2098'.
[  736.671259][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  736.678931][T12237] batman_adv: batadv0: Removing interface: batadv_slave_0
[  736.701916][T12239] netlink: 151496 bytes leftover after parsing attributes in process `syz.3.2098'.
[  736.723312][T12237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  736.737901][T12237] batman_adv: batadv0: Removing interface: batadv_slave_1
[  736.769424][T12237] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  736.790158][T12237] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  736.819964][T12237] batman_adv: batadv0: Interface deactivated: vlan1
[  736.839350][T12237] batman_adv: batadv0: Removing interface: vlan1
[  736.903020][T12237] .`: (slave batadv0): Releasing backup interface
[  737.032370][T12251] netlink: 'syz.1.2101': attribute type 10 has an invalid length.
[  737.040289][T12251] netlink: 'syz.1.2101': attribute type 10 has an invalid length.
[  737.082541][T12251] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2101'.
[  737.140835][T12251] openvswitch: netlink: Message has 4 unknown bytes.
[  737.207828][T12256] FAULT_INJECTION: forcing a failure.
[  737.207828][T12256] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  737.240888][T12256] CPU: 0 PID: 12256 Comm: syz.0.2103 Not tainted syzkaller #0
[  737.248428][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  737.258531][T12256] Call Trace:
[  737.261847][T12256]  <TASK>
[  737.264813][T12256]  dump_stack_lvl+0x18c/0x250
[  737.269553][T12256]  ? show_regs_print_info+0x20/0x20
[  737.274812][T12256]  ? load_image+0x420/0x420
[  737.279365][T12256]  ? __might_fault+0xaa/0x120
[  737.284086][T12256]  ? __lock_acquire+0x7d40/0x7d40
[  737.289186][T12256]  ? unix_ioctl+0x261/0x670
[  737.293735][T12256]  should_fail_ex+0x39d/0x4d0
[  737.298476][T12256]  _copy_from_user+0x2f/0xe0
[  737.303118][T12256]  sock_do_ioctl+0x190/0x310
[  737.307768][T12256]  ? sock_show_fdinfo+0xb0/0xb0
[  737.312678][T12256]  sock_ioctl+0x5ba/0x7e0
[  737.317090][T12256]  ? sock_poll+0x3e0/0x3e0
[  737.321570][T12256]  ? bpf_lsm_file_ioctl+0x9/0x10
[  737.326553][T12256]  ? security_file_ioctl+0x80/0xa0
[  737.331721][T12256]  ? sock_poll+0x3e0/0x3e0
[  737.336195][T12256]  __se_sys_ioctl+0xfd/0x170
[  737.340839][T12256]  do_syscall_64+0x55/0xa0
[  737.345295][T12256]  ? clear_bhb_loop+0x40/0x90
[  737.350012][T12256]  ? clear_bhb_loop+0x40/0x90
[  737.354751][T12256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.360689][T12256] RIP: 0033:0x7fd817b9cdd9
[  737.365145][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.384793][T12256] RSP: 002b:00007fd818a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  737.393244][T12256] RAX: ffffffffffffffda RBX: 00007fd817e15fa0 RCX: 00007fd817b9cdd9
[  737.401242][T12256] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000030
[  737.409228][T12256] RBP: 00007fd818a47090 R08: 0000000000000000 R09: 0000000000000000
[  737.417228][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.425212][T12256] R13: 00007fd817e16038 R14: 00007fd817e15fa0 R15: 00007ffd9d547308
[  737.433229][T12256]  </TASK>
[  737.795228][T12271] netlink: 'syz.2.2110': attribute type 3 has an invalid length.
[  737.823447][T12271] netlink: 'syz.2.2110': attribute type 1 has an invalid length.
[  737.842243][T12271] netlink: 'syz.2.2110': attribute type 2 has an invalid length.
[  737.863855][T12271] netlink: 198076 bytes leftover after parsing attributes in process `syz.2.2110'.
[  738.054304][T12281] netlink: 'syz.0.2113': attribute type 10 has an invalid length.
[  738.070870][T12281] netlink: 'syz.0.2113': attribute type 10 has an invalid length.
[  738.090985][T12281] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2113'.
[  738.112475][T12281] openvswitch: netlink: Message has 4 unknown bytes.
[  740.024923][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.032505][T12292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  740.040521][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  740.048124][T12292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.056652][T12292] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  740.064258][T12292] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  740.074603][T12292] batman_adv: batadv0: Interface deactivated: vlan1
[  740.090985][T12292] batman_adv: batadv0: Removing interface: vlan1
[  740.133192][T12292] .`: (slave batadv0): Releasing backup interface
[  740.404876][T12311] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2123'.
[  740.416468][T12311] netlink: zone id is out of range
[  740.425286][T12311] netlink: zone id is out of range
[  740.436630][T12311] netlink: del zone limit has 8 unknown bytes
[  740.490046][T12313] netlink: 'syz.3.2125': attribute type 10 has an invalid length.
[  740.563962][T12313] netlink: 'syz.3.2125': attribute type 10 has an invalid length.
[  740.630767][T12313] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2125'.
[  740.640197][T12313] openvswitch: netlink: Message has 4 unknown bytes.
[  742.234475][T12345] netlink: 'syz.1.2136': attribute type 10 has an invalid length.
[  742.259491][T12345] netlink: 'syz.1.2136': attribute type 10 has an invalid length.
[  742.283120][T12345] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2136'.
[  742.312826][T12345] openvswitch: netlink: Message has 4 unknown bytes.
[  744.413276][T12367] FAULT_INJECTION: forcing a failure.
[  744.413276][T12367] name failslab, interval 1, probability 0, space 0, times 0
[  744.491105][T12367] CPU: 1 PID: 12367 Comm: syz.1.2143 Not tainted syzkaller #0
[  744.498670][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.508770][T12367] Call Trace:
[  744.512096][T12367]  <TASK>
[  744.515062][T12367]  dump_stack_lvl+0x18c/0x250
[  744.519798][T12367]  ? show_regs_print_info+0x20/0x20
[  744.525045][T12367]  ? load_image+0x420/0x420
[  744.529691][T12367]  ? __might_sleep+0xe0/0xe0
[  744.534337][T12367]  ? __lock_acquire+0x7d40/0x7d40
[  744.539415][T12367]  should_fail_ex+0x39d/0x4d0
[  744.544150][T12367]  should_failslab+0x9/0x20
[  744.548724][T12367]  slab_pre_alloc_hook+0x59/0x310
[  744.553826][T12367]  ? __request_module+0x2ed/0x600
[  744.558891][T12367]  ? __request_module+0x2ed/0x600
[  744.563976][T12367]  __kmem_cache_alloc_node+0x53/0x250
[  744.569405][T12367]  ? __request_module+0x2ed/0x600
[  744.574493][T12367]  __kmalloc_node_track_caller+0xa2/0x230
[  744.580263][T12367]  kstrdup+0x3b/0x80
[  744.584203][T12367]  __request_module+0x2ed/0x600
[  744.589086][T12367]  ? module_enforce_rwx_sections+0x150/0x150
[  744.595105][T12367]  ? rcu_is_watching+0x15/0xb0
[  744.599929][T12367]  __inet_diag_dump+0x173/0x380
[  744.604835][T12367]  netlink_dump+0x747/0xe50
[  744.609388][T12367]  ? netlink_lookup+0x200/0x200
[  744.614282][T12367]  ? __kasan_kmalloc+0x8f/0xa0
[  744.619068][T12367]  ? __inet_diag_dump_start+0x886/0x9f0
[  744.624649][T12367]  ? netlink_lookup+0x30/0x200
[  744.629446][T12367]  __netlink_dump_start+0x5f1/0x810
[  744.634683][T12367]  inet_diag_handler_cmd+0x1e1/0x2c0
[  744.640009][T12367]  ? inet_diag_unregister+0xb0/0xb0
[  744.645232][T12367]  ? inet_diag_handler_get_info+0x7a0/0x7a0
[  744.651153][T12367]  ? inet_diag_dump_start+0x20/0x20
[  744.656379][T12367]  ? inet_diag_dump+0x50/0x50
[  744.661093][T12367]  ? sock_diag_lock_handler+0x19/0x280
[  744.666597][T12367]  ? sock_diag_lock_handler+0x19/0x280
[  744.672083][T12367]  ? inet_diag_unregister+0xb0/0xb0
[  744.677313][T12367]  sock_diag_rcv_msg+0x3d8/0x600
[  744.682282][T12367]  netlink_rcv_skb+0x241/0x4d0
