last executing test programs:

20.92245626s ago: executing program 3 (id=2754):
r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x200100000001, 0x5}, 0x110216, 0x8001, 0x80, 0x0, 0x0, 0xffff0000, 0x9, 0x0, 0x18345fb3, 0x0, 0x4000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0x3)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff45, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e7a2d1f7f000010e100", @ANYRES16=r1, @ANYBLOB="0000c8e6faf8604e323c00"/20, @ANYRES32=0x0, @ANYRES8=r2, @ANYRESHEX=r1], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0xff69, 0x56, 0x1, 0x0, 0x9, 0x0, 0x210f, 0x14082, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x392297ec, 0x22, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x850)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffe, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1)
r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000200), 0x12)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x1, 0x106)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000180)=0xffffffffffffffab)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90224fc600d00020004000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

20.228303413s ago: executing program 2 (id=2758):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

20.147325337s ago: executing program 0 (id=2759):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r2=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=r2}, 0x20)

20.093900337s ago: executing program 3 (id=2762):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4)
r1 = socket$kcm(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x1, 0x0, 0x80, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x1000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94)
close(0xffffffffffffffff)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r1)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x30004040)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x240488d0)
close(r1)

20.043056527s ago: executing program 0 (id=2763):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==0||!')
perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x44019, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x30000000000000, 0xe942}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
close(r4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, 0x0, &(0x7f0000000480)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_tracing={0x1a, 0x2e, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="16fb", @ANYRES32, @ANYBLOB, @ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0x2, 0x10000, 0x4}, 0x10, 0x2e166, r3, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x80}, 0x94)
openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000000c0)}, 0x10)

19.845660548s ago: executing program 1 (id=2764):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52}, 0x28)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000040)='memory.swap.max\x00', 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040))
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)
write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0xfdef)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d070001000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5ce261c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5fe4001b146218a07445d6d930dfe1d9d322107c86d6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)

19.617610773s ago: executing program 2 (id=2765):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000050000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10)

19.535186447s ago: executing program 2 (id=2766):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

19.394876249s ago: executing program 0 (id=2767):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x159}, 0x2160)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

19.317132194s ago: executing program 1 (id=2768):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000200)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r3, 0x35, 0x1, 0xd, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000001260007538e486dd630ace2211042f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x29, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7de, 0x0, 0x0, 0x0, 0x3}, [@exit, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @tail_call, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x2b, &(0x7f00000002c0)=""/43, 0x40f00, 0x11, '\x00', r3, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x9, 0xe6, 0x8}, 0x10, 0x0, r0, 0x5, &(0x7f0000000480)=[r4, r5, r6, r8, r9], &(0x7f00000004c0)=[{0x1, 0x2, 0xd, 0xa}, {0x3, 0x4, 0x6, 0xa}, {0x4, 0x5, 0x6, 0xa}, {0x5, 0x1, 0xd}, {0x5, 0x1, 0x5}], 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8001, 0x0, r4, 0xf, '\x00', r3, r8, 0x2, 0x3, 0x4}, 0x50) (async)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8001, 0x0, r4, 0xf, '\x00', r3, r8, 0x2, 0x3, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2e, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14d22f83}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@alu={0x4, 0x0, 0x3, 0x1}, @generic={0x3, 0x1, 0x4, 0x81, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='syzkaller\x00', 0xedf9, 0x7e, &(0x7f0000000940)=""/126, 0x40f00, 0x10, '\x00', r3, 0x25, r8, 0x8, &(0x7f00000009c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[{0x5, 0x5, 0x5, 0x4}], 0x10, 0xfffffffb}, 0x94)

19.262442203s ago: executing program 3 (id=2769):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac004000202080006000a0007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

19.071529195s ago: executing program 3 (id=2770):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="240000002d008188042f8eeae0b8402e7b6e67d83c000000200000000000000100000020", 0x24}], 0x1}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/148, 0x94}], 0x5, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000066) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d, 0xea10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0xd, 0x0, 0xffff0000, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

18.986203169s ago: executing program 0 (id=2771):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r2=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x2028, 0x4, @void, @void, @value=r2}, 0x20)

18.873550206s ago: executing program 2 (id=2772):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0xfe, 0x0, 0x0, 0x0}, 0x48)

18.783018409s ago: executing program 1 (id=2773):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x4, 0x10}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r1, &(0x7f00000005c0)="f3f7886e58bc404efa04025666e77f4430ff3fc0304c8eb37fef9bc575c3185340352e735f6da9e4ac438c5035f1355e7de00fd844c08ed8c6cad5bec0c78d67d67f74482402ed1d28ab83d41ac075214fede557578988f5333312f7eb410e4fffed7e04ab4ba3aab806be3af5b6183c40c33e19cf68f1ef50cb047162edd46dd2804cd79c9d5150f0fb614aa09e816c8385320572968f438738", &(0x7f0000000440)=""/55, 0x4}, 0x20)
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r4}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000540)=""/31, 0x1f, <r7=>0x0, &(0x7f0000000680)=""/213, 0xd5}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000e00)={0x0, r2}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r0, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000e40), ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e80), &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000f80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001040), &(0x7f0000000ec0), 0x8, 0x39, 0x8, 0x8, &(0x7f00000010c0)}}, 0x10)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r8, 0xffffffffffffffff, 0xffffffff, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000280)='GPL\x00', 0xacea712, 0x54, &(0x7f00000002c0)=""/84, 0x41100, 0x20, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x8, &(0x7f0000000840)=[r9], &(0x7f0000000880)=[{0x4, 0x1, 0x5, 0x6}, {0x3, 0x4, 0xc, 0xb}, {0x5, 0x2, 0xf, 0x5}, {0x5, 0x5, 0x2, 0xc}, {0x1, 0x5, 0x1, 0x9}, {0x4, 0x5, 0xd, 0x9}, {0x4, 0x4, 0xb, 0x2}, {0x4, 0x4, 0x9, 0x1}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="08000000181100003600000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYBLOB="df0f08fee899867a92d2e89802aa41a9a1608617bd8defb72a413e37ca5ce5ae2571d99d964895467ea94d757ce18ca4c99b07b627dcb626d5a7815f1d4b5128562c4ddf2cae02c45b5b640b829fc6938a694c4df95cc1fa699aaee114d409a87183d2840ea35d8c2a57b7728dd4f71412a35663a3568f9a8b4f3ffead6f7194945d3de6902c6dd28a161f3f065baa816f7ea3a00d4eb6101a1a2efdf08c49b8709ce45d43", @ANYBLOB="0000000000000000b7020000030000088500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(r2, 0x0, 0x25, 0x0, 0xc)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r10}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x3, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x7, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94)

18.73801869s ago: executing program 3 (id=2774):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="15", 0x1}], 0x1}, 0x4c081)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000e00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000000000)="6b7530008c6cd1f9e0ea4850a06adcb329c78d3acf3d4961984477123b9fdae94cf1b7de9f98486b2e2f46be33f324bcc846fb69ca2a48f3974ba66b10182d528450e3a2c4843dca488e2dfadadd89aa14b580e8a1423c8cb9c9c9", 0x5b}, {&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06dee6198c74c72607a032c3c7ef5abd0ba4a7f9f5dfebd75457b2ec358e951ade2375ad6524eb4263d6ef72e05901da983aac2b31a5e2631e39301a6dd04c128aabcea9134ec99685df1068506541f1265c77c85300497abfebce6ed768d9922ba3699dc6cc1863c0aa9321170b9e63a74986c1996d0fa1a5886e7023836ddbe64bea33edfe6fc1cb64784da18c2d4930eb481930b9298b57c7939189df401aed6a586f0103fccf70f92a53666d5afd3dd0b12273e5c1f2ddee89ed9a280c10df8e55ed24dcf9d631b693cd38006da4629a6b4a599de94a5b8ba6bccffdaa9d3fe0970623c118ba7e811d534915e4c63fa40df1e5a37ad9e5827ff65b2e4d8480a3f66576a3a52c0c80606098c0cb0b203f20d4f7b614652e4d8eb595d29ad1a4ce2c97aa30328c9987e1f1d8b7954ff54ddb69d5c3d2225bdd84e93b19edc2d33116373b0b5be8eea62d84896d2412edf5d321f75811360f89fe6ca8ac6545ec1c9f86ab285d1b5ba00c269514dab7a076c01cbfecaaff336d116481b16e434262de851a70ff056b1f9319840e27d5f446a3476210f4e70ceb71eeec17619911d56b74d7e761ff9c43dd237772377f888bfad215f3ee19eeeb87564f77241258874dd70bdd976305092426d18a3bc60022cb0acc2d21b3e246ae7f49f5b6461b888a3d353362c2ec9bed1f7d4d3a0200e3af42fcf36f4c09bc095b3fd391a23faad86bfa29696", 0x29a}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1c0000000000000000000000080000001f", @ANYRES32=0x0, @ANYBLOB="ac141410e00000010000000038000000000000000000000007000000019404000094040000441c8981ac14141500000000ac1414bb00000001e000000100000002000000"], 0x58}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00))
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x9}, 0x8814, 0xfffffffffffffffe, 0xc2ba, 0x0, 0xc}, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/370], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="00000000b7080000000030007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095952da9d57a05cf79e9f79aeccfd2357f0bb75d8a2bed36dc48375d06a75b99c5c8ba21d1e5d67295ec3b359fe7ac7639cb1b55fd9ef07a2acbababce4a4f9487aa00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00007559d680418c1644b1d931135b10000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r9, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x7, &(0x7f0000000000), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

18.719241566s ago: executing program 0 (id=2775):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1a, 0x5}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x7}, 0x2, 0x7, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e00500000087dbe9abc8d24470e7", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x3, 0x8e, 0xe7c9, 0x3a207, 0xffffffffffffffff, 0x3f7fffff}, 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x7}]}, @union={0xa, 0x0, 0x0, 0x5, 0x1, 0xdc2e}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1f)
socket$kcm(0x2, 0x5, 0x84)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

18.659388284s ago: executing program 2 (id=2776):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x2, 0x803, 0x0, &(0x7f0000000680)={0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000b07412d2a8de", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5)

18.618308876s ago: executing program 1 (id=2777):
perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x5, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2000)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)="270502001c0014000600002fb96db4f7babe05000700810005008100a5567e1c280a6fcc18fcfbcd240ba775927d", 0x2e}], 0x1}, 0x30040805)

18.218379997s ago: executing program 2 (id=2778):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x17d2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xc9a, 0xa9, &(0x7f0000000500)=""/169, 0x41000, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0xa08, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20170, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x48b, 0x0, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20)
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x24, 0x7, 0x5, 0x0, 0x9, 0x400, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xff, 0x2}, 0xd400, 0x9, 0x4, 0x4, 0x3, 0x9ae, 0x9, 0x0, 0x4, 0x0, 0x1}, r6, 0xd, r4, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0)

16.862992651s ago: executing program 3 (id=2779):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x11, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000e00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000000000)="6b7530008c6cd1f9e0ea4850a06adcb329c78d3acf3d4961984477123b9fdae94cf1b7de9f98486b2e2f46be33f324bcc846fb69ca2a48f3974ba66b10182d528450e3a2c4843dca488e2dfadadd89aa14b580e8a1423c8cb9c9c9", 0x5b}, {&(0x7f0000001740)="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", 0x29a}], 0x4, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}}, {@remote, 0x1}, {@multicast1, 0x2}]}]}}}], 0x58}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x9}, 0x8814, 0x0, 0xc2ba, 0x0, 0xc}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00007559d680418c1644b1d931135b10000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r9, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x7, &(0x7f0000000000), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

16.739375696s ago: executing program 0 (id=2780):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

16.466723153s ago: executing program 1 (id=2781):
r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.dequeue\x00', 0x0, 0x0) (rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="2d6a795d8b562086789d1af5c50e29aad78e310644e4bbcec3ec13b3e55748fb04ab6b30a013124188a38c4a49a2d0eb9bff12cf241e5d32e7da57fc060d9c2d3d335f62ffb5e964e843520b86d7ea2048195c8afecb80bdce14851b1a57caf494673f44e37ff0d10a905e0c33a280cdd7fff30081efaa40a25d20ae51c6574a43d1827ab5fc3faff5ebdb85394610fed1a3a17e2829604decbcf84e5e91931eade8ebbaaa62f1f34209", @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async, rerun: 32)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000000000000000e7ffffff850000001f0000009500000000002000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1cc300005e0007"], 0xfe33) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1aff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000440d0000850000002d000000850000007d000000950000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) (async)
r6 = openat$cgroup_int(r4, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x2000000000009237, 0x12)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r9}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0xe, 0x0, &(0x7f0000000280)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r10, 0x84, 0x18, &(0x7f0000000000), 0x8) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x8, 0xffffffffffffffff, 0x1}, 0x50)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

16.159235692s ago: executing program 1 (id=2782):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f84848feff005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.352439474s ago: executing program 32 (id=2778):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x17d2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xc9a, 0xa9, &(0x7f0000000500)=""/169, 0x41000, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000680)=r1, 0x4)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0xa08, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20170, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x48b, 0x0, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20)
perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x10, 0x24, 0x7, 0x5, 0x0, 0x9, 0x400, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xff, 0x2}, 0xd400, 0x9, 0x4, 0x4, 0x3, 0x9ae, 0x9, 0x0, 0x4, 0x0, 0x1}, r6, 0xd, r4, 0xa)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0)

1.227475632s ago: executing program 33 (id=2780):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r2 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)