[  744.687086][T12367]  ? sock_diag_bind+0xb0/0xb0
[  744.691805][T12367]  ? netlink_ack+0x1180/0x1180
[  744.696617][T12367]  ? __lock_acquire+0x7d40/0x7d40
[  744.701687][T12367]  ? netlink_deliver_tap+0x2e/0x1b0
[  744.706927][T12367]  sock_diag_rcv+0x2a/0x40
[  744.711372][T12367]  netlink_unicast+0x751/0x8d0
[  744.716188][T12367]  netlink_sendmsg+0x8d0/0xbf0
[  744.720994][T12367]  ? netlink_getsockopt+0x590/0x590
[  744.726231][T12367]  ? aa_sock_msg_perm+0x94/0x150
[  744.731204][T12367]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  744.736516][T12367]  ? security_socket_sendmsg+0x80/0xa0
[  744.741997][T12367]  ? netlink_getsockopt+0x590/0x590
[  744.747230][T12367]  ____sys_sendmsg+0x5ba/0x960
[  744.752048][T12367]  ? __asan_memset+0x22/0x40
[  744.756673][T12367]  ? __sys_sendmsg_sock+0x30/0x30
[  744.761725][T12367]  ? __import_iovec+0x5f2/0x850
[  744.766614][T12367]  ? import_iovec+0x73/0xa0
[  744.771153][T12367]  ___sys_sendmsg+0x2a6/0x360
[  744.775874][T12367]  ? get_pid_task+0x20/0x1e0
[  744.780497][T12367]  ? __sys_sendmsg+0x2a0/0x2a0
[  744.785311][T12367]  ? __lock_acquire+0x7d40/0x7d40
[  744.790561][T12367]  __se_sys_sendmsg+0x1c2/0x2b0
[  744.795445][T12367]  ? __x64_sys_sendmsg+0x80/0x80
[  744.800424][T12367]  ? lockdep_hardirqs_on+0x98/0x150
[  744.805653][T12367]  do_syscall_64+0x55/0xa0
[  744.810089][T12367]  ? clear_bhb_loop+0x40/0x90
[  744.814796][T12367]  ? clear_bhb_loop+0x40/0x90
[  744.819501][T12367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.825429][T12367] RIP: 0033:0x7ff920f9cdd9
[  744.829871][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.849513][T12367] RSP: 002b:00007ff921e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  744.857986][T12367] RAX: ffffffffffffffda RBX: 00007ff921215fa0 RCX: 00007ff920f9cdd9
[  744.865992][T12367] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000003
[  744.874089][T12367] RBP: 00007ff921e9f090 R08: 0000000000000000 R09: 0000000000000000
[  744.882124][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  744.890110][T12367] R13: 00007ff921216038 R14: 00007ff921215fa0 R15: 00007ffdefd83b38
[  744.898114][T12367]  </TASK>
[  744.973631][T12372] netlink: 'syz.3.2145': attribute type 10 has an invalid length.
[  744.988406][T12372] netlink: 'syz.3.2145': attribute type 10 has an invalid length.
[  745.013708][T12372] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2145'.
[  745.058172][T12372] openvswitch: netlink: Message has 4 unknown bytes.
[  745.100845][T12374] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2146'.
[  746.424890][ T5786] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11
[  746.761632][T12408] netlink: 'syz.3.2156': attribute type 10 has an invalid length.
[  746.788968][T12408] netlink: 'syz.3.2156': attribute type 10 has an invalid length.
[  746.812501][T12408] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2156'.
[  746.834268][T12408] openvswitch: netlink: Message has 4 unknown bytes.
[  747.017209][T12411] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2157'.
[  747.385921][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.392429][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  748.242052][T12443] FAULT_INJECTION: forcing a failure.
[  748.242052][T12443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  748.270975][T12443] CPU: 0 PID: 12443 Comm: syz.0.2168 Not tainted syzkaller #0
[  748.278508][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  748.288608][T12443] Call Trace:
[  748.291939][T12443]  <TASK>
[  748.294905][T12443]  dump_stack_lvl+0x18c/0x250
[  748.299637][T12443]  ? show_regs_print_info+0x20/0x20
[  748.304896][T12443]  ? load_image+0x420/0x420
[  748.309454][T12443]  ? __might_fault+0xaa/0x120
[  748.314172][T12443]  ? __lock_acquire+0x7d40/0x7d40
[  748.319257][T12443]  should_fail_ex+0x39d/0x4d0
[  748.323992][T12443]  _copy_to_user+0x2f/0xa0
[  748.328458][T12443]  bpf_verifier_vlog+0x45c/0x870
[  748.333466][T12443]  __btf_verifier_log+0xe3/0x140
[  748.338513][T12443]  ? btf_check_sec_info+0x350/0x350
[  748.343767][T12443]  ? __lock_acquire+0x7d40/0x7d40
[  748.348843][T12443]  ? btf_parse_hdr+0x1f5/0x710
[  748.353663][T12443]  btf_parse_hdr+0x35c/0x710
[  748.358308][T12443]  btf_new_fd+0x397/0x9f0
[  748.362713][T12443]  ? bpf_btf_show_fdinfo+0x80/0x80
[  748.367884][T12443]  ? capable+0x88/0xe0
[  748.372006][T12443]  __sys_bpf+0x670/0x890
[  748.376302][T12443]  ? bpf_link_show_fdinfo+0x390/0x390
[  748.381743][T12443]  ? lock_chain_count+0x20/0x20
[  748.386652][T12443]  __x64_sys_bpf+0x7c/0x90
[  748.391148][T12443]  do_syscall_64+0x55/0xa0
[  748.395612][T12443]  ? clear_bhb_loop+0x40/0x90
[  748.400341][T12443]  ? clear_bhb_loop+0x40/0x90
[  748.405076][T12443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  748.411018][T12443] RIP: 0033:0x7fd817b9cdd9
[  748.415472][T12443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  748.435123][T12443] RSP: 002b:00007fd818a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  748.443588][T12443] RAX: ffffffffffffffda RBX: 00007fd817e15fa0 RCX: 00007fd817b9cdd9
[  748.451602][T12443] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012
[  748.459617][T12443] RBP: 00007fd818a47090 R08: 0000000000000000 R09: 0000000000000000
[  748.467623][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  748.475632][T12443] R13: 00007fd817e16038 R14: 00007fd817e15fa0 R15: 00007ffd9d547308
[  748.483666][T12443]  </TASK>
[  748.647464][T12446] netlink: 'syz.0.2170': attribute type 10 has an invalid length.
[  748.655773][T12446] netlink: 'syz.0.2170': attribute type 10 has an invalid length.
[  748.668191][T12446] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2170'.
[  748.679200][T12446] openvswitch: netlink: Message has 4 unknown bytes.
[  749.220349][T12454] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2174'.
[  749.588504][T12463] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2178'.
[  749.605046][T12463] netlink: zone id is out of range
[  749.624137][T12463] netlink: zone id is out of range
[  749.671691][T12463] netlink: del zone limit has 8 unknown bytes
[  749.815503][T12467] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2185'.
[  750.406955][T12475] netlink: 'syz.1.2180': attribute type 10 has an invalid length.
[  750.423208][T12475] netlink: 'syz.1.2180': attribute type 10 has an invalid length.
[  750.444226][T12475] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2180'.
[  750.466443][T12475] openvswitch: netlink: Message has 4 unknown bytes.
[  750.581446][ T3450] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  751.346622][T12501] netlink: 'syz.0.2191': attribute type 10 has an invalid length.
[  751.361968][T12501] netlink: 'syz.0.2191': attribute type 10 has an invalid length.
[  751.379590][T12501] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2191'.
[  751.397857][T12501] openvswitch: netlink: Message has 4 unknown bytes.
[  751.982084][T12511] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2195'.
[  751.995421][T12511] netlink: zone id is out of range
[  752.004847][T12511] netlink: zone id is out of range
[  752.018593][T12511] netlink: del zone limit has 8 unknown bytes
[  754.427026][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  754.519405][T12534] netlink: 'syz.0.2202': attribute type 10 has an invalid length.
[  754.540831][T12534] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2202'.
[  754.563960][T12534] openvswitch: netlink: Flow key attr not present in new flow.
[  754.621762][T12538] FAULT_INJECTION: forcing a failure.