1.126798422s ago: executing program 34 (id=2779):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d1", 0x1}], 0x1}, 0x4c081)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x11, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000e00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000000000)="6b7530008c6cd1f9e0ea4850a06adcb329c78d3acf3d4961984477123b9fdae94cf1b7de9f98486b2e2f46be33f324bcc846fb69ca2a48f3974ba66b10182d528450e3a2c4843dca488e2dfadadd89aa14b580e8a1423c8cb9c9c9", 0x5b}, {&(0x7f0000001740)="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", 0x29a}], 0x4, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}}, {@remote, 0x1}, {@multicast1, 0x2}]}]}}}], 0x58}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000380), 0x9}, 0x8814, 0x0, 0xc2ba, 0x0, 0xc}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdce, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00007559d680418c1644b1d931135b10000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r9, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x7, &(0x7f0000000000), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

0s ago: executing program 35 (id=2782):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x0}, 0x94)
socketpair(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f84848feff005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

  508.015754][T12257] syzkaller0: entered allmulticast mode
[  508.739053][T12290] netlink: 'syz.3.2111': attribute type 1 has an invalid length.
[  508.749820][T12290] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2111'.
[  510.529119][T12288] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2112'.
[  510.538696][T12288] bridge_slave_1: default FDB implementation only supports local addresses
[  510.648514][   T51] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  510.677694][T12300] netlink: 'syz.2.2117': attribute type 10 has an invalid length.
[  510.842249][T12313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2118'.
[  510.855526][T12313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2118'.
[  510.867693][T12313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2118'.
[  510.884389][T12313] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2118'.
[  511.136091][T12321] netlink: 'syz.3.2123': attribute type 6 has an invalid length.
[  511.154669][T12321] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2123'.
[  511.328708][T12323] IPv6: Can't replace route, no match found
[  511.346877][T12323] netlink: 'syz.2.2124': attribute type 1 has an invalid length.
[  511.354981][T12323] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2124'.
[  512.499751][T12337] netlink: 'syz.3.2128': attribute type 10 has an invalid length.
[  512.534520][T12337] batman_adv: batadv0: Removing interface: netdevsim0
[  513.420247][T12346] netlink: 'syz.0.2132': attribute type 10 has an invalid length.
[  513.961945][T12360] IPv6: Can't replace route, no match found
[  514.003430][T12360] netlink: 'syz.2.2138': attribute type 1 has an invalid length.
[  514.012019][T12360] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2138'.
[  515.621711][T12388] netlink: 'syz.3.2148': attribute type 39 has an invalid length.
[  516.517185][T12395] IPv6: Can't replace route, no match found
[  516.538840][T12395] netlink: 'syz.2.2150': attribute type 1 has an invalid length.
[  516.553993][T12395] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2150'.
[  517.988703][T12417] IPv6: Can't replace route, no match found
[  518.006787][T12416] IPv6: Can't replace route, no match found
[  518.036935][T12417] netlink: 'syz.3.2157': attribute type 1 has an invalid length.
[  518.049258][T12417] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2157'.
[  518.074676][T12416] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  518.097088][T12416] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2158'.
[  519.419155][T12433] netlink: 'syz.1.2162': attribute type 1 has an invalid length.
[  519.427279][T12433] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2162'.
[  519.875323][T12441] macvlan1: entered allmulticast mode
[  519.889542][T12441] veth1_vlan: entered allmulticast mode
[  519.927763][T12437] netlink: 'syz.0.2164': attribute type 39 has an invalid length.
[  521.672706][T12463] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2171'.
[  521.781496][T12465] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  521.791777][T12465] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  521.865529][T12468] IPv6: Can't replace route, no match found
[  521.942501][T12468] netlink: 'syz.2.2174': attribute type 1 has an invalid length.
[  521.978212][T12468] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2174'.
[  522.062163][T12473] netlink: 'syz.1.2175': attribute type 1 has an invalid length.
[  522.076829][T12473] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2175'.
[  522.655595][T12487] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2179'.
[  522.675297][T12487] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2179'.
[  522.698157][T12487] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2179'.
[  522.734757][T12481] netlink: 'syz.1.2178': attribute type 10 has an invalid length.
[  523.539579][T12502] netlink: 'syz.1.2185': attribute type 1 has an invalid length.
[  523.547543][T12502] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2185'.
[  523.999008][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2189'.
[  524.023507][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2189'.
[  524.326886][T12509] IPv6: Can't replace route, no match found
[  524.504219][T12509] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  524.532817][T12509] __nla_validate_parse: 1 callbacks suppressed
[  524.532834][T12509] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2188'.
[  524.692822][T12520] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2191'.
[  524.721106][T12520] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2191'.
[  524.739724][T12520] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2191'.
[  525.261178][T12537] netlink: 'syz.2.2196': attribute type 12 has an invalid length.
[  525.269265][T12537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2196'.
[  525.554798][T12533] netlink: 'syz.1.2195': attribute type 1 has an invalid length.
[  525.579110][T12533] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2195'.
[  526.670322][T12552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2200'.
[  526.979631][T12554] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  527.109932][T12554] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2201'.
[  530.021134][T12605] netlink: 'syz.1.2216': attribute type 10 has an invalid length.
[  530.773340][T12615] netlink: 'syz.1.2220': attribute type 10 has an invalid length.
[  530.875486][T12613] IPv6: Can't replace route, no match found
[  530.935755][T12613] netlink: 'syz.3.2218': attribute type 1 has an invalid length.
[  530.979057][T12613] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2218'.
[  531.088683][T12622] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2221'.
[  532.344559][T12645] netlink: 'syz.0.2229': attribute type 4 has an invalid length.
[  532.385683][T12645] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2229'.
[  532.423609][T12654] netlink: set zone limit has 8 unknown bytes
[  532.754169][T12665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2235'.
[  532.774460][T12665] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  532.794319][T12665] netlink: set zone limit has 8 unknown bytes
[  532.805456][T12665] netlink: 'syz.1.2235': attribute type 21 has an invalid length.
[  534.161593][T12687] netlink: 'syz.0.2240': attribute type 20 has an invalid length.
[  535.853331][   T51] Bluetooth: hci1: Malformed Event: 0x2f
[  536.482120][T12721] netlink: 'syz.2.2253': attribute type 11 has an invalid length.
[  536.509695][T12721] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2253'.
[  536.608052][T12721] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  536.670007][T12725] netlink: 'syz.0.2255': attribute type 10 has an invalid length.
[  536.723248][T12729] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2255'.
[  536.740103][T12729] netlink: zone id is out of range
[  536.745710][T12729] netlink: zone id is out of range
[  536.756043][T12727] netlink: 'syz.3.2254': attribute type 28 has an invalid length.
[  536.759894][T12729] netlink: zone id is out of range
[  536.768318][T12727] netlink: 'syz.3.2254': attribute type 29 has an invalid length.
[  536.769173][T12729] netlink: zone id is out of range
[  536.778896][T12727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2254'.
[  536.785694][T12729] netlink: zone id is out of range
[  536.829588][T12729] netlink: zone id is out of range
[  536.834794][T12729] netlink: zone id is out of range
[  536.926588][T12725] bond0: (slave geneve0): Releasing backup interface
[  537.469395][T12733] IPv6: Can't replace route, no match found
[  537.485001][T12735] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2257'.
[  537.495875][T12735] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2257'.
[  537.502538][T12733] netlink: 'syz.0.2256': attribute type 1 has an invalid length.
[  537.518776][T12733] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2256'.
[  537.676195][T12737] netlink: 'syz.0.2258': attribute type 10 has an invalid length.
[  537.684567][T12737] hsr_slave_0: left promiscuous mode
[  537.691743][T12737] hsr_slave_1: left promiscuous mode
[  537.837909][T12739] netlink: 'syz.0.2259': attribute type 29 has an invalid length.
[  537.848577][T12739] netlink: 'syz.0.2259': attribute type 29 has an invalid length.
[  537.862545][T12739] netlink: 'syz.0.2259': attribute type 29 has an invalid length.
[  537.871127][T12739] netlink: 'syz.0.2259': attribute type 29 has an invalid length.
[  537.895471][T12739] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2259'.
[  537.968065][T12741] FAULT_INJECTION: forcing a failure.
[  537.968065][T12741] name failslab, interval 1, probability 0, space 0, times 0
[  537.981030][T12741] CPU: 0 PID: 12741 Comm: syz.0.2260 Not tainted syzkaller #0
[  537.988518][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  537.998579][T12741] Call Trace:
[  538.001861][T12741]  <TASK>
[  538.004826][T12741]  dump_stack_lvl+0x18c/0x250
[  538.009550][T12741]  ? show_regs_print_info+0x20/0x20
[  538.014804][T12741]  ? load_image+0x400/0x400
[  538.019319][T12741]  should_fail_ex+0x39d/0x4d0
[  538.024023][T12741]  should_failslab+0x9/0x20
[  538.028534][T12741]  slab_pre_alloc_hook+0x59/0x310
[  538.033574][T12741]  ? csum_partial+0x241/0x2c0
[  538.038266][T12741]  kmem_cache_alloc_node+0x60/0x320
[  538.043473][T12741]  ? __skb_checksum+0x752/0x800
[  538.048337][T12741]  ? __alloc_skb+0x103/0x2c0
[  538.052958][T12741]  __alloc_skb+0x103/0x2c0
[  538.057415][T12741]  skb_segment+0xee2/0x3f50
[  538.061971][T12741]  tcp_gso_segment+0x3fd/0x1960
[  538.066845][T12741]  ? sk_setup_caps+0xa10/0xa10
[  538.071642][T12741]  ipv6_gso_segment+0xb8b/0x2140
[  538.076591][T12741]  ? inet6_del_offload+0x50/0x50
[  538.081596][T12741]  ? skb_crc32c_csum_help+0x520/0x520
[  538.087005][T12741]  ? __siphash_unaligned+0x25f/0x3a0
[  538.092351][T12741]  ? inet6_del_offload+0x50/0x50
[  538.097301][T12741]  skb_mac_gso_segment+0x320/0x640
[  538.102432][T12741]  ? skb_mac_gso_segment+0x185/0x640
[  538.107716][T12741]  ? skb_eth_gso_segment+0x270/0x270
[  538.113016][T12741]  ? __skb_get_hash+0x142/0x2e0
[  538.117892][T12741]  __skb_gso_segment+0x302/0x4a0
[  538.122848][T12741]  validate_xmit_skb+0x565/0xf60
[  538.127820][T12741]  ? validate_xmit_skb_list+0x120/0x120
[  538.133404][T12741]  __dev_queue_xmit+0x13cf/0x3660
[  538.138454][T12741]  ? __dev_queue_xmit+0x265/0x3660
[  538.143678][T12741]  ? netdev_core_pick_tx+0x340/0x340
[  538.148976][T12741]  ? virtio_net_hdr_to_skb+0xa45/0x1510
[  538.154550][T12741]  ? packet_parse_headers+0x7cb/0xac0
[  538.159950][T12741]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[  538.165518][T12741]  ? packet_extra_vlan_len_allowed+0x200/0x200
[  538.171690][T12741]  ? skb_copy_datagram_from_iter+0x5f6/0x6e0
[  538.177700][T12741]  ? packet_xmit+0x66/0x330
[  538.182220][T12741]  ? packet_sendmsg+0x3a7b/0x4d70
[  538.187264][T12741]  packet_sendmsg+0x3b7a/0x4d70
[  538.192151][T12741]  ? verify_lock_unused+0x140/0x140
[  538.197363][T12741]  ? mark_lock+0x94/0x320
[  538.201714][T12741]  ? __lock_acquire+0x1273/0x7d40
[  538.206756][T12741]  ? verify_lock_unused+0x140/0x140
[  538.211969][T12741]  ? aa_sk_perm+0x83c/0x970
[  538.216579][T12741]  ? packet_getsockopt+0xad0/0xad0
[  538.221718][T12741]  ? aa_sock_msg_perm+0x94/0x150
[  538.226670][T12741]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  538.231968][T12741]  ? security_socket_sendmsg+0x80/0xa0
[  538.237439][T12741]  ? packet_getsockopt+0xad0/0xad0
[  538.242563][T12741]  ____sys_sendmsg+0x5ba/0x960
[  538.247343][T12741]  ? __lock_acquire+0x7d40/0x7d40
[  538.252381][T12741]  ? __asan_memset+0x22/0x40
[  538.256996][T12741]  ? __sys_sendmsg_sock+0x30/0x30
[  538.262048][T12741]  ? __import_iovec+0x3fa/0x850
[  538.266941][T12741]  ? import_iovec+0x73/0xa0
[  538.271472][T12741]  ___sys_sendmsg+0x2a6/0x360
[  538.276170][T12741]  ? __sys_sendmsg+0x2a0/0x2a0
[  538.280966][T12741]  ? trace_call_bpf+0xc3/0x6c0
[  538.285768][T12741]  __se_sys_sendmsg+0x1c2/0x2b0
[  538.290630][T12741]  ? __x64_sys_sendmsg+0x80/0x80
[  538.295589][T12741]  ? lockdep_hardirqs_on+0x98/0x150
[  538.300803][T12741]  do_syscall_64+0x55/0xa0
[  538.305245][T12741]  ? clear_bhb_loop+0x40/0x90
[  538.309930][T12741]  ? clear_bhb_loop+0x40/0x90
[  538.314615][T12741]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  538.320520][T12741] RIP: 0033:0x7fae67f9c799
[  538.324944][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.344688][T12741] RSP: 002b:00007fae68f20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.353150][T12741] RAX: ffffffffffffffda RBX: 00007fae68215fa0 RCX: 00007fae67f9c799
[  538.361149][T12741] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  538.369135][T12741] RBP: 00007fae68f20090 R08: 0000000000000000 R09: 0000000000000000
[  538.377118][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  538.385100][T12741] R13: 00007fae68216038 R14: 00007fae68215fa0 R15: 00007ffe578156f8