[  754.621762][T12538] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.637079][T12538] CPU: 0 PID: 12538 Comm: syz.2.2205 Not tainted syzkaller #0
[  754.644608][T12538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  754.654736][T12538] Call Trace:
[  754.658065][T12538]  <TASK>
[  754.661035][T12538]  dump_stack_lvl+0x18c/0x250
[  754.665873][T12538]  ? show_regs_print_info+0x20/0x20
[  754.671150][T12538]  ? load_image+0x420/0x420
[  754.675723][T12538]  ? __might_fault+0xaa/0x120
[  754.680450][T12538]  ? __lock_acquire+0x7d40/0x7d40
[  754.685523][T12538]  ? __might_fault+0xaa/0x120
[  754.690246][T12538]  should_fail_ex+0x39d/0x4d0
[  754.694993][T12538]  _copy_from_iter+0x1d9/0x12e0
[  754.699902][T12538]  ? __might_fault+0xaa/0x120
[  754.704620][T12538]  ? _copy_from_iter+0x24e/0x12e0
[  754.709724][T12538]  ? __virt_addr_valid+0x18c/0x540
[  754.714923][T12538]  ? __lock_acquire+0x7d40/0x7d40
[  754.720017][T12538]  ? copyout_mc+0x70/0x70
[  754.724401][T12538]  ? copyout_mc+0x70/0x70
[  754.728784][T12538]  ? __virt_addr_valid+0x18c/0x540
[  754.733961][T12538]  ? page_copy_sane+0x16a/0x270
[  754.738866][T12538]  copy_page_from_iter+0x7b/0x100
[  754.743941][T12538]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  754.749793][T12538]  tun_get_user+0x15db/0x3ca0
[  754.754533][T12538]  ? aa_file_perm+0x11b/0xee0
[  754.759244][T12538]  ? rcu_read_unlock+0xa0/0xa0
[  754.764049][T12538]  ? tun_get+0x1c/0x2e0
[  754.768231][T12538]  ? __lock_acquire+0x7d40/0x7d40
[  754.773290][T12538]  ? tun_get+0x1c/0x2e0
[  754.777475][T12538]  tun_chr_write_iter+0x119/0x200
[  754.782537][T12538]  vfs_write+0x46c/0x990
[  754.786821][T12538]  ? file_end_write+0x250/0x250
[  754.791726][T12538]  ? __fget_files+0x43d/0x4b0
[  754.796448][T12538]  ? __fdget_pos+0x1d8/0x330
[  754.801068][T12538]  ? ksys_write+0x75/0x260
[  754.805512][T12538]  ksys_write+0x150/0x260
[  754.809872][T12538]  ? __ia32_sys_read+0x90/0x90
[  754.814670][T12538]  ? lockdep_hardirqs_on+0x98/0x150
[  754.819896][T12538]  do_syscall_64+0x55/0xa0
[  754.824333][T12538]  ? clear_bhb_loop+0x40/0x90
[  754.829037][T12538]  ? clear_bhb_loop+0x40/0x90
[  754.833744][T12538]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  754.839706][T12538] RIP: 0033:0x7ff870f9cdd9
[  754.844148][T12538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.863784][T12538] RSP: 002b:00007ff871d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  754.872226][T12538] RAX: ffffffffffffffda RBX: 00007ff871215fa0 RCX: 00007ff870f9cdd9
[  754.880231][T12538] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  754.888226][T12538] RBP: 00007ff871d79090 R08: 0000000000000000 R09: 0000000000000000
[  754.896227][T12538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  754.904240][T12538] R13: 00007ff871216038 R14: 00007ff871215fa0 R15: 00007fffd63b9558
[  754.912268][T12538]  </TASK>
[  755.397696][T12554] netlink: 'syz.1.2212': attribute type 22 has an invalid length.
[  755.427072][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'.
[  755.638898][T12566] netlink: 'syz.3.2216': attribute type 10 has an invalid length.
[  755.659648][T12566] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2216'.
[  755.675021][T12566] openvswitch: netlink: Flow key attr not present in new flow.
[  755.815053][T12571] netlink: 'syz.1.2217': attribute type 10 has an invalid length.
[  755.907806][T12571] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.958797][T12571] bridge_slave_1: left allmulticast mode
[  755.972272][T12571] bridge_slave_1: left promiscuous mode
[  755.985535][T12571] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.048600][T12571] bridge_slave_1: entered promiscuous mode
[  756.057930][T12571] bridge_slave_1: entered allmulticast mode
[  756.082420][T12571] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  756.367185][T12598] FAULT_INJECTION: forcing a failure.
[  756.367185][T12598] name failslab, interval 1, probability 0, space 0, times 0
[  756.391197][T12598] CPU: 0 PID: 12598 Comm: syz.2.2224 Not tainted syzkaller #0
[  756.398729][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  756.408830][T12598] Call Trace:
[  756.412147][T12598]  <TASK>
[  756.415122][T12598]  dump_stack_lvl+0x18c/0x250
[  756.419854][T12598]  ? verify_lock_unused+0x140/0x140
[  756.425109][T12598]  ? show_regs_print_info+0x20/0x20
[  756.430409][T12598]  ? load_image+0x420/0x420
[  756.434981][T12598]  should_fail_ex+0x39d/0x4d0
[  756.439726][T12598]  should_failslab+0x9/0x20
[  756.444293][T12598]  slab_pre_alloc_hook+0x59/0x310
[  756.449380][T12598]  kmem_cache_alloc+0x5a/0x2d0
[  756.454208][T12598]  ? skb_clone+0x1eb/0x370
[  756.458684][T12598]  skb_clone+0x1eb/0x370
[  756.462988][T12598]  ? pfkey_broadcast_one+0x7d/0x340
[  756.468234][T12598]  pfkey_broadcast_one+0x9b/0x340
[  756.473311][T12598]  ? pfkey_broadcast+0x39c/0x3e0
[  756.478287][T12598]  pfkey_broadcast+0x3a9/0x3e0
[  756.483086][T12598]  ? pfkey_broadcast+0x48/0x3e0
[  756.487979][T12598]  pfkey_flush+0x15c/0x360
[  756.492445][T12598]  ? pfkey_register+0x890/0x890
[  756.497339][T12598]  ? kmem_cache_free+0xf8/0x270
[  756.502242][T12598]  pfkey_sendmsg+0xc45/0x10e0
[  756.506951][T12598]  ? __might_sleep+0xe0/0xe0
[  756.511607][T12598]  ? mark_lock+0x94/0x320
[  756.515970][T12598]  ? __lock_acquire+0x1273/0x7d40
[  756.521023][T12598]  ? pfkey_release+0x320/0x320
[  756.525823][T12598]  ? aa_sock_msg_perm+0x94/0x150
[  756.530807][T12598]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  756.536123][T12598]  ? security_socket_sendmsg+0x80/0xa0
[  756.541604][T12598]  ? pfkey_release+0x320/0x320
[  756.546396][T12598]  ____sys_sendmsg+0x5ba/0x960
[  756.551189][T12598]  ? __asan_memset+0x22/0x40
[  756.555810][T12598]  ? __sys_sendmsg_sock+0x30/0x30
[  756.560858][T12598]  ? __import_iovec+0x5f2/0x850
[  756.565737][T12598]  ? import_iovec+0x73/0xa0
[  756.570267][T12598]  ___sys_sendmsg+0x2a6/0x360
[  756.574965][T12598]  ? get_pid_task+0x20/0x1e0
[  756.579590][T12598]  ? __sys_sendmsg+0x2a0/0x2a0
[  756.584397][T12598]  ? __lock_acquire+0x7d40/0x7d40
[  756.589469][T12598]  __se_sys_sendmsg+0x1c2/0x2b0
[  756.594392][T12598]  ? __x64_sys_sendmsg+0x80/0x80
[  756.599362][T12598]  ? lockdep_hardirqs_on+0x98/0x150
[  756.604586][T12598]  do_syscall_64+0x55/0xa0
[  756.609020][T12598]  ? clear_bhb_loop+0x40/0x90
[  756.613728][T12598]  ? clear_bhb_loop+0x40/0x90
[  756.618435][T12598]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  756.624348][T12598] RIP: 0033:0x7ff870f9cdd9
[  756.628791][T12598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  756.648422][T12598] RSP: 002b:00007ff871d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  756.656856][T12598] RAX: ffffffffffffffda RBX: 00007ff871215fa0 RCX: 00007ff870f9cdd9
[  756.664857][T12598] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004
[  756.672857][T12598] RBP: 00007ff871d79090 R08: 0000000000000000 R09: 0000000000000000
[  756.680845][T12598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  756.688846][T12598] R13: 00007ff871216038 R14: 00007ff871215fa0 R15: 00007fffd63b9558
[  756.696867][T12598]  </TASK>
[  756.942793][T12609] netlink: 'syz.0.2227': attribute type 10 has an invalid length.
[  756.951021][T12609] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2227'.
[  756.960531][T12609] openvswitch: netlink: Flow key attr not present in new flow.
[  758.728567][T12622] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2232'.
[  758.783277][T12622] : renamed from veth0_to_bond (while UP)
[  758.851960][T12627] tap0: tun_chr_ioctl cmd 35108
[  758.937710][T12629] netlink: 'syz.1.2235': attribute type 10 has an invalid length.