[  538.393097][T12741]  </TASK>
[  538.552818][T12743] FAULT_INJECTION: forcing a failure.
[  538.552818][T12743] name failslab, interval 1, probability 0, space 0, times 0
[  538.589563][T12743] CPU: 1 PID: 12743 Comm: syz.0.2261 Not tainted syzkaller #0
[  538.597117][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  538.607232][T12743] Call Trace:
[  538.610556][T12743]  <TASK>
[  538.613521][T12743]  dump_stack_lvl+0x18c/0x250
[  538.618243][T12743]  ? sctp_sendmsg+0x1575/0x28c0
[  538.623313][T12743]  ? ___sys_sendmsg+0x2a6/0x360
[  538.628202][T12743]  ? show_regs_print_info+0x20/0x20
[  538.633453][T12743]  ? load_image+0x400/0x400
[  538.638026][T12743]  should_fail_ex+0x39d/0x4d0
[  538.642957][T12743]  should_failslab+0x9/0x20
[  538.647616][T12743]  slab_pre_alloc_hook+0x59/0x310
[  538.652695][T12743]  ? sctp_add_bind_addr+0x8c/0x360
[  538.657847][T12743]  __kmem_cache_alloc_node+0x53/0x250
[  538.663252][T12743]  ? sctp_add_bind_addr+0x8c/0x360
[  538.668360][T12743]  kmalloc_trace+0x2a/0xe0
[  538.672884][T12743]  sctp_add_bind_addr+0x8c/0x360
[  538.677878][T12743]  sctp_copy_local_addr_list+0x315/0x4f0
[  538.683546][T12743]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  538.685160][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2263'.
[  538.689298][T12743]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  538.702909][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2263'.
[  538.704322][T12743]  ? sctp_v4_is_any+0x35/0x60
[  538.716144][T12747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2263'.
[  538.717928][T12743]  ? sctp_copy_one_addr+0x8c/0x350
[  538.732071][T12743]  sctp_bind_addr_copy+0xb3/0x3c0
[  538.737148][T12743]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  538.743536][T12743]  sctp_connect_new_asoc+0x2f9/0x6a0
[  538.748873][T12743]  ? __sctp_connect+0xd80/0xd80
[  538.753789][T12743]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  538.759402][T12743]  ? security_sctp_bind_connect+0x89/0xb0
[  538.765188][T12743]  sctp_sendmsg+0x1575/0x28c0
[  538.769924][T12743]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  538.776139][T12743]  ? sctp_getsockopt+0xb60/0xb60
[  538.781231][T12743]  ? aa_sk_perm+0x83c/0x970
[  538.785795][T12743]  ? aa_af_perm+0x330/0x330
[  538.790358][T12743]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  538.796822][T12743]  ? sock_rps_record_flow+0x19/0x3f0
[  538.802159][T12743]  ? inet_sendmsg+0xe9/0x2f0
[  538.806801][T12743]  ? inet_send_prepare+0x260/0x260
[  538.811965][T12743]  ____sys_sendmsg+0x5ba/0x960
[  538.816784][T12743]  ? __lock_acquire+0x7d40/0x7d40
[  538.821858][T12743]  ? __asan_memset+0x22/0x40
[  538.826501][T12743]  ? __sys_sendmsg_sock+0x30/0x30
[  538.831552][T12743]  ? __import_iovec+0x5f2/0x850
[  538.836447][T12743]  ? import_iovec+0x73/0xa0
[  538.841014][T12743]  ___sys_sendmsg+0x2a6/0x360
[  538.845728][T12743]  ? __sys_sendmsg+0x2a0/0x2a0
[  538.850525][T12743]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  538.856807][T12743]  __se_sys_sendmsg+0x1c2/0x2b0
[  538.861674][T12743]  ? __x64_sys_sendmsg+0x80/0x80
[  538.866636][T12743]  ? lockdep_hardirqs_on+0x98/0x150
[  538.871865][T12743]  do_syscall_64+0x55/0xa0
[  538.876296][T12743]  ? clear_bhb_loop+0x40/0x90
[  538.880990][T12743]  ? clear_bhb_loop+0x40/0x90
[  538.885766][T12743]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  538.891675][T12743] RIP: 0033:0x7fae67f9c799
[  538.896099][T12743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.915911][T12743] RSP: 002b:00007fae68f20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  538.924790][T12743] RAX: ffffffffffffffda RBX: 00007fae68215fa0 RCX: 00007fae67f9c799
[  538.932779][T12743] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  538.940767][T12743] RBP: 00007fae68f20090 R08: 0000000000000000 R09: 0000000000000000
[  538.948842][T12743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  538.956825][T12743] R13: 00007fae68216038 R14: 00007fae68215fa0 R15: 00007ffe578156f8
[  538.964828][T12743]  </TASK>
[  539.146921][T12751] IPv6: Can't replace route, no match found
[  539.176291][T12751] netlink: 'syz.2.2264': attribute type 1 has an invalid length.
[  541.163013][T12782] IPv6: Can't replace route, no match found
[  542.826606][T12816] __nla_validate_parse: 5 callbacks suppressed
[  542.826633][T12816] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2288'.
[  542.869793][T12819] validate_nla: 4 callbacks suppressed
[  542.869811][T12819] netlink: 'syz.3.2289': attribute type 46 has an invalid length.
[  542.883592][T12819] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2289'.
[  543.294333][T12836] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2294'.
[  543.477770][T12840] netlink: 'syz.2.2296': attribute type 33 has an invalid length.
[  543.486288][T12840] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2296'.
[  543.498189][T12840] net_ratelimit: 334 callbacks suppressed
[  543.498207][T12840] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  543.559088][T12842] FAULT_INJECTION: forcing a failure.
[  543.559088][T12842] name failslab, interval 1, probability 0, space 0, times 0
[  543.573839][T12842] CPU: 1 PID: 12842 Comm: syz.0.2298 Not tainted syzkaller #0
[  543.581353][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  543.591457][T12842] Call Trace:
[  543.594778][T12842]  <TASK>
[  543.597734][T12842]  dump_stack_lvl+0x18c/0x250
[  543.602458][T12842]  ? sctp_sendmsg+0x1575/0x28c0
[  543.607337][T12842]  ? ___sys_sendmsg+0x2a6/0x360
[  543.612743][T12842]  ? show_regs_print_info+0x20/0x20
[  543.617982][T12842]  ? load_image+0x400/0x400
[  543.622536][T12842]  should_fail_ex+0x39d/0x4d0
[  543.627256][T12842]  should_failslab+0x9/0x20
[  543.631795][T12842]  slab_pre_alloc_hook+0x59/0x310
[  543.636871][T12842]  ? sctp_add_bind_addr+0x8c/0x360
[  543.642011][T12842]  __kmem_cache_alloc_node+0x53/0x250
[  543.647427][T12842]  ? sctp_add_bind_addr+0x8c/0x360
[  543.652655][T12842]  kmalloc_trace+0x2a/0xe0
[  543.657110][T12842]  sctp_add_bind_addr+0x8c/0x360
[  543.662083][T12842]  sctp_copy_local_addr_list+0x315/0x4f0
[  543.667759][T12842]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  543.673505][T12842]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  543.679600][T12842]  ? sctp_v4_is_any+0x35/0x60
[  543.684293][T12842]  ? sctp_copy_one_addr+0x8c/0x350
[  543.689437][T12842]  sctp_bind_addr_copy+0xb3/0x3c0
[  543.694482][T12842]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  543.700827][T12842]  sctp_connect_new_asoc+0x2f9/0x6a0
[  543.706129][T12842]  ? __sctp_connect+0xd80/0xd80
[  543.711508][T12842]  ? __local_bh_enable_ip+0x13a/0x1c0
[  543.716895][T12842]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  543.722457][T12842]  ? security_sctp_bind_connect+0x89/0xb0
[  543.728197][T12842]  sctp_sendmsg+0x1575/0x28c0
[  543.732899][T12842]  ? sctp_getsockopt+0xb60/0xb60
[  543.737848][T12842]  ? aa_sk_perm+0x83c/0x970
[  543.742383][T12842]  ? aa_af_perm+0x330/0x330
[  543.746900][T12842]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  543.753329][T12842]  ? sock_rps_record_flow+0x19/0x3f0
[  543.758632][T12842]  ? inet_sendmsg+0xe9/0x2f0
[  543.763234][T12842]  ? inet_send_prepare+0x260/0x260
[  543.768362][T12842]  ____sys_sendmsg+0x5ba/0x960
[  543.773138][T12842]  ? __lock_acquire+0x7d40/0x7d40
[  543.778178][T12842]  ? __asan_memset+0x22/0x40
[  543.782793][T12842]  ? __sys_sendmsg_sock+0x30/0x30
[  543.787828][T12842]  ? __import_iovec+0x5f2/0x850
[  543.792708][T12842]  ? import_iovec+0x73/0xa0
[  543.797229][T12842]  ___sys_sendmsg+0x2a6/0x360
[  543.801916][T12842]  ? get_pid_task+0x20/0x1e0
[  543.806526][T12842]  ? __sys_sendmsg+0x2a0/0x2a0
[  543.811325][T12842]  ? __lock_acquire+0x7d40/0x7d40
[  543.816383][T12842]  __se_sys_sendmsg+0x1c2/0x2b0
[  543.821245][T12842]  ? __x64_sys_sendmsg+0x80/0x80
[  543.826299][T12842]  ? lockdep_hardirqs_on+0x98/0x150
[  543.831599][T12842]  do_syscall_64+0x55/0xa0
[  543.836039][T12842]  ? clear_bhb_loop+0x40/0x90
[  543.840725][T12842]  ? clear_bhb_loop+0x40/0x90
[  543.845416][T12842]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  543.851323][T12842] RIP: 0033:0x7fae67f9c799
[  543.855751][T12842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.875371][T12842] RSP: 002b:00007fae68f20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.883896][T12842] RAX: ffffffffffffffda RBX: 00007fae68215fa0 RCX: 00007fae67f9c799
[  543.891885][T12842] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  543.899865][T12842] RBP: 00007fae68f20090 R08: 0000000000000000 R09: 0000000000000000
[  543.907843][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  543.915827][T12842] R13: 00007fae68216038 R14: 00007fae68215fa0 R15: 00007ffe578156f8
[  543.923827][T12842]  </TASK>
[  544.878029][T12856] IPv6: Can't replace route, no match found
[  545.137303][T12856] netlink: 'syz.3.2304': attribute type 1 has an invalid length.
[  545.239828][T12856] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2304'.
[  545.408201][T12865] dvmrp1: tun_chr_ioctl cmd 1074812117
[  545.840312][T12883] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2314'.
[  546.712286][T12897] IPv6: Can't replace route, no match found
[  546.766808][T12897] netlink: 'syz.0.2319': attribute type 1 has an invalid length.
[  546.810016][T12897] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2319'.
[  546.985570][T12904] IPv6: Can't replace route, no match found
[  547.008089][T12904] netlink: 'syz.2.2321': attribute type 1 has an invalid length.
[  547.016669][T12904] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2321'.
[  547.031354][T12903] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  547.039353][T12903] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2320'.
[  547.516906][T12915] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2326'.
[  548.077865][T12927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  548.087540][T12927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  548.096318][T12927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  548.105634][T12927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  548.114070][T12927] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  548.121899][T12927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  548.407763][T12925] chnl_net:caif_netlink_parms(): no params data found
[  548.572577][T12925] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.594067][T12925] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.636467][T12925] bridge_slave_0: entered allmulticast mode
[  548.643853][T12925] bridge_slave_0: entered promiscuous mode
[  548.666585][T12925] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.681122][T12925] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.688588][T12925] bridge_slave_1: entered allmulticast mode
[  548.712788][T12925] bridge_slave_1: entered promiscuous mode
[  548.836379][T12925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.902785][T12925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.972721][T12925] team0: Port device team_slave_0 added
[  549.003026][T12925] team0: Port device team_slave_1 added
[  549.090895][T12925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  549.097916][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.125459][T12925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.139128][T12925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.152284][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.188345][T12925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.263608][T12925] hsr_slave_0: entered promiscuous mode
[  549.274517][T12925] hsr_slave_1: entered promiscuous mode
[  549.281147][T12925] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  549.288817][T12925] Cannot create hsr debugfs directory
[  549.369164][T12941] netlink: 'syz.1.2333': attribute type 1 has an invalid length.
[  549.377567][T12941] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2333'.
[  549.474214][T12925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.723250][T12925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.832516][T12925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.864815][T12948] IPv6: Can't replace route, no match found
[  549.878455][T12945] IPv6: Can't replace route, no match found
[  549.883138][T12948] netlink: 'syz.0.2341': attribute type 1 has an invalid length.
[  549.911691][T12948] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2341'.
[  549.935224][T12925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.946530][T12946] netlink: 'syz.1.2334': attribute type 1 has an invalid length.
[  549.957685][T12946] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2334'.
[  549.968852][T12945] netlink: 'syz.3.2335': attribute type 1 has an invalid length.
[  549.979757][T12945] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2335'.
[  550.200756][T12927] Bluetooth: hci4: command tx timeout
[  550.253938][T12925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  550.306344][T12925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  551.016887][T12925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  551.032217][T12925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  551.293734][T12925] 8021q: adding VLAN 0 to HW filter on device bond0
[  551.323355][T12925] 8021q: adding VLAN 0 to HW filter on device team0
[  551.338458][T10147] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.345715][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  551.397750][T12925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  551.417174][T12925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  551.444412][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.451663][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.668687][T12925] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.714983][T12925] veth0_vlan: entered promiscuous mode
[  551.727275][T12925] veth1_vlan: entered promiscuous mode
[  551.762218][T12925] veth0_macvtap: entered promiscuous mode
[  551.774148][T12925] veth1_macvtap: entered promiscuous mode