[  758.968182][T12631] netlink: 'syz.2.2236': attribute type 10 has an invalid length.
[  758.980997][T12631] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.2236'.
[  758.990365][T12631] openvswitch: netlink: Flow key attr not present in new flow.
[  760.773691][T12641] netlink: 'syz.2.2240': attribute type 1 has an invalid length.
[  760.781669][T12641] netlink: 'syz.2.2240': attribute type 4 has an invalid length.
[  760.789429][T12641] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2240'.
[  760.971304][T12648] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2242'.
[  761.090999][T12656] netlink: 'syz.1.2246': attribute type 29 has an invalid length.
[  761.099393][T12656] netlink: 'syz.1.2246': attribute type 29 has an invalid length.
[  761.117310][T12656] netlink: 'syz.1.2246': attribute type 29 has an invalid length.
[  761.127492][T12656] netlink: 'syz.1.2246': attribute type 29 has an invalid length.
[  761.332872][T12663] netlink: 'syz.1.2248': attribute type 10 has an invalid length.
[  761.346755][T12662] netlink: 'syz.2.2249': attribute type 10 has an invalid length.
[  761.360789][T12663] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2248'.
[  761.376269][T12663] openvswitch: netlink: Flow key attr not present in new flow.
[  762.597100][T12684] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2256'.
[  764.642650][T12689] netlink: 'syz.3.2258': attribute type 10 has an invalid length.
[  764.935592][T12702] netlink: 'syz.3.2262': attribute type 10 has an invalid length.
[  764.956978][T12702] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2262'.
[  764.981771][T12702] openvswitch: netlink: Flow key attr not present in new flow.
[  765.377824][T12714] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2267'.
[  765.555643][T12722] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2270'.
[  766.179847][T12737] validate_nla: 1 callbacks suppressed
[  766.179865][T12737] netlink: 'syz.0.2277': attribute type 10 has an invalid length.
[  766.210235][T12737] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.2277'.
[  766.231530][T12737] openvswitch: netlink: Flow key attr not present in new flow.
[  766.329852][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  766.463698][T12745] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2280'.
[  766.476869][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'.
[  766.496858][T12747] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2281'.
[  766.990186][T12762] netlink: 'syz.2.2289': attribute type 10 has an invalid length.
[  767.002562][T12760] netlink: 'syz.1.2287': attribute type 10 has an invalid length.
[  767.010456][T12760] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2287'.
[  767.041197][T12762] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.2289'.
[  767.071192][T12762] openvswitch: netlink: Flow key attr not present in new flow.
[  767.597243][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  767.616695][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  767.631687][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  767.640053][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  767.648074][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  767.666045][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  767.828695][  T341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.840251][T12779] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2294'.
[  767.928567][  T341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.074111][  T341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.108761][T12770] chnl_net:caif_netlink_parms(): no params data found
[  768.178390][  T341] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.369842][T12770] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.377265][T12770] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.384837][T12770] bridge_slave_0: entered allmulticast mode
[  768.393044][T12770] bridge_slave_0: entered promiscuous mode
[  768.411000][T12770] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.420158][T12770] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.427486][T12770] bridge_slave_1: entered allmulticast mode
[  768.435434][T12770] bridge_slave_1: entered promiscuous mode
[  768.593450][T12770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  768.639676][T12770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  768.668073][T12797] netlink: 'syz.2.2299': attribute type 10 has an invalid length.
[  768.710323][T12797] openvswitch: netlink: Flow key attr not present in new flow.
[  768.908254][T12770] team0: Port device team_slave_0 added
[  768.985159][T12770] team0: Port device team_slave_1 added
[  769.139685][T12770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  769.147095][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  769.173895][T12770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  769.191016][T12810] netlink: 'syz.2.2303': attribute type 10 has an invalid length.
[  769.214599][T12770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  769.222320][T12770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  769.264079][T12770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  769.553473][T12770] hsr_slave_0: entered promiscuous mode
[  769.565365][T12770] hsr_slave_1: entered promiscuous mode
[  769.573165][T12770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  769.584835][T12770] Cannot create hsr debugfs directory
[  769.781246][ T5782] Bluetooth: hci4: command tx timeout
[  769.974354][T12835] bridge_slave_0: entered allmulticast mode
[  770.062188][T12839] netlink: 'syz.1.2311': attribute type 10 has an invalid length.
[  770.070486][T12839] __nla_validate_parse: 3 callbacks suppressed
[  770.070502][T12839] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2311'.
[  770.087324][T12839] openvswitch: netlink: Flow key attr not present in new flow.
[  770.452388][T12845] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2313'.
[  771.102826][  T341] hsr_slave_0: left promiscuous mode
[  771.133932][  T341] hsr_slave_1: left promiscuous mode
[  771.170922][  T341] hsr0: left allmulticast mode
[  771.176908][  T341] bridge0: port 3(hsr0) entered disabled state
[  771.194490][  T341] bridge_slave_1: left allmulticast mode
[  771.209603][  T341] bridge_slave_1: left promiscuous mode
[  771.221858][  T341] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.253883][  T341] bridge_slave_0: left allmulticast mode
[  771.265297][  T341] bridge_slave_0: left promiscuous mode
[  771.273343][  T341] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.337805][T12873] netlink: 'syz.3.2320': attribute type 10 has an invalid length.
[  771.360845][T12873] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2320'.
[  771.372569][  T341] veth1_macvtap: left allmulticast mode
[  771.378761][  T341] veth0_macvtap: left promiscuous mode
[  771.380968][T12873] openvswitch: netlink: Flow key attr not present in new flow.
[  771.401762][  T341] veth1_vlan: left promiscuous mode
[  771.409166][  T341] veth0_vlan: left promiscuous mode
[  771.650096][T12878] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2322'.
[  771.861991][ T5782] Bluetooth: hci4: command tx timeout
[  773.204635][  T341] .` (unregistering): (slave geneve0): Releasing backup interface
[  773.676900][  T341] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.955206][ T5782] Bluetooth: hci4: command tx timeout
[  773.979323][  T341] .` (unregistering): Released all slaves
[  774.216829][T12770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  774.251519][T12770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  774.286648][T12770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  774.307112][T12770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  774.556266][T12895] netlink: 'syz.3.2329': attribute type 10 has an invalid length.
[  774.619450][T12770] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.629015][T12895] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.2329'.
[  774.708632][T12899] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2330'.
[  774.719884][T12895] openvswitch: netlink: Flow key attr not present in new flow.
[  774.783592][T12770] 8021q: adding VLAN 0 to HW filter on device team0
[  774.799812][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.807021][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.838278][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.845470][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.545090][T12770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.669802][T12770] veth0_vlan: entered promiscuous mode
[  775.726129][T12770] veth1_vlan: entered promiscuous mode
[  775.854512][T12770] veth0_macvtap: entered promiscuous mode
[  775.896926][T12770] veth1_macvtap: entered promiscuous mode
[  775.975600][T12770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.021476][ T5782] Bluetooth: hci4: command tx timeout
[  776.042439][T12770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.083420][T12937] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2339'.
[  776.106449][T12770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.140998][T12770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.149770][T12770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.178500][T12770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.394303][T12947] FAULT_INJECTION: forcing a failure.