[  551.791051][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  551.801989][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.813231][T12925] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.829932][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.840488][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.850917][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.862201][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.872233][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.883204][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.893487][T12925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  551.904065][T12925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  551.915455][T12925] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.931442][T12925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.940672][T12925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.950887][T12925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.959742][T12925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.047651][ T6058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.065328][ T6058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.090896][T10155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.098769][T10155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.290057][T12927] Bluetooth: hci4: command tx timeout
[  553.008551][T12997] IPv6: Can't replace route, no match found
[  553.014097][T13003] netlink: 'syz.1.2347': attribute type 1 has an invalid length.
[  553.023402][T13003] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2347'.
[  553.046630][T12997] netlink: 'syz.2.2346': attribute type 1 has an invalid length.
[  553.081814][T12997] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2346'.
[  554.371705][T12927] Bluetooth: hci4: command tx timeout
[  556.451596][T12927] Bluetooth: hci4: command tx timeout
[  556.493900][T13019] netlink: 'syz.3.2356': attribute type 21 has an invalid length.
[  557.187103][T13036] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2363'.
[  557.209812][T13036] bridge_slave_1: default FDB implementation only supports local addresses
[  557.608058][T13054] FAULT_INJECTION: forcing a failure.
[  557.608058][T13054] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  557.649322][T13054] CPU: 1 PID: 13054 Comm: syz.1.2369 Not tainted syzkaller #0
[  557.656864][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  557.666956][T13054] Call Trace:
[  557.670282][T13054]  <TASK>
[  557.673265][T13054]  dump_stack_lvl+0x18c/0x250
[  557.678008][T13054]  ? show_regs_print_info+0x20/0x20
[  557.683261][T13054]  ? load_image+0x400/0x400
[  557.687818][T13054]  ? __might_fault+0xaa/0x120
[  557.692546][T13054]  ? __lock_acquire+0x7d40/0x7d40
[  557.697626][T13054]  should_fail_ex+0x39d/0x4d0
[  557.702703][T13054]  _copy_from_user+0x2f/0xe0
[  557.707324][T13054]  sk_setsockopt+0x26b/0x2bc0
[  557.712038][T13054]  ? sockopt_capable+0x60/0x60
[  557.716827][T13054]  ? aa_sk_perm+0x83c/0x970
[  557.721353][T13054]  ? __fget_files+0x28/0x4b0
[  557.725970][T13054]  ? aa_af_perm+0x330/0x330
[  557.730501][T13054]  ? __fget_files+0x28/0x4b0
[  557.735102][T13054]  ? __fget_files+0x28/0x4b0
[  557.739707][T13054]  ? aa_sock_opt_perm+0x74/0x100
[  557.744658][T13054]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  557.750229][T13054]  ? security_socket_setsockopt+0x7e/0xa0
[  557.755962][T13054]  do_sock_setsockopt+0x11b/0x1a0
[  557.761009][T13054]  __x64_sys_setsockopt+0x182/0x200
[  557.766223][T13054]  do_syscall_64+0x55/0xa0
[  557.770655][T13054]  ? clear_bhb_loop+0x40/0x90
[  557.775348][T13054]  ? clear_bhb_loop+0x40/0x90
[  557.780046][T13054]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.785953][T13054] RIP: 0033:0x7fd1d559c799
[  557.790382][T13054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.810092][T13054] RSP: 002b:00007fd1d64d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  557.818519][T13054] RAX: ffffffffffffffda RBX: 00007fd1d5815fa0 RCX: 00007fd1d559c799
[  557.826503][T13054] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000004
[  557.834515][T13054] RBP: 00007fd1d64d6090 R08: 0000000000000004 R09: 0000000000000000
[  557.842497][T13054] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  557.850480][T13054] R13: 00007fd1d5816038 R14: 00007fd1d5815fa0 R15: 00007fff795cfdc8
[  557.858498][T13054]  </TASK>
[  558.642661][T13065] syzkaller0: entered promiscuous mode
[  558.648553][T13065] syzkaller0: entered allmulticast mode
[  558.743978][T13071] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2375'.
[  561.118465][T13071] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  562.195204][T12927] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4
[  562.222397][T13102] netlink: 'syz.1.2386': attribute type 16 has an invalid length.
[  562.266936][T13102] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2386'.
[  563.270221][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  563.276624][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  563.430568][T13112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  565.295535][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  565.311939][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  565.322010][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  565.350223][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  565.364132][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  565.382672][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  566.141714][T13157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2400'.
[  566.418340][T13145] chnl_net:caif_netlink_parms(): no params data found
[  566.773427][T13145] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.802139][T13145] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.899790][T13145] bridge_slave_0: entered allmulticast mode
[  566.908418][T13169] netlink: 'syz.3.2401': attribute type 9 has an invalid length.
[  566.930929][T13145] bridge_slave_0: entered promiscuous mode
[  566.938475][T13169] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2401'.
[  566.973263][T13145] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.981966][T13145] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.998092][T13145] bridge_slave_1: entered allmulticast mode
[  567.013687][T13145] bridge_slave_1: entered promiscuous mode
[  567.091042][T13145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.123241][T13145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.585043][T12927] Bluetooth: hci2: command tx timeout
[  567.713967][T13145] team0: Port device team_slave_0 added
[  567.746884][T13145] team0: Port device team_slave_1 added
[  567.853873][T13145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.868885][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  567.929778][T13145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  567.966518][T13145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  567.974071][T13145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.008953][T13145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.319154][T13176] syzkaller0: entered promiscuous mode
[  568.326141][T13176] syzkaller0: entered allmulticast mode
[  569.643400][T12927] Bluetooth: hci2: command tx timeout
[  571.157223][T13145] hsr_slave_0: entered promiscuous mode
[  571.165185][T13145] hsr_slave_1: entered promiscuous mode
[  571.182766][T13145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  571.198688][T13145] Cannot create hsr debugfs directory
[  571.464318][T13145] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.649965][T13205] netlink: 'syz.0.2411': attribute type 9 has an invalid length.
[  571.680680][T13205] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2411'.
[  571.719630][T12927] Bluetooth: hci2: command tx timeout
[  571.756553][T13145] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.793140][T13211] netlink: 'syz.2.2420': attribute type 3 has an invalid length.
[  572.044037][T13145] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.632652][T13145] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  572.677955][T13145] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  572.718613][T13221] netlink: 'syz.2.2417': attribute type 13 has an invalid length.
[  572.744986][T13231] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2422'.
[  572.754591][T13221] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2417'.
[  572.766368][T13221] syz_tun: refused to change device tx_queue_len
[  572.777178][T13145] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  572.791524][T13232] FAULT_INJECTION: forcing a failure.
[  572.791524][T13232] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  572.791537][T13231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2422'.
[  572.791830][T13224] netlink: 'syz.2.2417': attribute type 2 has an invalid length.
[  572.811680][T13232] CPU: 1 PID: 13232 Comm: syz.0.2421 Not tainted syzkaller #0
[  572.815510][T13224] netlink: 'syz.2.2417': attribute type 8 has an invalid length.
[  572.822329][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  572.822347][T13232] Call Trace:
[  572.822357][T13232]  <TASK>
[  572.822367][T13232]  dump_stack_lvl+0x18c/0x250
[  572.822404][T13232]  ? show_regs_print_info+0x20/0x20
[  572.822432][T13232]  ? load_image+0x400/0x400
[  572.822457][T13232]  ? __might_fault+0xaa/0x120
[  572.822481][T13232]  ? __lock_acquire+0x7d40/0x7d40
[  572.822515][T13232]  should_fail_ex+0x39d/0x4d0
[  572.822548][T13232]  _copy_from_user+0x2f/0xe0
[  572.822573][T13232]  kstrtouint_from_user+0xde/0x170
[  572.822602][T13232]  ? kstrtol_from_user+0x190/0x190
[  572.822646][T13232]  proc_fail_nth_write+0x8f/0x250
[  572.822673][T13232]  ? proc_fail_nth_read+0x260/0x260
[  572.822706][T13232]  ? proc_fail_nth_read+0x260/0x260
[  572.822731][T13232]  vfs_write+0x296/0x990
[  572.822763][T13232]  ? file_end_write+0x250/0x250
[  572.822789][T13232]  ? __fget_files+0x28/0x4b0
[  572.822812][T13232]  ? __fget_files+0x28/0x4b0
[  572.822837][T13232]  ? __fget_files+0x43d/0x4b0
[  572.822871][T13232]  ? __fdget_pos+0x2a3/0x330
[  572.822894][T13232]  ? ksys_write+0x75/0x260
[  572.822921][T13232]  ksys_write+0x150/0x260
[  572.822950][T13232]  ? __ia32_sys_read+0x90/0x90
[  572.822978][T13232]  ? lockdep_hardirqs_on+0x98/0x150
[  572.823004][T13232]  do_syscall_64+0x55/0xa0
[  572.823029][T13232]  ? clear_bhb_loop+0x40/0x90
[  572.823050][T13232]  ? clear_bhb_loop+0x40/0x90
[  572.823074][T13232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  572.823095][T13232] RIP: 0033:0x7fae67f5cfce
[  572.823115][T13232] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  572.823132][T13232] RSP: 002b:00007fae68f1ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  572.823156][T13232] RAX: ffffffffffffffda RBX: 00007fae68f206c0 RCX: 00007fae67f5cfce
[  572.823171][T13232] RDX: 0000000000000001 RSI: 00007fae68f200a0 RDI: 0000000000000005
[  572.823184][T13232] RBP: 00007fae68f20090 R08: 0000000000000000 R09: 0000000000000000
[  572.823196][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  572.823208][T13232] R13: 00007fae68216038 R14: 00007fae68215fa0 R15: 00007ffe578156f8
[  572.823240][T13232]  </TASK>
[  573.371989][T13224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2417'.
[  573.386436][T13145] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  573.409162][T13239] netlink: 'syz.3.2422': attribute type 58 has an invalid length.
[  573.419816][T13239] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2422'.
[  573.631932][T13243] netlink: 'syz.2.2425': attribute type 58 has an invalid length.
[  573.667552][T13243] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2425'.
[  573.748751][T13145] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.801490][T12927] Bluetooth: hci2: command tx timeout
[  573.855485][T13145] 8021q: adding VLAN 0 to HW filter on device team0
[  573.973847][T10147] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.981091][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  574.004569][T10147] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.011850][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  574.511835][T13248] IPv6: Can't replace route, no match found
[  574.627238][T13248] netlink: 'syz.2.2434': attribute type 1 has an invalid length.
[  574.752959][T13248] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2434'.
[  575.157470][T13145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  575.287429][T13145] veth0_vlan: entered promiscuous mode
[  575.305586][T13145] veth1_vlan: entered promiscuous mode
[  575.372724][T13145] veth0_macvtap: entered promiscuous mode
[  575.432748][T13145] veth1_macvtap: entered promiscuous mode
[  575.473208][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.492093][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.509743][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  575.530103][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.551656][T13145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  575.593905][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.624823][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.659205][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.684453][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.697457][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.739878][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.760039][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.799820][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.819772][T13145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  575.839574][T13145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  575.871770][T13145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  575.917340][T13145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  575.946215][T13145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  575.972963][T13145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  575.989527][T13145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.034127][T13276] netlink: 'syz.2.2433': attribute type 10 has an invalid length.
[  576.098135][T13276] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.106438][T13276] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.221090][T13276] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.228377][T13276] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.236049][T13276] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.243324][T13276] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.267838][T13276] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  576.606182][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.630186][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.668888][T13283] netlink: 'syz.0.2436': attribute type 58 has an invalid length.
[  576.699673][T13283] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2436'.
[  576.708801][T13283] FAULT_INJECTION: forcing a failure.
[  576.708801][T13283] name failslab, interval 1, probability 0, space 0, times 0
[  576.714843][ T6062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  576.729717][T13283] CPU: 0 PID: 13283 Comm: syz.0.2436 Not tainted syzkaller #0
[  576.732180][ T6062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  576.737218][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  576.737234][T13283] Call Trace:
[  576.737244][T13283]  <TASK>
[  576.737253][T13283]  dump_stack_lvl+0x18c/0x250
[  576.765603][T13283]  ? show_regs_print_info+0x20/0x20
[  576.770845][T13283]  ? load_image+0x400/0x400
[  576.775373][T13283]  ? __might_sleep+0xe0/0xe0
[  576.779987][T13283]  ? __lock_acquire+0x7d40/0x7d40
[  576.785061][T13283]  should_fail_ex+0x39d/0x4d0
[  576.789806][T13283]  should_failslab+0x9/0x20
[  576.794315][T13283]  slab_pre_alloc_hook+0x59/0x310
[  576.799359][T13283]  ? lockdep_hardirqs_on+0x98/0x150
[  576.804567][T13283]  kmem_cache_alloc_node+0x60/0x320
[  576.809768][T13283]  ? __alloc_skb+0x103/0x2c0
[  576.814384][T13283]  __alloc_skb+0x103/0x2c0
[  576.818855][T13283]  netlink_ack+0x376/0x1180
[  576.823423][T13283]  ? __dev_queue_xmit+0x265/0x3660
[  576.829012][T13283]  ? netlink_dump+0xe50/0xe50
[  576.833709][T13283]  ? ref_tracker_free+0x690/0x840
[  576.838759][T13283]  netlink_rcv_skb+0x2c5/0x4d0
[  576.843541][T13283]  ? rtnetlink_bind+0x80/0x80
[  576.848232][T13283]  ? netlink_ack+0x1180/0x1180
[  576.853110][T13283]  ? __lock_acquire+0x7d40/0x7d40
[  576.858151][T13283]  ? netlink_deliver_tap+0x2e/0x1b0
[  576.863366][T13283]  netlink_unicast+0x751/0x8d0
[  576.868152][T13283]  netlink_sendmsg+0x8d0/0xbf0
[  576.872937][T13283]  ? netlink_getsockopt+0x590/0x590
[  576.878151][T13283]  ? aa_sock_msg_perm+0x94/0x150
[  576.883103][T13283]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  576.888402][T13283]  ? security_socket_sendmsg+0x80/0xa0
[  576.893872][T13283]  ? netlink_getsockopt+0x590/0x590
[  576.899090][T13283]  ____sys_sendmsg+0x5ba/0x960
[  576.903870][T13283]  ? __asan_memset+0x22/0x40
[  576.908474][T13283]  ? __sys_sendmsg_sock+0x30/0x30
[  576.913510][T13283]  ? __import_iovec+0x5f2/0x850
[  576.918420][T13283]  ? import_iovec+0x73/0xa0
[  576.922960][T13283]  ___sys_sendmsg+0x2a6/0x360
[  576.927645][T13283]  ? get_pid_task+0x20/0x1e0
[  576.932344][T13283]  ? __sys_sendmsg+0x2a0/0x2a0
[  576.937136][T13283]  ? __lock_acquire+0x7d40/0x7d40
[  576.942194][T13283]  __se_sys_sendmsg+0x1c2/0x2b0
[  576.947066][T13283]  ? __x64_sys_sendmsg+0x80/0x80
[  576.952025][T13283]  ? lockdep_hardirqs_on+0x98/0x150
[  576.957238][T13283]  do_syscall_64+0x55/0xa0
[  576.961679][T13283]  ? clear_bhb_loop+0x40/0x90
[  576.966366][T13283]  ? clear_bhb_loop+0x40/0x90
[  576.971055][T13283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  576.976959][T13283] RIP: 0033:0x7fae67f9c799
[  576.981392][T13283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.001206][T13283] RSP: 002b:00007fae68f20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  577.009728][T13283] RAX: ffffffffffffffda RBX: 00007fae68215fa0 RCX: 00007fae67f9c799
[  577.017799][T13283] RDX: 0000000004000800 RSI: 0000200000000940 RDI: 0000000000000003
[  577.025784][T13283] RBP: 00007fae68f20090 R08: 0000000000000000 R09: 0000000000000000
[  577.033768][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.041752][T13283] R13: 00007fae68216038 R14: 00007fae68215fa0 R15: 00007ffe578156f8
[  577.049752][T13283]  </TASK>
[  577.695461][T13297] netlink: 'syz.2.2439': attribute type 1 has an invalid length.
[  577.746205][T13297] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2439'.
[  577.789622][T13296] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  577.799504][T13296] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  578.068878][T13293] IPv6: Can't replace route, no match found
[  578.344349][T13299] delete_channel: no stack
[  579.202765][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  579.218675][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  579.238501][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  579.270385][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  579.301034][T10150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.312624][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  579.327614][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  579.513501][T10150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.644918][T10150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.777938][T10150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.074078][T13317] chnl_net:caif_netlink_parms(): no params data found
[  580.438347][T10150] tipc: Left network mode
[  580.521711][T13317] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.529062][T13317] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.540496][T13317] bridge_slave_0: entered allmulticast mode
[  580.548487][T13317] bridge_slave_0: entered promiscuous mode
[  580.591813][T13317] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.599036][T13317] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.654691][T13317] bridge_slave_1: entered allmulticast mode
[  580.683304][T13317] bridge_slave_1: entered promiscuous mode
[  581.397763][T13317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  581.407762][T12927] Bluetooth: hci0: command tx timeout
[  581.537937][T13317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  581.790848][T13379] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2459'.
[  581.878581][T13317] team0: Port device team_slave_0 added
[  581.954426][T13386] netlink: 'syz.3.2460': attribute type 29 has an invalid length.
[  582.007333][T13317] team0: Port device team_slave_1 added
[  582.247635][T13386] netlink: 'syz.3.2460': attribute type 29 has an invalid length.
[  582.371021][T13317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  582.378050][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.408699][T13317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  582.444994][T13394] netlink: 'syz.1.2463': attribute type 1 has an invalid length.
[  582.463826][T13317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  582.476395][T13394] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2463'.
[  582.486156][T13317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  582.513802][T13317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  582.672572][T13317] hsr_slave_0: entered promiscuous mode
[  582.680856][T13317] hsr_slave_1: entered promiscuous mode
[  582.710658][T13317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  582.733957][T13317] Cannot create hsr debugfs directory
[  582.981526][T13407] netlink: 'syz.3.2468': attribute type 11 has an invalid length.
[  582.990747][T13407] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.2468'.
[  583.041969][T13407] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  583.479513][T12927] Bluetooth: hci0: command tx timeout
[  584.942490][T13445] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2474'.
[  585.226176][T10150] bond0: (slave wlan1): Releasing backup interface
[  585.561876][T12927] Bluetooth: hci0: command tx timeout
[  586.140568][T10150] vlan0: left allmulticast mode
[  586.182939][T10150] veth0_vlan: left allmulticast mode
[  586.188465][T10150] vlan0: left promiscuous mode
[  586.221921][T10150] À: port 1(vlan0) entered disabled state
[  586.255552][T10150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  586.263900][T10150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  586.301064][T10150] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  586.308375][T10150] batman_adv: batadv0: Removing interface: veth0_vlan
[  586.330371][T10150] bridge_slave_1: left allmulticast mode
[  586.336091][T10150] bridge_slave_1: left promiscuous mode
[  586.362610][T10150] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.376019][T10150] bridge_slave_0: left allmulticast mode
[  586.382020][T10150] bridge_slave_0: left promiscuous mode
[  586.388352][T10150] bridge0: port 1(bridge_slave_0) entered disabled state
[  586.518184][T10150] veth0_vlan: left promiscuous mode
[  586.802004][T13486] netlink: 'syz.3.2480': attribute type 1 has an invalid length.
[  586.819562][T13486] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2480'.
[  587.647868][T12927] Bluetooth: hci0: command tx timeout
[  587.788576][T10150] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  587.940185][T10150] bond0 (unregistering): (slave 
0.&nr): Releasing backup interface
[  587.996467][T10150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  588.380887][T10150] bond0 (unregistering): Released all slaves
[  588.504273][T13479] IPv6: Can't replace route, no match found
[  588.541663][T13492] C: renamed from team_slave_0 (while UP)
[  588.651420][T13492] netlink: 'syz.1.2484': attribute type 3 has an invalid length.
[  588.665016][T13492] netlink: 'syz.1.2484': attribute type 1 has an invalid length.
[  588.677483][T13492] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2484'.
[  588.701149][T13492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  589.224965][T13317] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  589.262820][T13317] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  589.330943][T13317] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  589.615194][T13317] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  589.639374][T13499] netlink: 'syz.3.2486': attribute type 10 has an invalid length.
[  589.669738][T13504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2487'.
[  589.966308][T13317] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.061630][T13317] 8021q: adding VLAN 0 to HW filter on device team0
[  590.092938][T10150] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.100196][T10150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.144672][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.151930][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.452778][T13529] netlink: 'syz.1.2493': attribute type 2 has an invalid length.
[  590.482080][T13529] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2493'.
[  590.879856][T13529] syz.1.2493 (13529) used greatest stack depth: 18440 bytes left
[  590.902404][T13317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.073789][T13317] veth0_vlan: entered promiscuous mode
[  591.122121][T13317] veth1_vlan: entered promiscuous mode
[  591.213286][T13317] veth0_macvtap: entered promiscuous mode
[  591.233830][T13317] veth1_macvtap: entered promiscuous mode
[  591.277950][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.298233][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.329389][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.355840][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.379253][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  591.397499][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.419172][T13317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  591.458072][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.469858][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.490690][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.507333][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.525767][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.557477][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.568468][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.587549][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.606705][T13317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  591.617549][T13317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  591.637259][T13317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  591.690371][T13317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  591.699145][T13317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  591.720913][T13317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  591.740466][T13317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  591.950009][ T6062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  591.957904][ T6062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  592.026410][T10147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  592.053342][T10147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.611555][T13576] IPv6: Can't replace route, no match found
[  593.667979][T13576] netlink: 'syz.2.2495': attribute type 1 has an invalid length.
[  593.709928][T13576] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2495'.
[  594.529002][T13583] netlink: 'syz.1.2497': attribute type 10 has an invalid length.
[  594.771896][T13583] team0: Device ipvlan1 failed to register rx_handler
[  594.943060][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  594.957718][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  594.966204][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  594.985829][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  594.997461][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  595.010069][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  595.453293][T13583] syz.1.2497 (13583) used greatest stack depth: 17704 bytes left
[  596.052737][T13621] netlink: 'syz.2.2507': attribute type 7 has an invalid length.
[  596.146614][T13621] netlink: 'syz.2.2507': attribute type 6 has an invalid length.
[  596.771305][T10148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.851890][T13637] IPv6: Can't replace route, no match found
[  596.931269][T13637] netlink: 'syz.2.2508': attribute type 1 has an invalid length.
[  596.939300][T13637] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2508'.
[  597.017551][T10148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.049161][T13594] chnl_net:caif_netlink_parms(): no params data found