[  776.394303][T12947] name failslab, interval 1, probability 0, space 0, times 0
[  776.419460][T12947] CPU: 0 PID: 12947 Comm: syz.3.2342 Not tainted syzkaller #0
[  776.426985][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  776.437081][T12947] Call Trace:
[  776.440391][T12947]  <TASK>
[  776.443352][T12947]  dump_stack_lvl+0x18c/0x250
[  776.448090][T12947]  ? show_regs_print_info+0x20/0x20
[  776.453342][T12947]  ? load_image+0x420/0x420
[  776.457898][T12947]  ? __might_sleep+0xe0/0xe0
[  776.462536][T12947]  ? __lock_acquire+0x7d40/0x7d40
[  776.467611][T12947]  should_fail_ex+0x39d/0x4d0
[  776.472346][T12947]  should_failslab+0x9/0x20
[  776.476905][T12947]  slab_pre_alloc_hook+0x59/0x310
[  776.481991][T12947]  ? __lock_acquire+0x7d40/0x7d40
[  776.487101][T12947]  kmem_cache_alloc_node+0x60/0x320
[  776.492345][T12947]  ? __alloc_skb+0x103/0x2c0
[  776.496974][T12947]  __alloc_skb+0x103/0x2c0
[  776.501426][T12947]  netlink_sendmsg+0x66a/0xbf0
[  776.506229][T12947]  ? netlink_getsockopt+0x590/0x590
[  776.511471][T12947]  ? aa_sock_msg_perm+0x94/0x150
[  776.516436][T12947]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  776.521744][T12947]  ? security_socket_sendmsg+0x80/0xa0
[  776.527223][T12947]  ? netlink_getsockopt+0x590/0x590
[  776.532462][T12947]  ____sys_sendmsg+0x5ba/0x960
[  776.537260][T12947]  ? __asan_memset+0x22/0x40
[  776.541870][T12947]  ? __sys_sendmsg_sock+0x30/0x30
[  776.546916][T12947]  ? __import_iovec+0x5f2/0x850
[  776.551799][T12947]  ? import_iovec+0x73/0xa0
[  776.556326][T12947]  ___sys_sendmsg+0x2a6/0x360
[  776.561036][T12947]  ? get_pid_task+0x20/0x1e0
[  776.565656][T12947]  ? __sys_sendmsg+0x2a0/0x2a0
[  776.570468][T12947]  ? __lock_acquire+0x7d40/0x7d40
[  776.575545][T12947]  __se_sys_sendmsg+0x1c2/0x2b0
[  776.580437][T12947]  ? __x64_sys_sendmsg+0x80/0x80
[  776.585404][T12947]  ? lockdep_hardirqs_on+0x98/0x150
[  776.590634][T12947]  do_syscall_64+0x55/0xa0
[  776.595070][T12947]  ? clear_bhb_loop+0x40/0x90
[  776.599783][T12947]  ? clear_bhb_loop+0x40/0x90
[  776.604505][T12947]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  776.610433][T12947] RIP: 0033:0x7f1a3ef9cdd9
[  776.614885][T12947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.634520][T12947] RSP: 002b:00007f1a3fd7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  776.642953][T12947] RAX: ffffffffffffffda RBX: 00007f1a3f215fa0 RCX: 00007f1a3ef9cdd9
[  776.650948][T12947] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003
[  776.658940][T12947] RBP: 00007f1a3fd7f090 R08: 0000000000000000 R09: 0000000000000000
[  776.666933][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.674926][T12947] R13: 00007f1a3f216038 R14: 00007f1a3f215fa0 R15: 00007ffe6b49ac38
[  776.682933][T12947]  </TASK>
[  776.704973][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.715775][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.746659][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.760759][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.508570][T12974] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2349'.
[  778.201635][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  778.216133][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  778.224096][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  778.234360][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  778.251252][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  778.260059][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  778.275096][T12991] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2352'.
[  778.519189][ T3455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.746379][ T3455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.927081][ T3455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.085827][ T3455] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.419870][T12989] chnl_net:caif_netlink_parms(): no params data found
[  779.680178][T12989] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.687581][T12989] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.694996][T12989] bridge_slave_0: entered allmulticast mode
[  779.702673][T12989] bridge_slave_0: entered promiscuous mode
[  779.722981][T12989] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.732940][T12989] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.740183][T12989] bridge_slave_1: entered allmulticast mode
[  779.749146][T12989] bridge_slave_1: entered promiscuous mode
[  779.820028][T13034] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2362'.
[  779.968519][T12989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  780.025031][T12989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  780.220373][T12989] team0: Port device team_slave_0 added
[  780.309709][T12989] team0: Port device team_slave_1 added
[  780.344322][ T5786] Bluetooth: hci0: command tx timeout
[  780.707706][T12989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  780.725721][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.796471][T12989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  780.834522][T12989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  780.852162][T12989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  780.900023][T12989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  781.245497][T12989] hsr_slave_0: entered promiscuous mode
[  781.279245][T12989] hsr_slave_1: entered promiscuous mode
[  781.313442][T12989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  781.321987][T12989] Cannot create hsr debugfs directory
[  781.830824][T13081] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2371'.
[  782.420744][ T5786] Bluetooth: hci0: command tx timeout
[  782.584938][  T341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  782.637696][ T3455] hsr_slave_0: left promiscuous mode
[  782.656628][ T3455] hsr_slave_1: left promiscuous mode
[  782.748802][ T3455] veth1_macvtap: left promiscuous mode
[  782.758581][ T3455] veth0_macvtap: left promiscuous mode
[  782.768851][ T3455] veth1_vlan: left promiscuous mode
[  782.774441][ T3455] veth0_vlan: left promiscuous mode
[  784.510789][ T5786] Bluetooth: hci0: command tx timeout
[  784.701877][ T3455] .` (unregistering): (slave geneve0): Releasing backup interface
[  785.172104][ T3455] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  785.216022][ T3455] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  785.256304][ T3455] .` (unregistering): (slave bridge_slave_1): Releasing backup interface
[  785.471710][ T3455] .` (unregistering): Released all slaves
[  786.087682][T12989] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  786.144912][T12989] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  786.185221][T12989] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  786.222298][T12989] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  786.507316][T12989] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.543440][T12989] 8021q: adding VLAN 0 to HW filter on device team0
[  786.575796][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.583862][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.591396][ T5786] Bluetooth: hci0: command tx timeout
[  786.625606][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.632872][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state
[  787.021521][T13147] netlink: 'syz.3.2385': attribute type 10 has an invalid length.
[  787.228644][T12989] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.378673][T12989] veth0_vlan: entered promiscuous mode
[  787.396836][T12989] veth1_vlan: entered promiscuous mode
[  787.586419][T12989] veth0_macvtap: entered promiscuous mode
[  787.773091][T12989] veth1_macvtap: entered promiscuous mode
[  787.867988][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  787.910718][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  787.933029][T12989] batman_adv: batadv0: Interface activated: batadv_slave_0
[  787.956397][T12989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  787.981116][T12989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  788.005541][T12989] batman_adv: batadv0: Interface activated: batadv_slave_1
[  788.035899][T12989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  788.055536][T12989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  788.073836][T12989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  788.083210][T12989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  788.306364][T13187] netlink: 'syz.3.2394': attribute type 1 has an invalid length.
[  788.317302][T13187] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.2394'.
[  788.331529][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  788.339391][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  788.498585][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  788.510507][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  788.737289][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2399'.
[  788.783254][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2399'.
[  788.892336][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2399'.
[  790.019016][T13236] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2417'.
[  790.259413][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  790.284030][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  790.294368][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  790.322587][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  790.331687][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  790.339087][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  790.423260][  T341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.657467][  T341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.692624][T13257] netlink: 'syz.0.2426': attribute type 13 has an invalid length.
[  790.701611][T13257] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.2426'.
[  790.757839][  T341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.829185][T13261] FAULT_INJECTION: forcing a failure.
[  790.829185][T13261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  790.864910][T13261] CPU: 1 PID: 13261 Comm: syz.3.2427 Not tainted syzkaller #0
[  790.872443][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  790.882587][T13261] Call Trace:
[  790.885950][T13261]  <TASK>
[  790.888930][T13261]  dump_stack_lvl+0x18c/0x250
[  790.893707][T13261]  ? show_regs_print_info+0x20/0x20
[  790.898971][T13261]  ? load_image+0x420/0x420
[  790.903533][T13261]  ? __lock_acquire+0x7d40/0x7d40
[  790.908603][T13261]  ? snprintf+0xe9/0x140
[  790.912913][T13261]  should_fail_ex+0x39d/0x4d0
[  790.917641][T13261]  _copy_to_user+0x2f/0xa0
[  790.922107][T13261]  simple_read_from_buffer+0xe7/0x150
[  790.927560][T13261]  proc_fail_nth_read+0x1e8/0x260
[  790.932652][T13261]  ? proc_fault_inject_write+0x360/0x360
[  790.938342][T13261]  ? fsnotify_perm+0x271/0x5e0
[  790.943164][T13261]  ? proc_fault_inject_write+0x360/0x360
[  790.948853][T13261]  vfs_read+0x28b/0x970
[  790.953072][T13261]  ? kernel_read+0x1e0/0x1e0
[  790.957720][T13261]  ? __fget_files+0x28/0x4b0
[  790.962364][T13261]  ? __fget_files+0x28/0x4b0
[  790.967007][T13261]  ? __fget_files+0x43d/0x4b0
[  790.971777][T13261]  ? __fdget_pos+0x2a3/0x330
[  790.976426][T13261]  ? ksys_read+0x75/0x260
[  790.980812][T13261]  ksys_read+0x150/0x260
[  790.985111][T13261]  ? vfs_write+0x990/0x990
[  790.989579][T13261]  ? lockdep_hardirqs_on+0x98/0x150
[  790.994826][T13261]  do_syscall_64+0x55/0xa0
[  790.999292][T13261]  ? clear_bhb_loop+0x40/0x90
[  791.004031][T13261]  ? clear_bhb_loop+0x40/0x90
[  791.008767][T13261]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.014716][T13261] RIP: 0033:0x7f1a3ef5d60e
[  791.019186][T13261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  791.038890][T13261] RSP: 002b:00007f1a3fd7efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  791.047364][T13261] RAX: ffffffffffffffda RBX: 00007f1a3fd7f6c0 RCX: 00007f1a3ef5d60e
[  791.055388][T13261] RDX: 000000000000000f RSI: 00007f1a3fd7f0a0 RDI: 0000000000000007
[  791.063400][T13261] RBP: 00007f1a3fd7f090 R08: 0000000000000000 R09: 0000000000000000
[  791.071412][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  791.079418][T13261] R13: 00007f1a3f216038 R14: 00007f1a3f215fa0 R15: 00007ffe6b49ac38
[  791.087455][T13261]  </TASK>
[  791.184783][  T341] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.219934][T13268] netlink: 'syz.0.2429': attribute type 10 has an invalid length.
[  791.230964][T13268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2429'.
[  791.255297][T13268] batman_adv: batadv0: Adding interface: virt_wifi0
[  791.267579][T13268] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  791.295982][T13268] batman_adv: batadv0: Interface activated: virt_wifi0
[  791.316170][T13244] chnl_net:caif_netlink_parms(): no params data found
[  791.608323][T13281] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2433'.
[  791.638034][T13244] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.663106][T13244] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.699159][T13244] bridge_slave_0: entered allmulticast mode
[  791.707925][T13244] bridge_slave_0: entered promiscuous mode
[  791.720515][T13244] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.729627][T13244] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.757899][T13244] bridge_slave_1: entered allmulticast mode
[  791.772682][T13244] bridge_slave_1: entered promiscuous mode
[  791.806318][T13285] netlink: 'syz.2.2434': attribute type 1 has an invalid length.
[  791.822339][T13285] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2434'.
[  792.056044][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2438'.
[  792.206940][T13302] netlink: 'syz.3.2440': attribute type 2 has an invalid length.
[  792.218273][T13302] netlink: 'syz.3.2440': attribute type 1 has an invalid length.
[  792.273835][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  792.302704][T13304] netlink: 'syz.3.2440': attribute type 21 has an invalid length.
[  792.338408][T13304] netlink: 'syz.3.2440': attribute type 6 has an invalid length.
[  792.421178][ T5782] Bluetooth: hci1: command tx timeout
[  793.047609][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  793.325116][T13323] __nla_validate_parse: 5 callbacks suppressed
[  793.325142][T13323] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2444'.
[  793.357694][T13244] team0: Port device team_slave_0 added
[  793.418370][T13244] team0: Port device team_slave_1 added
[  793.823486][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  793.837990][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  793.895947][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  793.975742][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  793.989405][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  794.036097][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  794.300939][T13244] hsr_slave_0: entered promiscuous mode
[  794.319333][T13244] hsr_slave_1: entered promiscuous mode
[  794.373244][T13351] netlink: 'syz.2.2451': attribute type 10 has an invalid length.
[  794.386371][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2451'.
[  794.445453][T13351] batman_adv: batadv0: Adding interface: virt_wifi0
[  794.452988][T13351] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  794.493198][T13351] batman_adv: batadv0: Interface activated: virt_wifi0
[  794.511313][ T5782] Bluetooth: hci1: command tx timeout
[  795.419089][  T341] hsr_slave_0: left promiscuous mode
[  795.441901][  T341] hsr_slave_1: left promiscuous mode
[  795.450356][  T341] .`: left allmulticast mode
[  795.461188][  T341] bond_slave_0: left allmulticast mode
[  795.466713][  T341] bond_slave_1: left allmulticast mode
[  795.473102][  T341] team0: left allmulticast mode
[  795.478001][  T341] team_slave_0: left allmulticast mode
[  795.500974][  T341] team_slave_1: left allmulticast mode
[  795.511304][  T341] geneve0: left allmulticast mode
[  795.517631][  T341] bridge_slave_1: left allmulticast mode
[  795.524500][  T341] bridge0: port 3(.`) entered disabled state
[  795.534757][  T341] bridge_slave_0: left allmulticast mode
[  795.540455][  T341] bridge_slave_0: left promiscuous mode
[  795.547248][  T341] bridge0: port 1(bridge_slave_0) entered disabled state
[  795.578693][  T341] veth1_macvtap: left allmulticast mode
[  795.587496][  T341] veth0_macvtap: left promiscuous mode
[  795.596844][  T341] veth1_vlan: left promiscuous mode
[  795.605058][  T341] veth0_vlan: left promiscuous mode
[  795.799371][  T341] .` (unregistering): (slave geneve0): Releasing backup interface
[  796.294431][  T341] team_slave_1 (unregistering): left promiscuous mode
[  796.306577][  T341] team0 (unregistering): Port device team_slave_1 removed
[  796.353221][  T341] team_slave_0 (unregistering): left promiscuous mode
[  796.364843][  T341] team0 (unregistering): Port device team_slave_0 removed
[  796.404433][  T341] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  796.415375][  T341] bond_slave_1 (unregistering): left promiscuous mode
[  796.459381][  T341] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  796.476185][  T341] bond_slave_0 (unregistering): left promiscuous mode
[  796.519306][  T341] .` (unregistering): (slave bridge_slave_1): Releasing backup interface
[  796.528112][  T341] bridge_slave_1 (unregistering): left promiscuous mode
[  796.584006][ T5782] Bluetooth: hci1: command tx timeout
[  796.772905][  T341] .` (unregistering): (slave team0): Releasing backup interface
[  796.785190][  T341] team0 (unregistering): left promiscuous mode
[  796.815672][  T341] .` (unregistering): Released all slaves
[  796.976440][T13377] netlink: 'syz.0.2458': attribute type 10 has an invalid length.
[  796.990392][T13377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2458'.
[  797.001065][T13377] ipvlan1: entered promiscuous mode
[  797.006354][T13377] ipvlan1: entered allmulticast mode
[  797.013039][T13377] veth0_vlan: entered allmulticast mode
[  797.026679][T13377] bridge0: port 3(ipvlan1) entered blocking state
[  797.033430][T13377] bridge0: port 3(ipvlan1) entered disabled state
[  797.042619][T13377] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  797.304691][T13393] netlink: 'syz.2.2460': attribute type 21 has an invalid length.
[  797.335614][T13393] netlink: 'syz.2.2460': attribute type 1 has an invalid length.
[  797.358193][ T3431] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  797.394269][T13393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2460'.
[  797.423851][T13392] netlink: 'syz.2.2460': attribute type 2 has an invalid length.
[  797.440731][T13392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2460'.
[  797.541167][T13244] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  797.564672][T13244] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  797.608073][T13244] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  797.635431][T13244] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  797.917398][T13244] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.928982][T13408] netlink: 'syz.3.2462': attribute type 10 has an invalid length.
[  797.950372][T13408] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2462'.
[  798.022965][T13244] 8021q: adding VLAN 0 to HW filter on device team0
[  798.056198][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.063450][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  798.086206][T13110] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.093406][T13110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  798.181690][T13414] netlink: 'syz.0.2464': attribute type 46 has an invalid length.
[  798.210833][T13414] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2464'.
[  798.351804][T13420] netlink: 'syz.2.2466': attribute type 1 has an invalid length.
[  798.359728][T13420] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2466'.
[  798.463838][T13420] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2466'.
[  798.661036][ T5782] Bluetooth: hci1: command tx timeout
[  798.823233][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  798.931501][T13244] veth0_vlan: entered promiscuous mode
[  798.950511][T13244] veth1_vlan: entered promiscuous mode
[  799.028555][T13244] veth0_macvtap: entered promiscuous mode
[  799.043486][T13244] veth1_macvtap: entered promiscuous mode
[  799.093454][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  799.120729][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.144597][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  799.158848][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.183796][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  799.234434][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.245327][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.271252][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.282629][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.294928][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.366858][T13244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.380015][T13244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.409728][T13244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.432981][T13244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.678905][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.702439][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.793581][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.837541][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  800.106164][T13456] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2474'.
[  800.469843][T13474] netlink: 'syz.1.2477': attribute type 46 has an invalid length.
[  800.495185][T13474] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2477'.
[  800.737998][T13483] netlink: 'syz.3.2480': attribute type 2 has an invalid length.
[  800.757041][T13483] netlink: 'syz.3.2480': attribute type 1 has an invalid length.
[  800.775405][T13483] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.2480'.
[  801.565733][T13499] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  802.491093][T13520] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2486'.
[  802.667013][T13525] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2488'.
[  803.023849][T13539] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2492'.
[  803.272874][T13549] netlink: 'syz.2.2493': attribute type 46 has an invalid length.