[  597.079693][   T51] Bluetooth: hci3: command tx timeout
[  597.140711][T10148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.273666][T10148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.447401][T13644] netlink: 'syz.0.2509': attribute type 10 has an invalid length.
[  597.665515][T13644] team0: Device ipvlan1 failed to register rx_handler
[  599.169688][   T51] Bluetooth: hci3: command tx timeout
[  599.313545][T13594] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.321551][T13594] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.328904][T13594] bridge_slave_0: entered allmulticast mode
[  599.354871][T13594] bridge_slave_0: entered promiscuous mode
[  599.386162][T13594] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.408366][T13594] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.429615][T13594] bridge_slave_1: entered allmulticast mode
[  599.451608][T13594] bridge_slave_1: entered promiscuous mode
[  599.537318][T13594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  599.538108][T13669] netlink: 'syz.1.2516': attribute type 153 has an invalid length.
[  599.550491][T13594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  599.570322][T13669] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2516'.
[  599.773243][T13594] team0: Port device team_slave_0 added
[  599.814828][T13594] team0: Port device team_slave_1 added
[  599.962207][T13594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  599.969235][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.059113][T13594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.087394][T10148] tipc: Left network mode
[  600.093747][T13594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.101299][T13594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.137698][T13594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.162001][T13679] FAULT_INJECTION: forcing a failure.
[  600.162001][T13679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  600.202887][T13679] CPU: 1 PID: 13679 Comm: syz.2.2520 Not tainted syzkaller #0
[  600.210438][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  600.220636][T13679] Call Trace:
[  600.223957][T13679]  <TASK>
[  600.226928][T13679]  dump_stack_lvl+0x18c/0x250
[  600.231669][T13679]  ? show_regs_print_info+0x20/0x20
[  600.236923][T13679]  ? load_image+0x400/0x400
[  600.241488][T13679]  ? __lock_acquire+0x7d40/0x7d40
[  600.246575][T13679]  ? snprintf+0xe9/0x140
[  600.250884][T13679]  should_fail_ex+0x39d/0x4d0
[  600.255634][T13679]  _copy_to_user+0x2f/0xa0
[  600.260124][T13679]  simple_read_from_buffer+0xe7/0x150
[  600.265666][T13679]  proc_fail_nth_read+0x1e8/0x260
[  600.270851][T13679]  ? proc_fault_inject_write+0x360/0x360
[  600.276546][T13679]  ? fsnotify_perm+0x271/0x5e0
[  600.281352][T13679]  ? proc_fault_inject_write+0x360/0x360
[  600.287017][T13679]  vfs_read+0x28b/0x970
[  600.291219][T13679]  ? kernel_read+0x1e0/0x1e0
[  600.295839][T13679]  ? __fget_files+0x28/0x4b0
[  600.300456][T13679]  ? __fget_files+0x28/0x4b0
[  600.305162][T13679]  ? __fget_files+0x43d/0x4b0
[  600.309886][T13679]  ? __fdget_pos+0x2a3/0x330
[  600.314498][T13679]  ? ksys_read+0x75/0x260
[  600.318859][T13679]  ksys_read+0x150/0x260
[  600.323134][T13679]  ? vfs_write+0x990/0x990
[  600.327586][T13679]  ? lockdep_hardirqs_on+0x98/0x150
[  600.332814][T13679]  do_syscall_64+0x55/0xa0
[  600.337306][T13679]  ? clear_bhb_loop+0x40/0x90
[  600.342010][T13679]  ? clear_bhb_loop+0x40/0x90
[  600.346709][T13679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  600.352710][T13679] RIP: 0033:0x7fa46a95cfce
[  600.357150][T13679] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  600.376790][T13679] RSP: 002b:00007fa46b8a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  600.385236][T13679] RAX: ffffffffffffffda RBX: 00007fa46b8aa6c0 RCX: 00007fa46a95cfce
[  600.393229][T13679] RDX: 000000000000000f RSI: 00007fa46b8aa0a0 RDI: 0000000000000006
[  600.401225][T13679] RBP: 00007fa46b8aa090 R08: 0000000000000000 R09: 0000000000000000
[  600.409217][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  600.417214][T13679] R13: 00007fa46ac16038 R14: 00007fa46ac15fa0 R15: 00007ffe3402ea28
[  600.425242][T13679]  </TASK>
[  600.592339][T13684] netlink: 'syz.0.2519': attribute type 1 has an invalid length.
[  600.704600][T13684] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2519'.
[  600.832537][T13685] netlink: 'syz.1.2522': attribute type 29 has an invalid length.
[  601.246854][   T51] Bluetooth: hci3: command tx timeout
[  601.597991][T13685] netlink: 'syz.1.2522': attribute type 29 has an invalid length.
[  601.686402][T13594] hsr_slave_0: entered promiscuous mode
[  601.750493][T13594] hsr_slave_1: entered promiscuous mode
[  601.860715][T13594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.926219][T13594] Cannot create hsr debugfs directory
[  603.325129][   T51] Bluetooth: hci3: command tx timeout
[  603.886104][T13721] netlink: 'syz.1.2528': attribute type 2 has an invalid length.
[  603.934208][T13721] netlink: 'syz.1.2528': attribute type 1 has an invalid length.
[  604.003631][T13721] netlink: 166284 bytes leftover after parsing attributes in process `syz.1.2528'.
[  608.007555][T10148] hsr_slave_0: left promiscuous mode
[  608.056777][T10148] hsr_slave_1: left promiscuous mode
[  608.092609][T10148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.119955][T10148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.170626][T10148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.186818][T10148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.199034][T10148] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  608.214595][T10148] batman_adv: batadv0: Removing interface: veth0_vlan
[  608.235666][T10148] bridge_slave_1: left allmulticast mode
[  608.242872][T10148] bridge_slave_1: left promiscuous mode
[  608.259667][T10148] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.296987][T10148] bridge_slave_0: left allmulticast mode
[  608.309436][T10148] bridge_slave_0: left promiscuous mode
[  608.315488][T10148] bridge0: port 1(bridge_slave_0) entered disabled state
[  608.382405][T10148] veth0_macvtap: left promiscuous mode
[  608.391874][T10148] veth1_vlan: left allmulticast mode
[  608.399030][T10148] veth1_vlan: left promiscuous mode
[  608.417993][T10148] veth0_vlan: left promiscuous mode
[  610.266030][T13594] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  610.277549][T13594] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  610.319611][T13777] netlink: 'syz.0.2541': attribute type 10 has an invalid length.
[  610.608305][T13594] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  610.629260][T13594] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  610.875357][T13594] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.964782][T13594] 8021q: adding VLAN 0 to HW filter on device team0
[  611.012162][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.019419][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.141831][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.149034][ T6062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  611.916736][T13594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.973040][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2549'.
[  612.006356][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2549'.
[  612.060755][T13819] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2549'.
[  612.158563][T13594] veth0_vlan: entered promiscuous mode
[  612.213372][T13594] veth1_vlan: entered promiscuous mode
[  612.394695][T13594] veth0_macvtap: entered promiscuous mode
[  612.437710][T13594] veth1_macvtap: entered promiscuous mode
[  612.516399][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.561704][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.623668][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.649940][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.663145][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  612.675849][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  612.689692][T13594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  615.072715][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.093539][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.129527][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.157607][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.174727][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.185667][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.198822][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.211389][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.222568][T13594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  615.233496][T13594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.246980][T13594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  615.330959][T13594] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  615.340239][T13594] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  615.355850][T13594] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  615.364859][T13594] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  615.381119][T13844] bridge0: port 3(team0) entered blocking state
[  615.420247][T13844] bridge0: port 3(team0) entered disabled state
[  615.438057][T13844] team0: entered allmulticast mode
[  615.453658][T13844] C: entered allmulticast mode
[  615.459040][T13844] team_slave_1: entered allmulticast mode
[  615.488005][T13844] team0: entered promiscuous mode
[  615.497071][T13844] C: entered promiscuous mode
[  615.519766][T13844] team_slave_1: entered promiscuous mode
[  615.546976][T13844] bridge0: port 3(team0) entered blocking state
[  615.553795][T13844] bridge0: port 3(team0) entered forwarding state
[  615.653415][T13853] macvlan1: entered promiscuous mode
[  615.664556][T13853] macvlan1: entered allmulticast mode
[  615.807205][T13853] veth1_vlan: entered allmulticast mode
[  615.984820][T13857] IPv6: Can't replace route, no match found
[  616.008607][T13853] netlink: 'syz.2.2555': attribute type 21 has an invalid length.
[  616.029686][T13853] netlink: 'syz.2.2555': attribute type 6 has an invalid length.
[  616.037509][T13853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2555'.
[  616.115771][T13857] netlink: 'syz.0.2556': attribute type 1 has an invalid length.
[  616.130007][T13857] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2556'.
[  616.150154][T10154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.158140][T10154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.275790][T10155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.298697][T13871] netlink: 'syz.1.2558': attribute type 2 has an invalid length.
[  616.319458][T10155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.336155][T13871] netlink: 'syz.1.2558': attribute type 1 has an invalid length.
[  616.375550][T13871] netlink: 166284 bytes leftover after parsing attributes in process `syz.1.2558'.
[  616.853659][T13877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2498'.
[  618.620628][T13886] sit0: entered allmulticast mode
[  619.205162][T13912] FAULT_INJECTION: forcing a failure.
[  619.205162][T13912] name failslab, interval 1, probability 0, space 0, times 0
[  619.251572][T13912] CPU: 0 PID: 13912 Comm: syz.3.2564 Not tainted syzkaller #0
[  619.259127][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  619.269228][T13912] Call Trace:
[  619.272545][T13912]  <TASK>
[  619.275513][T13912]  dump_stack_lvl+0x18c/0x250
[  619.280258][T13912]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  619.286470][T13912]  ? show_regs_print_info+0x20/0x20
[  619.291815][T13912]  ? load_image+0x400/0x400
[  619.296415][T13912]  should_fail_ex+0x39d/0x4d0
[  619.301245][T13912]  should_failslab+0x9/0x20
[  619.305887][T13912]  slab_pre_alloc_hook+0x59/0x310
[  619.310961][T13912]  ? lockdep_hardirqs_on+0x98/0x150
[  619.316220][T13912]  kmem_cache_alloc+0x5a/0x2d0
[  619.321028][T13912]  ? skb_clone+0x1eb/0x370
[  619.325491][T13912]  skb_clone+0x1eb/0x370
[  619.329777][T13912]  __netlink_deliver_tap+0x41c/0x830
[  619.335110][T13912]  ? netlink_deliver_tap+0x2e/0x1b0
[  619.340349][T13912]  netlink_deliver_tap+0x19c/0x1b0
[  619.345493][T13912]  netlink_unicast+0x72c/0x8d0
[  619.350291][T13912]  netlink_sendmsg+0x8d0/0xbf0
[  619.355083][T13912]  ? lockdep_hardirqs_on+0x98/0x150
[  619.360301][T13912]  ? netlink_getsockopt+0x590/0x590
[  619.365526][T13912]  ? security_socket_sendmsg+0x45/0xa0
[  619.371002][T13912]  ? security_socket_sendmsg+0x80/0xa0
[  619.376471][T13912]  ? netlink_getsockopt+0x590/0x590
[  619.381690][T13912]  ____sys_sendmsg+0x5ba/0x960
[  619.386477][T13912]  ? __asan_memset+0x22/0x40
[  619.391085][T13912]  ? __sys_sendmsg_sock+0x30/0x30
[  619.396119][T13912]  ? __import_iovec+0x5f2/0x850
[  619.401002][T13912]  ? import_iovec+0x73/0xa0
[  619.405527][T13912]  ___sys_sendmsg+0x2a6/0x360
[  619.410311][T13912]  ? __sys_sendmsg+0x2a0/0x2a0
[  619.415111][T13912]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  619.421393][T13912]  __se_sys_sendmsg+0x1c2/0x2b0
[  619.426274][T13912]  ? __x64_sys_sendmsg+0x80/0x80
[  619.431241][T13912]  ? lockdep_hardirqs_on+0x98/0x150
[  619.436457][T13912]  do_syscall_64+0x55/0xa0
[  619.440895][T13912]  ? clear_bhb_loop+0x40/0x90
[  619.445602][T13912]  ? clear_bhb_loop+0x40/0x90
[  619.450321][T13912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  619.456248][T13912] RIP: 0033:0x7fb44979c799
[  619.460682][T13912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.480413][T13912] RSP: 002b:00007fb44a70a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  619.488852][T13912] RAX: ffffffffffffffda RBX: 00007fb449a15fa0 RCX: 00007fb44979c799
[  619.496836][T13912] RDX: 0200000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  619.504820][T13912] RBP: 00007fb44a70a090 R08: 0000000000000000 R09: 0000000000000000
[  619.512816][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.520884][T13912] R13: 00007fb449a16038 R14: 00007fb449a15fa0 R15: 00007fff9eefc358
[  619.528883][T13912]  </TASK>
[  620.027971][T13920] IPv6: Can't replace route, no match found
[  620.067227][T13920] netlink: 'syz.2.2567': attribute type 1 has an invalid length.
[  620.081350][T13920] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2567'.
[  620.454944][T13927] netlink: 'syz.1.2569': attribute type 2 has an invalid length.