[  803.289080][T13535] delete_channel: no stack
[  803.307024][T13549] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2493'.
[  804.669740][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  804.681048][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  804.691530][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  804.701556][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  804.710856][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  804.733291][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  805.087623][T13566] chnl_net:caif_netlink_parms(): no params data found
[  805.236805][T13566] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.247419][T13566] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.260962][T13566] bridge_slave_0: entered allmulticast mode
[  805.268676][T13566] bridge_slave_0: entered promiscuous mode
[  805.285068][T13566] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.299324][T13566] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.308541][T13566] bridge_slave_1: entered allmulticast mode
[  805.324974][T13566] bridge_slave_1: entered promiscuous mode
[  805.385989][T13566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  805.406865][T13566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  805.479185][T13566] team0: Port device team_slave_0 added
[  805.495042][T13566] team0: Port device team_slave_1 added
[  805.557442][T13566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  805.566261][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.598807][T13566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.618172][T13566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  805.629952][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.668781][T13566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  806.546366][T13566] hsr_slave_0: entered promiscuous mode
[  806.581827][T13566] hsr_slave_1: entered promiscuous mode
[  806.621559][T13566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  806.629245][T13566] Cannot create hsr debugfs directory
[  806.820773][ T5782] Bluetooth: hci3: command tx timeout
[  806.836695][T13575] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2498'.
[  807.215798][T13566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.297015][T13583] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2502'.
[  807.384535][T13566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.513647][T13566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.548543][T13585] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  807.693766][T13566] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.739121][T13594] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.2507'.
[  807.771106][T13592] netlink: 'syz.2.2506': attribute type 10 has an invalid length.
[  807.798542][T13592] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.807824][T13592] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.929372][T13592] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.937530][T13592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  807.947317][T13592] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.955425][T13592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  807.996512][T13592] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  808.828846][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  808.840804][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  808.910729][ T5782] Bluetooth: hci3: command tx timeout
[  810.229514][T13566] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  810.257178][T13566] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  810.263243][T13604] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2510'.
[  810.287180][T13566] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  810.322985][T13566] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  810.645691][T13566] 8021q: adding VLAN 0 to HW filter on device bond0
[  810.806873][T13566] 8021q: adding VLAN 0 to HW filter on device team0
[  810.869616][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state
[  810.876863][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state
[  810.916312][ T3438] bridge0: port 2(bridge_slave_1) entered blocking state
[  810.923555][ T3438] bridge0: port 2(bridge_slave_1) entered forwarding state
[  810.980958][ T5782] Bluetooth: hci3: command tx timeout
[  811.612331][T13566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  811.822603][T13636] netlink: 539 bytes leftover after parsing attributes in process `syz.0.2517'.
[  813.072364][ T5782] Bluetooth: hci3: command tx timeout
[  814.876520][T13566] veth0_vlan: entered promiscuous mode
[  814.978407][T13647] netlink: 'syz.1.2524': attribute type 3 has an invalid length.
[  814.990875][T13647] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2524'.
[  815.065456][T13566] veth1_vlan: entered promiscuous mode
[  815.354920][  T341] hsr_slave_0: left promiscuous mode
[  815.373596][  T341] hsr_slave_1: left promiscuous mode
[  815.446819][  T341] veth1_vlan: left promiscuous mode
[  815.461200][  T341] veth0_vlan: left promiscuous mode
[  816.609551][  T341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  816.660171][  T341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  816.706615][  T341] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  816.955916][  T341] bond0 (unregistering): Released all slaves
[  816.993285][T13655] netlink: 'syz.1.2527': attribute type 10 has an invalid length.
[  817.001991][T13655] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.009531][T13655] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.054158][T13655] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.061436][T13655] bridge0: port 2(bridge_slave_1) entered forwarding state
[  817.068918][T13655] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.076206][T13655] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.093684][T13655] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  817.110332][T13660] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  817.172176][T13566] veth0_macvtap: entered promiscuous mode
[  817.197185][T13566] veth1_macvtap: entered promiscuous mode
[  817.294444][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  817.316625][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.355932][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  817.366786][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.384267][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  817.398565][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.422796][T13566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  817.447111][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  817.470698][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.480566][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  817.506115][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.516394][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  817.533184][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  817.545645][T13566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  817.566657][T13678] netlink: 'syz.2.2533': attribute type 10 has an invalid length.
[  818.221733][T13678] team0: Port device geneve1 added
[  818.227759][T13673] netlink: 'syz.1.2532': attribute type 2 has an invalid length.
[  818.260833][T13673] netlink: 'syz.1.2532': attribute type 8 has an invalid length.
[  818.268849][T13673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2532'.
[  818.344635][T13566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.382022][T13566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.396992][T13566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  818.405981][T13566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  818.451859][T13685] netlink: 'syz.0.2535': attribute type 9 has an invalid length.
[  818.463060][T13685] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2535'.
[  818.545232][T13687] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2536'.
[  818.784056][T13687] syz.2.2536 (13687) used obsolete PPPIOCDETACH ioctl
[  818.940680][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.948680][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.013616][T13662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  819.038974][T13662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.845817][T13709] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  819.938740][T13711] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  820.301631][T13727] netlink: 'syz.3.2544': attribute type 10 has an invalid length.
[  820.665040][T13734] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2546'.
[  820.831181][T13727] team0: Port device geneve1 added
[  821.021673][T13727] syz.3.2544 (13727) used greatest stack depth: 16968 bytes left
[  821.375942][T13744] netlink: 'syz.0.2550': attribute type 25 has an invalid length.
[  821.386200][T13744] netlink: 'syz.0.2550': attribute type 28 has an invalid length.
[  822.443907][T13762] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2557'.
[  823.459554][T13781] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2562'.
[  823.476991][T13780] netlink: 'syz.1.2561': attribute type 10 has an invalid length.
[  823.681820][T13780] team0: Port device geneve1 added
[  823.716073][T13787] netlink: 'syz.0.2566': attribute type 19 has an invalid length.
[  823.727620][T13787] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2566'.
[  823.758036][T13785] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  824.766676][T13796] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2570'.
[  824.832761][T13796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2570'.
[  824.850234][T13792] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2568'.
[  826.287865][T13819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2575'.
[  826.345334][T13818] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2576'.
[  826.443494][T13817] delete_channel: no stack
[  826.481666][T13828] FAULT_INJECTION: forcing a failure.
[  826.481666][T13828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  826.510671][T13828] CPU: 1 PID: 13828 Comm: syz.1.2579 Not tainted syzkaller #0
[  826.518229][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  826.528327][T13828] Call Trace:
[  826.531630][T13828]  <TASK>
[  826.534594][T13828]  dump_stack_lvl+0x18c/0x250
[  826.539312][T13828]  ? show_regs_print_info+0x20/0x20
[  826.544547][T13828]  ? load_image+0x420/0x420
[  826.549080][T13828]  ? __lock_acquire+0x7d40/0x7d40
[  826.554129][T13828]  ? snprintf+0xe9/0x140
[  826.558408][T13828]  should_fail_ex+0x39d/0x4d0
[  826.563148][T13828]  _copy_to_user+0x2f/0xa0
[  826.567593][T13828]  simple_read_from_buffer+0xe7/0x150
[  826.573005][T13828]  proc_fail_nth_read+0x1e8/0x260
[  826.578067][T13828]  ? proc_fault_inject_write+0x360/0x360
[  826.583741][T13828]  ? fsnotify_perm+0x271/0x5e0
[  826.588539][T13828]  ? proc_fault_inject_write+0x360/0x360
[  826.594205][T13828]  vfs_read+0x28b/0x970
[  826.598420][T13828]  ? kernel_read+0x1e0/0x1e0
[  826.603039][T13828]  ? __fget_files+0x28/0x4b0
[  826.607704][T13828]  ? __fget_files+0x28/0x4b0
[  826.612346][T13828]  ? __fget_files+0x43d/0x4b0
[  826.617060][T13828]  ? __fdget_pos+0x2a3/0x330
[  826.621687][T13828]  ? ksys_read+0x75/0x260
[  826.626064][T13828]  ksys_read+0x150/0x260
[  826.630339][T13828]  ? vfs_write+0x990/0x990
[  826.634786][T13828]  ? lockdep_hardirqs_on+0x98/0x150
[  826.640047][T13828]  do_syscall_64+0x55/0xa0
[  826.644500][T13828]  ? clear_bhb_loop+0x40/0x90
[  826.649203][T13828]  ? clear_bhb_loop+0x40/0x90
[  826.653930][T13828]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  826.659966][T13828] RIP: 0033:0x7f955b95d60e
[  826.664402][T13828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  826.684029][T13828] RSP: 002b:00007f9559bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  826.692467][T13828] RAX: ffffffffffffffda RBX: 00007f9559bf66c0 RCX: 00007f955b95d60e
[  826.700459][T13828] RDX: 000000000000000f RSI: 00007f9559bf60a0 RDI: 0000000000000004
[  826.708455][T13828] RBP: 00007f9559bf6090 R08: 0000000000000000 R09: 0000000000000000
[  826.716452][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  826.724459][T13828] R13: 00007f955bc16038 R14: 00007f955bc15fa0 R15: 00007fff34bcf088
[  826.732473][T13828]  </TASK>
[  826.833461][    C0] 
[  826.833470][    C0] ================================
[  826.833477][    C0] WARNING: inconsistent lock state
[  826.833487][    C0] syzkaller #0 Not tainted
[  826.833497][    C0] --------------------------------
[  826.833503][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  826.833510][    C0] syz.0.2582/13832 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  826.833531][    C0] ffff88805c068a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x96/0x6a0
[  826.833592][    C0] {INITIAL USE} state was registered at:
[  826.833603][    C0]   lock_acquire+0x19e/0x420
[  826.833624][    C0]   _raw_spin_lock_irqsave+0xb4/0x100
[  826.833646][    C0]   trie_update_elem+0xcd/0xea0
[  826.833668][    C0]   bpf_map_update_value+0x660/0x720
[  826.833684][    C0]   generic_map_update_batch+0x5ec/0x810
[  826.833700][    C0]   bpf_map_do_batch+0x3d7/0x610
[  826.833718][    C0]   __sys_bpf+0x381/0x890
[  826.833734][    C0]   __x64_sys_bpf+0x7c/0x90
[  826.833750][    C0]   do_syscall_64+0x55/0xa0
[  826.833764][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  826.833787][    C0] irq event stamp: 888
[  826.833793][    C0] hardirqs last  enabled at (887): [<ffffffff8a868185>] syscall_enter_from_user_mode+0x25/0x80
[  826.833821][    C0] hardirqs last disabled at (888): [<ffffffff8a864903>] exc_debug+0x73/0x140
[  826.833843][    C0] softirqs last  enabled at (566): [<ffffffff819660f6>] bpf_prog_load+0x1266/0x1670
[  826.833868][    C0] softirqs last disabled at (564): [<ffffffff819469ed>] bpf_ksym_add+0x2d/0x340
[  826.833893][    C0] 
[  826.833893][    C0] other info that might help us debug this:
[  826.833899][    C0]  Possible unsafe locking scenario:
[  826.833899][    C0] 
[  826.833903][    C0]        CPU0
[  826.833906][    C0]        ----
[  826.833910][    C0]   lock(&trie->lock);
[  826.833928][    C0]   <Interrupt>
[  826.833931][    C0]     lock(&trie->lock);
[  826.833942][    C0] 
[  826.833942][    C0]  *** DEADLOCK ***
[  826.833942][    C0] 
[  826.833945][    C0] no locks held by syz.0.2582/13832.
[  826.833954][    C0] 
[  826.833954][    C0] stack backtrace:
[  826.833959][    C0] CPU: 0 PID: 13832 Comm: syz.0.2582 Not tainted syzkaller #0
[  826.833978][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  826.833988][    C0] Call Trace:
[  826.833996][    C0]  <#DB>
[  826.834002][    C0]  dump_stack_lvl+0x18c/0x250
[  826.834035][    C0]  ? show_regs_print_info+0x20/0x20
[  826.834074][    C0]  ? print_usage_bug+0x475/0x690
[  826.834114][    C0]  ? verify_lock_unused+0x18/0x140
[  826.834139][    C0]  lock_acquire+0x2c2/0x420
[  826.834163][    C0]  ? trie_delete_elem+0x96/0x6a0
[  826.834190][    C0]  ? read_lock_is_recursive+0x20/0x20
[  826.834213][    C0]  ? get_user_pages_fast_only+0xa0/0xa0
[  826.834246][    C0]  _raw_spin_lock_irqsave+0xb4/0x100
[  826.834270][    C0]  ? trie_delete_elem+0x96/0x6a0
[  826.834296][    C0]  ? _raw_spin_lock+0x40/0x40
[  826.834319][    C0]  ? perf_prepare_sample+0x156d/0x1df0
[  826.834343][    C0]  trie_delete_elem+0x96/0x6a0
[  826.834369][    C0]  ? __cant_sleep+0x220/0x220
[  826.834394][    C0]  ? perf_trace_lock+0x198/0x3b0
[  826.834415][    C0]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  826.834436][    C0]  bpf_overflow_handler+0x1fc/0x510
[  826.834466][    C0]  ? bpf_overflow_handler+0xde/0x510
[  826.834493][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  826.834520][    C0]  ? rcu_is_watching+0x15/0xb0
[  826.834547][    C0]  ? lock_release+0xb5/0x8c0
[  826.834570][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  826.834594][    C0]  __perf_event_overflow+0x447/0x630
[  826.834621][    C0]  perf_swevent_event+0x319/0x570
[  826.834645][    C0]  ? perf_tp_event+0x1520/0x1520
[  826.834667][    C0]  ? trace_call_bpf+0x5e9/0x6c0
[  826.834697][    C0]  ? trace_call_bpf+0xc3/0x6c0
[  826.834732][    C0]  perf_bp_event+0x319/0x430
[  826.834756][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  826.834778][    C0]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  826.834817][    C0]  ? lock_acquire+0x2c2/0x420
[  826.834842][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  826.834870][    C0]  notifier_call_chain+0x197/0x380
[  826.834896][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  826.834928][    C0]  atomic_notifier_call_chain+0xda/0x180
[  826.834954][    C0]  notify_die+0x145/0x1a0
[  826.834980][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  826.835009][    C0]  ? rcu_is_watching+0x15/0xb0
[  826.835036][    C0]  notify_debug+0x2e/0x50
[  826.835053][    C0]  exc_debug+0xde/0x140
[  826.835073][    C0]  asm_exc_debug+0x1e/0x40
[  826.835096][    C0] RIP: 0010:iovec_from_user+0x102/0x240
[  826.835116][    C0] Code: 01 e3 0f 88 2a 01 00 00 4c 39 e3 0f 82 21 01 00 00 0f 01 cb 0f ae e8 49 ff cf 48 8b 1c 24 49 89 dd 49 8b 6c 24 08 4d 8b 34 24 <31> ff 48 89 ee e8 14 5f 5e fd 48 85 ed 0f 88 ce 00 00 00 4c 89 e8
[  826.835133][    C0] RSP: 0018:ffffc90003bf7a58 EFLAGS: 00040202
[  826.835149][    C0] RAX: ffffffff8428c6f7 RBX: ffffc90003bf7cc0 RCX: ffff8880237e1e00
[  826.835163][    C0] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000200000000320
[  826.835176][    C0] RBP: 000000000000000a R08: 0000000000000000 R09: ffffc90003bf7e30
[  826.835188][    C0] R10: ffffc90003bf7e70 R11: fffff5200077efd0 R12: 0000200000000300
[  826.835201][    C0] R13: ffffc90003bf7cc0 R14: 0000200000000040 R15: 0000000000000001
[  826.835218][    C0]  ? iovec_from_user+0xd7/0x240
[  826.835240][    C0]  </#DB>
[  826.835245][    C0]  <TASK>
[  826.835254][    C0]  __import_iovec+0x13d/0x850
[  826.835271][    C0]  ? __might_fault+0xc6/0x120
[  826.835294][    C0]  import_iovec+0x73/0xa0
[  826.835314][    C0]  ___sys_sendmsg+0x256/0x360
[  826.835348][    C0]  ? __sys_sendmsg+0x2a0/0x2a0
[  826.835391][    C0]  __se_sys_sendmsg+0x1c2/0x2b0
[  826.835411][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  826.835437][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  826.835461][    C0]  do_syscall_64+0x55/0xa0
[  826.835477][    C0]  ? clear_bhb_loop+0x40/0x90
[  826.835500][    C0]  ? clear_bhb_loop+0x40/0x90
[  826.835524][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  826.835546][    C0] RIP: 0033:0x7fd56339cdd9
[  826.835560][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.835575][    C0] RSP: 002b:00007fd564208028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  826.835592][    C0] RAX: ffffffffffffffda RBX: 00007fd563615fa0 RCX: 00007fd56339cdd9
[  826.835605][    C0] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000008
[  826.835617][    C0] RBP: 00007fd563432d69 R08: 0000000000000000 R09: 0000000000000000
[  826.835629][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  826.835639][    C0] R13: 00007fd563616038 R14: 00007fd563615fa0 R15: 00007fff4fabd588
[  826.835661][    C0]  </TASK>