[  620.489913][T13927] netlink: 'syz.1.2569': attribute type 1 has an invalid length.
[  620.497771][T13927] netlink: 166284 bytes leftover after parsing attributes in process `syz.1.2569'.
[  620.567941][T13931] FAULT_INJECTION: forcing a failure.
[  620.567941][T13931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  620.593094][T13931] CPU: 0 PID: 13931 Comm: syz.3.2572 Not tainted syzkaller #0
[  620.600644][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  620.610751][T13931] Call Trace:
[  620.614070][T13931]  <TASK>
[  620.617040][T13931]  dump_stack_lvl+0x18c/0x250
[  620.621775][T13931]  ? show_regs_print_info+0x20/0x20
[  620.627038][T13931]  ? load_image+0x400/0x400
[  620.631608][T13931]  ? __might_fault+0xaa/0x120
[  620.636599][T13931]  ? __lock_acquire+0x7d40/0x7d40
[  620.641669][T13931]  should_fail_ex+0x39d/0x4d0
[  620.646399][T13931]  _copy_from_user+0x2f/0xe0
[  620.651051][T13931]  __sys_bpf+0x23e/0x890
[  620.655350][T13931]  ? bpf_link_show_fdinfo+0x390/0x390
[  620.660790][T13931]  ? lock_chain_count+0x20/0x20
[  620.665690][T13931]  __x64_sys_bpf+0x7c/0x90
[  620.670154][T13931]  do_syscall_64+0x55/0xa0
[  620.674618][T13931]  ? clear_bhb_loop+0x40/0x90
[  620.679333][T13931]  ? clear_bhb_loop+0x40/0x90
[  620.684051][T13931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  620.690001][T13931] RIP: 0033:0x7fb44979c799
[  620.694567][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  620.714293][T13931] RSP: 002b:00007fb44a70a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  620.722765][T13931] RAX: ffffffffffffffda RBX: 00007fb449a15fa0 RCX: 00007fb44979c799
[  620.730785][T13931] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[  620.738801][T13931] RBP: 00007fb44a70a090 R08: 0000000000000000 R09: 0000000000000000
[  620.746815][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  620.754837][T13931] R13: 00007fb449a16038 R14: 00007fb449a15fa0 R15: 00007fff9eefc358
[  620.762885][T13931]  </TASK>
[  621.281720][T13947] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2573'.
[  624.642193][T13958] sit0: entered allmulticast mode
[  624.686504][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  624.693067][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  624.942003][T13975] netlink: 'syz.0.2584': attribute type 2 has an invalid length.
[  624.984537][T13975] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2584'.
[  626.104134][T13998] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  626.117867][T13998] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  626.146292][   T51] Bluetooth: hci3: unexpected event 0x06 length: 151 > 3
[  626.557439][T14002] netlink: 'syz.2.2595': attribute type 2 has an invalid length.
[  626.639693][T14002] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2595'.
[  626.928202][T14016] FAULT_INJECTION: forcing a failure.
[  626.928202][T14016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.969705][T14016] CPU: 0 PID: 14016 Comm: syz.0.2600 Not tainted syzkaller #0
[  626.977245][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  626.987364][T14016] Call Trace:
[  626.990682][T14016]  <TASK>
[  626.993651][T14016]  dump_stack_lvl+0x18c/0x250
[  626.998400][T14016]  ? show_regs_print_info+0x20/0x20
[  627.003655][T14016]  ? load_image+0x400/0x400
[  627.008212][T14016]  ? __might_fault+0xaa/0x120
[  627.013025][T14016]  ? __lock_acquire+0x7d40/0x7d40
[  627.018117][T14016]  should_fail_ex+0x39d/0x4d0
[  627.022877][T14016]  _copy_from_user+0x2f/0xe0
[  627.027516][T14016]  ___sys_sendmsg+0x1c7/0x360
[  627.032247][T14016]  ? __sys_sendmsg+0x2a0/0x2a0
[  627.037085][T14016]  ? __lock_acquire+0x7d40/0x7d40
[  627.042231][T14016]  __se_sys_sendmsg+0x1c2/0x2b0
[  627.047227][T14016]  ? __x64_sys_sendmsg+0x80/0x80
[  627.052236][T14016]  ? lockdep_hardirqs_on+0x98/0x150
[  627.057498][T14016]  do_syscall_64+0x55/0xa0
[  627.061965][T14016]  ? clear_bhb_loop+0x40/0x90
[  627.066678][T14016]  ? clear_bhb_loop+0x40/0x90
[  627.071395][T14016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.077329][T14016] RIP: 0033:0x7f86abb9c799
[  627.081772][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.101399][T14016] RSP: 002b:00007f86aca55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.109835][T14016] RAX: ffffffffffffffda RBX: 00007f86abe15fa0 RCX: 00007f86abb9c799
[  627.117818][T14016] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  627.125826][T14016] RBP: 00007f86aca55090 R08: 0000000000000000 R09: 0000000000000000
[  627.133836][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.141836][T14016] R13: 00007f86abe16038 R14: 00007f86abe15fa0 R15: 00007ffe817c82c8
[  627.149924][T14016]  </TASK>
[  627.162863][T14005] IPv6: Can't replace route, no match found
[  627.214436][T14005] netlink: 'syz.3.2594': attribute type 1 has an invalid length.
[  627.288488][T14005] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2594'.
[  627.382005][T14023] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2603'.
[  627.452474][T14023] netlink: 'syz.2.2603': attribute type 21 has an invalid length.
[  627.480592][T14023] netlink: 'syz.2.2603': attribute type 6 has an invalid length.
[  627.495054][T14023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2603'.
[  628.421292][T14039] netlink: 'syz.0.2608': attribute type 2 has an invalid length.
[  628.431734][T14039] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2608'.
[  628.637880][T14044] netlink: 'syz.0.2610': attribute type 21 has an invalid length.
[  628.669794][T14044] netlink: 'syz.0.2610': attribute type 6 has an invalid length.
[  628.706388][T14044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'.
[  628.912972][T14049] FAULT_INJECTION: forcing a failure.
[  628.912972][T14049] name failslab, interval 1, probability 0, space 0, times 0
[  629.002837][T14049] CPU: 0 PID: 14049 Comm: syz.1.2611 Not tainted syzkaller #0
[  629.010395][T14049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  629.020775][T14049] Call Trace:
[  629.024090][T14049]  <TASK>
[  629.027061][T14049]  dump_stack_lvl+0x18c/0x250
[  629.031972][T14049]  ? show_regs_print_info+0x20/0x20
[  629.037228][T14049]  ? load_image+0x400/0x400
[  629.041790][T14049]  ? __might_sleep+0xe0/0xe0
[  629.046441][T14049]  ? __lock_acquire+0x7d40/0x7d40
[  629.051517][T14049]  ? rcu_is_watching+0x15/0xb0
[  629.056339][T14049]  should_fail_ex+0x39d/0x4d0
[  629.061056][T14049]  should_failslab+0x9/0x20
[  629.065592][T14049]  slab_pre_alloc_hook+0x59/0x310
[  629.070651][T14049]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  629.076574][T14049]  __kmem_cache_alloc_node+0x53/0x250
[  629.081968][T14049]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  629.087875][T14049]  kmalloc_trace+0x2a/0xe0
[  629.092314][T14049]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  629.098058][T14049]  sctp_association_new+0x15d3/0x25c0
[  629.103461][T14049]  sctp_connect_new_asoc+0x2de/0x6a0
[  629.108766][T14049]  ? __sctp_connect+0xd80/0xd80
[  629.113628][T14049]  ? __local_bh_enable_ip+0x13a/0x1c0
[  629.119037][T14049]  ? _local_bh_enable+0xa0/0xa0
[  629.123987][T14049]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  629.129810][T14049]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  629.135636][T14049]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  629.141648][T14049]  ? security_sctp_bind_connect+0x89/0xb0
[  629.147414][T14049]  sctp_sendmsg+0x1575/0x28c0
[  629.152141][T14049]  ? sctp_getsockopt+0xb60/0xb60
[  629.157105][T14049]  ? aa_sk_perm+0x83c/0x970
[  629.161775][T14049]  ? aa_af_perm+0x330/0x330
[  629.166298][T14049]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  629.172771][T14049]  ? sock_rps_record_flow+0x19/0x3f0
[  629.178188][T14049]  ? inet_sendmsg+0x7c/0x2f0
[  629.182822][T14049]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  629.188129][T14049]  ? security_socket_sendmsg+0x80/0xa0
[  629.193603][T14049]  ? inet_send_prepare+0x260/0x260
[  629.198738][T14049]  ____sys_sendmsg+0x5ba/0x960
[  629.203521][T14049]  ? __lock_acquire+0x7d40/0x7d40
[  629.208564][T14049]  ? __asan_memset+0x22/0x40
[  629.213173][T14049]  ? __sys_sendmsg_sock+0x30/0x30
[  629.218208][T14049]  ? __import_iovec+0x5f2/0x850
[  629.223177][T14049]  ? import_iovec+0x73/0xa0
[  629.227700][T14049]  ___sys_sendmsg+0x2a6/0x360
[  629.232394][T14049]  ? get_pid_task+0x20/0x1e0
[  629.237015][T14049]  ? __sys_sendmsg+0x2a0/0x2a0
[  629.241823][T14049]  ? __lock_acquire+0x7d40/0x7d40
[  629.246911][T14049]  __se_sys_sendmsg+0x1c2/0x2b0
[  629.251809][T14049]  ? __x64_sys_sendmsg+0x80/0x80
[  629.256803][T14049]  ? lockdep_hardirqs_on+0x98/0x150
[  629.262115][T14049]  do_syscall_64+0x55/0xa0
[  629.266552][T14049]  ? clear_bhb_loop+0x40/0x90
[  629.271245][T14049]  ? clear_bhb_loop+0x40/0x90
[  629.275936][T14049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.281842][T14049] RIP: 0033:0x7f078639c799
[  629.286274][T14049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.305911][T14049] RSP: 002b:00007f0787289028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  629.314344][T14049] RAX: ffffffffffffffda RBX: 00007f0786616090 RCX: 00007f078639c799
[  629.322416][T14049] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  629.330533][T14049] RBP: 00007f0787289090 R08: 0000000000000000 R09: 0000000000000000
[  629.338552][T14049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.346565][T14049] R13: 00007f0786616128 R14: 00007f0786616090 R15: 00007fffb9fa04a8
[  629.354589][T14049]  </TASK>
[  629.592446][T14054] netlink: 'syz.2.2613': attribute type 1 has an invalid length.
[  630.024442][T14063] IPv6: Can't replace route, no match found
[  630.078895][T14063] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  630.110090][T14063] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2614'.
[  631.228764][T14090] FAULT_INJECTION: forcing a failure.
[  631.228764][T14090] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  631.339464][T14090] CPU: 0 PID: 14090 Comm: syz.1.2625 Not tainted syzkaller #0
[  631.347017][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  631.357131][T14090] Call Trace:
[  631.360446][T14090]  <TASK>
[  631.363415][T14090]  dump_stack_lvl+0x18c/0x250
[  631.368149][T14090]  ? show_regs_print_info+0x20/0x20
[  631.373397][T14090]  ? load_image+0x400/0x400
[  631.377946][T14090]  ? __might_fault+0xaa/0x120
[  631.382665][T14090]  ? __lock_acquire+0x7d40/0x7d40
[  631.387734][T14090]  should_fail_ex+0x39d/0x4d0
[  631.392469][T14090]  _copy_from_user+0x2f/0xe0
[  631.397115][T14090]  __sys_bpf+0x23e/0x890
[  631.401404][T14090]  ? bpf_link_show_fdinfo+0x390/0x390
[  631.406836][T14090]  ? lock_chain_count+0x20/0x20
[  631.411739][T14090]  __x64_sys_bpf+0x7c/0x90
[  631.416199][T14090]  do_syscall_64+0x55/0xa0
[  631.420659][T14090]  ? clear_bhb_loop+0x40/0x90
[  631.425378][T14090]  ? clear_bhb_loop+0x40/0x90
[  631.430104][T14090]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  631.436038][T14090] RIP: 0033:0x7f078639c799
[  631.440527][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.460294][T14090] RSP: 002b:00007f07872aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  631.468758][T14090] RAX: ffffffffffffffda RBX: 00007f0786615fa0 RCX: 00007f078639c799
[  631.476768][T14090] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002
[  631.484786][T14090] RBP: 00007f07872aa090 R08: 0000000000000000 R09: 0000000000000000
[  631.492804][T14090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.500898][T14090] R13: 00007f0786616038 R14: 00007f0786615fa0 R15: 00007fffb9fa04a8
[  631.509106][T14090]  </TASK>
[  631.912863][T14097] netlink: 'syz.1.2627': attribute type 21 has an invalid length.
[  631.929290][T14097] IPv6: NLM_F_CREATE should be specified when creating new route
[  634.125194][T14105] netlink: 'syz.2.2629': attribute type 1 has an invalid length.
[  634.155746][T14105] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2629'.
[  634.425398][T14108] IPv6: Can't replace route, no match found
[  634.464802][T14108] netlink: 'syz.0.2630': attribute type 1 has an invalid length.
[  634.496437][T14108] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2630'.
[  634.867048][T14120] FAULT_INJECTION: forcing a failure.
[  634.867048][T14120] name failslab, interval 1, probability 0, space 0, times 0
[  635.139793][T14120] CPU: 0 PID: 14120 Comm: syz.3.2632 Not tainted syzkaller #0
[  635.147333][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  635.157428][T14120] Call Trace:
[  635.160733][T14120]  <TASK>
[  635.163694][T14120]  dump_stack_lvl+0x18c/0x250
[  635.168432][T14120]  ? sctp_sendmsg+0x1575/0x28c0
[  635.173345][T14120]  ? ___sys_sendmsg+0x2a6/0x360
[  635.178267][T14120]  ? show_regs_print_info+0x20/0x20
[  635.183526][T14120]  ? load_image+0x400/0x400
[  635.188094][T14120]  should_fail_ex+0x39d/0x4d0
[  635.192852][T14120]  should_failslab+0x9/0x20
[  635.197409][T14120]  slab_pre_alloc_hook+0x59/0x310
[  635.202492][T14120]  ? sctp_add_bind_addr+0x8c/0x360
[  635.207639][T14120]  __kmem_cache_alloc_node+0x53/0x250
[  635.213063][T14120]  ? sctp_add_bind_addr+0x8c/0x360
[  635.218218][T14120]  kmalloc_trace+0x2a/0xe0
[  635.222682][T14120]  sctp_add_bind_addr+0x8c/0x360
[  635.227655][T14120]  sctp_copy_local_addr_list+0x315/0x4f0
[  635.233338][T14120]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  635.239107][T14120]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  635.245225][T14120]  ? sctp_v4_is_any+0x35/0x60
[  635.249950][T14120]  ? sctp_copy_one_addr+0x8c/0x350
[  635.255111][T14120]  sctp_bind_addr_copy+0xb3/0x3c0
[  635.260182][T14120]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  635.266549][T14120]  sctp_connect_new_asoc+0x2f9/0x6a0
[  635.271899][T14120]  ? __sctp_connect+0xd80/0xd80
[  635.276804][T14120]  ? __local_bh_enable_ip+0x13a/0x1c0
[  635.282227][T14120]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  635.287831][T14120]  ? security_sctp_bind_connect+0x89/0xb0
[  635.293618][T14120]  sctp_sendmsg+0x1575/0x28c0
[  635.298359][T14120]  ? sctp_getsockopt+0xb60/0xb60
[  635.303338][T14120]  ? aa_sk_perm+0x83c/0x970
[  635.307896][T14120]  ? aa_af_perm+0x330/0x330
[  635.312438][T14120]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  635.318891][T14120]  ? sock_rps_record_flow+0x19/0x3f0
[  635.324216][T14120]  ? inet_sendmsg+0xe9/0x2f0
[  635.328847][T14120]  ? inet_send_prepare+0x260/0x260
[  635.334033][T14120]  ____sys_sendmsg+0x5ba/0x960
[  635.338923][T14120]  ? __lock_acquire+0x7d40/0x7d40
[  635.344018][T14120]  ? __asan_memset+0x22/0x40
[  635.348676][T14120]  ? __sys_sendmsg_sock+0x30/0x30
[  635.353757][T14120]  ? __import_iovec+0x5f2/0x850
[  635.358680][T14120]  ? import_iovec+0x73/0xa0
[  635.363227][T14120]  ___sys_sendmsg+0x2a6/0x360
[  635.367954][T14120]  ? __sys_sendmsg+0x2a0/0x2a0
[  635.372784][T14120]  ? __lock_acquire+0x7d40/0x7d40
[  635.377888][T14120]  __se_sys_sendmsg+0x1c2/0x2b0
[  635.383043][T14120]  ? __x64_sys_sendmsg+0x80/0x80
[  635.388042][T14120]  ? lockdep_hardirqs_on+0x98/0x150
[  635.393299][T14120]  do_syscall_64+0x55/0xa0
[  635.397761][T14120]  ? clear_bhb_loop+0x40/0x90
[  635.402473][T14120]  ? clear_bhb_loop+0x40/0x90
[  635.407201][T14120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  635.413138][T14120] RIP: 0033:0x7fb44979c799
[  635.417590][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.437243][T14120] RSP: 002b:00007fb44a6e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  635.445699][T14120] RAX: ffffffffffffffda RBX: 00007fb449a16090 RCX: 00007fb44979c799
[  635.453703][T14120] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 000000000000000b
[  635.461707][T14120] RBP: 00007fb44a6e9090 R08: 0000000000000000 R09: 0000000000000000
[  635.469714][T14120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  635.478686][T14120] R13: 00007fb449a16128 R14: 00007fb449a16090 R15: 00007fff9eefc358
[  635.486729][T14120]  </TASK>
[  637.280418][T14155] netlink: 'syz.1.2647': attribute type 29 has an invalid length.
[  637.304814][T14155] netlink: 'syz.1.2647': attribute type 3 has an invalid length.
[  637.321730][T14155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2647'.
[  637.333351][T14158] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2648'.
[  637.854234][T14167] netlink: 'syz.3.2651': attribute type 21 has an invalid length.
[  637.900185][T14167] netlink: 'syz.3.2651': attribute type 6 has an invalid length.
[  637.908017][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2651'.
[  638.037529][T14163] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2650'.
[  638.409371][T14184] netlink: 'syz.1.2656': attribute type 10 has an invalid length.
[  638.420348][T14185] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2658'.
[  638.458949][T14184] wg1: entered promiscuous mode
[  638.472224][T14184] wg1: entered allmulticast mode
[  638.477627][T14184] team0: Device wg1 is of different type
[  638.695471][T14190] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2660'.
[  639.126975][T14198] netlink: 'syz.3.2663': attribute type 33 has an invalid length.
[  639.225654][T14198] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2663'.
[  639.343587][ T6062] hsr_slave_0: left promiscuous mode
[  639.352975][ T6062] hsr_slave_1: left promiscuous mode
[  639.359187][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.367989][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.383332][ T6062] bridge_slave_0: left allmulticast mode
[  639.411424][ T6062] bridge_slave_0: left promiscuous mode
[  639.417290][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.437982][T14208] netlink: 'syz.3.2667': attribute type 1 has an invalid length.
[  639.470799][T14208] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2667'.
[  639.513975][ T6062] veth1_vlan: left allmulticast mode
[  639.532762][ T6062] veth0_vlan: left promiscuous mode
[  641.429121][T14231] FAULT_INJECTION: forcing a failure.
[  641.429121][T14231] name failslab, interval 1, probability 0, space 0, times 0
[  641.524648][T14231] CPU: 1 PID: 14231 Comm: syz.0.2675 Not tainted syzkaller #0
[  641.532211][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  641.542315][T14231] Call Trace:
[  641.545630][T14231]  <TASK>
[  641.548597][T14231]  dump_stack_lvl+0x18c/0x250
[  641.553342][T14231]  ? show_regs_print_info+0x20/0x20
[  641.558595][T14231]  ? load_image+0x400/0x400
[  641.563159][T14231]  ? __might_sleep+0xe0/0xe0
[  641.567798][T14231]  ? __lock_acquire+0x7d40/0x7d40
[  641.572879][T14231]  should_fail_ex+0x39d/0x4d0
[  641.577619][T14231]  should_failslab+0x9/0x20
[  641.582215][T14231]  slab_pre_alloc_hook+0x59/0x310
[  641.587293][T14231]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  641.593510][T14231]  ? __get_vm_area_node+0x125/0x370
[  641.598763][T14231]  __kmem_cache_alloc_node+0x53/0x250
[  641.604188][T14231]  ? __get_vm_area_node+0x125/0x370
[  641.609436][T14231]  kmalloc_node_trace+0x26/0xe0
[  641.614345][T14231]  __get_vm_area_node+0x125/0x370
[  641.619426][T14231]  __vmalloc_node_range+0x36e/0x1330
[  641.624764][T14231]  ? netlink_sendmsg+0x602/0xbf0
[  641.629757][T14231]  ? netlink_insert+0x109f/0x13a0
[  641.634859][T14231]  ? netlink_data_ready+0x10/0x10
[  641.639943][T14231]  ? free_vm_area+0x50/0x50
[  641.644510][T14231]  ? netlink_sendmsg+0x602/0xbf0
[  641.649509][T14231]  vmalloc+0x79/0x90
[  641.653453][T14231]  ? netlink_sendmsg+0x602/0xbf0
[  641.658443][T14231]  netlink_sendmsg+0x602/0xbf0
[  641.663270][T14231]  ? netlink_getsockopt+0x590/0x590
[  641.668513][T14231]  ? aa_sock_msg_perm+0x94/0x150
[  641.673477][T14231]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  641.678784][T14231]  ? security_socket_sendmsg+0x80/0xa0
[  641.684276][T14231]  sock_write_iter+0x2df/0x420
[  641.689156][T14231]  ? sock_read_iter+0x3e0/0x3e0
[  641.694026][T14231]  ? common_file_perm+0x198/0x1f0
[  641.699069][T14231]  vfs_write+0x46c/0x990
[  641.703334][T14231]  ? file_end_write+0x250/0x250
[  641.708225][T14231]  ? __fget_files+0x43d/0x4b0
[  641.712922][T14231]  ? __fdget_pos+0x1d8/0x330
[  641.717526][T14231]  ? ksys_write+0x75/0x260
[  641.721959][T14231]  ksys_write+0x150/0x260
[  641.726305][T14231]  ? __ia32_sys_read+0x90/0x90
[  641.731086][T14231]  ? syscall_enter_from_user_mode+0x2e/0x80
[  641.736995][T14231]  do_syscall_64+0x55/0xa0
[  641.741430][T14231]  ? clear_bhb_loop+0x40/0x90
[  641.746140][T14231]  ? clear_bhb_loop+0x40/0x90
[  641.750827][T14231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.756731][T14231] RIP: 0033:0x7f86abb9c799
[  641.761159][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.780778][T14231] RSP: 002b:00007f86aca55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  641.789207][T14231] RAX: ffffffffffffffda RBX: 00007f86abe15fa0 RCX: 00007f86abb9c799
[  641.797281][T14231] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007
[  641.805262][T14231] RBP: 00007f86aca55090 R08: 0000000000000000 R09: 0000000000000000
[  641.813241][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.821222][T14231] R13: 00007f86abe16038 R14: 00007f86abe15fa0 R15: 00007ffe817c82c8
[  641.829214][T14231]  </TASK>
[  641.872594][T14231] syz.0.2675: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  641.909791][T14231] CPU: 1 PID: 14231 Comm: syz.0.2675 Not tainted syzkaller #0
[  641.917334][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  641.927422][T14231] Call Trace:
[  641.930728][T14231]  <TASK>
[  641.933687][T14231]  dump_stack_lvl+0x18c/0x250
[  641.938423][T14231]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  641.944624][T14231]  ? show_regs_print_info+0x20/0x20
[  641.949863][T14231]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  641.956071][T14231]  ? dump_stack+0x9/0x20
[  641.960357][T14231]  warn_alloc+0x246/0x340
[  641.964717][T14231]  ? __get_vm_area_node+0x125/0x370
[  641.969951][T14231]  ? zone_watermark_ok_safe+0x230/0x230
[  641.975533][T14231]  ? rcu_is_watching+0x15/0xb0
[  641.980340][T14231]  ? __get_vm_area_node+0x356/0x370
[  641.985579][T14231]  __vmalloc_node_range+0x393/0x1330
[  641.990900][T14231]  ? netlink_insert+0x109f/0x13a0
[  641.995976][T14231]  ? netlink_data_ready+0x10/0x10
[  642.001033][T14231]  ? free_vm_area+0x50/0x50
[  642.005572][T14231]  ? netlink_sendmsg+0x602/0xbf0
[  642.010543][T14231]  vmalloc+0x79/0x90
[  642.014477][T14231]  ? netlink_sendmsg+0x602/0xbf0
[  642.019449][T14231]  netlink_sendmsg+0x602/0xbf0
[  642.024268][T14231]  ? netlink_getsockopt+0x590/0x590
[  642.029503][T14231]  ? aa_sock_msg_perm+0x94/0x150
[  642.034557][T14231]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  642.039872][T14231]  ? security_socket_sendmsg+0x80/0xa0
[  642.045365][T14231]  sock_write_iter+0x2df/0x420
[  642.050164][T14231]  ? sock_read_iter+0x3e0/0x3e0
[  642.055064][T14231]  ? common_file_perm+0x198/0x1f0
[  642.060145][T14231]  vfs_write+0x46c/0x990
[  642.064429][T14231]  ? file_end_write+0x250/0x250
[  642.069313][T14231]  ? __fget_files+0x43d/0x4b0
[  642.074028][T14231]  ? __fdget_pos+0x1d8/0x330
[  642.078645][T14231]  ? ksys_write+0x75/0x260
[  642.083100][T14231]  ksys_write+0x150/0x260
[  642.087471][T14231]  ? __ia32_sys_read+0x90/0x90
[  642.092279][T14231]  ? syscall_enter_from_user_mode+0x2e/0x80
[  642.098205][T14231]  do_syscall_64+0x55/0xa0
[  642.102652][T14231]  ? clear_bhb_loop+0x40/0x90
[  642.107356][T14231]  ? clear_bhb_loop+0x40/0x90
[  642.112063][T14231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  642.117986][T14231] RIP: 0033:0x7f86abb9c799
[  642.122425][T14231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.142077][T14231] RSP: 002b:00007f86aca55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  642.150548][T14231] RAX: ffffffffffffffda RBX: 00007f86abe15fa0 RCX: 00007f86abb9c799
[  642.158550][T14231] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007
[  642.166550][T14231] RBP: 00007f86aca55090 R08: 0000000000000000 R09: 0000000000000000
[  642.174545][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.182538][T14231] R13: 00007f86abe16038 R14: 00007f86abe15fa0 R15: 00007ffe817c82c8
[  642.190732][T14231]  </TASK>
[  642.230407][T14231] Mem-Info:
[  642.234005][T14231] active_anon:5816 inactive_anon:0 isolated_anon:0
[  642.234005][T14231]  active_file:22877 inactive_file:40154 isolated_file:0
[  642.234005][T14231]  unevictable:768 dirty:147 writeback:0
[  642.234005][T14231]  slab_reclaimable:10643 slab_unreclaimable:96493
[  642.234005][T14231]  mapped:25139 shmem:1361 pagetables:590
[  642.234005][T14231]  sec_pagetables:0 bounce:0
[  642.234005][T14231]  kernel_misc_reclaimable:0
[  642.234005][T14231]  free:1337502 free_pcp:10432 free_cma:0
[  642.298332][T14243] netlink: 'syz.3.2679': attribute type 29 has an invalid length.
[  642.309078][T14243] netlink: 'syz.3.2679': attribute type 3 has an invalid length.
[  642.333154][T14231] Node 0 active_anon:23264kB inactive_anon:0kB active_file:91508kB inactive_file:160416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100556kB dirty:588kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11288kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no
[  642.339430][T14243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2679'.
[  642.375035][T14231] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  642.406976][T14231] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  642.437628][T14231] lowmem_reserve[]: 0 2521 2522 2522 2522
[  642.455887][T14231] Node 0 DMA32 free:1438696kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23324kB inactive_anon:0kB active_file:91508kB inactive_file:159592kB unevictable:1536kB writepending:588kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:21780kB local_pcp:5344kB free_cma:0kB
[  642.488253][T14231] lowmem_reserve[]: 0 0 0 0 0
[  642.493189][T14231] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  642.813424][T14231] lowmem_reserve[]: 0 0 0 0 0
[  642.818251][T14231] Node 1 Normal free:3896336kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20128kB local_pcp:7648kB free_cma:0kB
[  642.884561][T14231] lowmem_reserve[]: 0 0 0 0 0
[  642.889581][T14231] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  642.903097][T14231] Node 0 DMA32: 1970*4kB (UME) 1902*8kB (UME) 1457*16kB (UME) 839*32kB (UME) 649*64kB (UME) 347*128kB (UME) 162*256kB (UM) 76*512kB (UME) 33*1024kB (UME) 9*2048kB (ME) 280*4096kB (UM) = 1438696kB
[  642.923509][T14231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  642.937473][T14231] Node 1 Normal: 240*4kB (UME) 68*8kB (UME) 55*16kB (UME) 52*32kB (UME) 17*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896336kB
[  642.959192][T14231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  642.970409][T14231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  642.990452][T14231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  643.000933][T14231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  643.058400][T14231] 64392 total pagecache pages
[  643.071082][T14231] 0 pages in swap cache
[  643.076915][T14231] Free swap  = 124996kB
[  643.085181][T14231] Total swap = 124996kB
[  643.095892][T14231] 2097051 pages RAM
[  643.103859][T14231] 0 pages HighMem/MovableOnly
[  643.108755][T14231] 416924 pages reserved
[  643.115780][T14231] 0 pages cma reserved
[  643.650372][T14267] netlink: 'syz.0.2687': attribute type 1 has an invalid length.
[  643.664707][T14267] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2687'.
[  643.906165][T14270] netlink: 'syz.2.2688': attribute type 2 has an invalid length.
[  643.957902][T14278] FAULT_INJECTION: forcing a failure.
[  643.957902][T14278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  643.990740][T14278] CPU: 1 PID: 14278 Comm: syz.1.2690 Not tainted syzkaller #0
[  643.998310][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  644.008414][T14278] Call Trace:
[  644.011752][T14278]  <TASK>
[  644.014729][T14278]  dump_stack_lvl+0x18c/0x250
[  644.019459][T14278]  ? show_regs_print_info+0x20/0x20
[  644.020967][T14270] netlink: 'syz.2.2688': attribute type 1 has an invalid length.
[  644.024688][T14278]  ? load_image+0x400/0x400
[  644.024725][T14278]  ? __might_fault+0xaa/0x120
[  644.041815][T14278]  ? __lock_acquire+0x7d40/0x7d40
[  644.046903][T14278]  should_fail_ex+0x39d/0x4d0
[  644.051666][T14278]  _copy_from_iter+0x1d9/0x12e0
[  644.056576][T14278]  ? slab_post_alloc_hook+0x8a/0x4b0
[  644.059437][T14270] netlink: 166284 bytes leftover after parsing attributes in process `syz.2.2688'.
[  644.061891][T14278]  ? __virt_addr_valid+0x18c/0x540
[  644.076330][T14278]  ? __lock_acquire+0x7d40/0x7d40
[  644.081385][T14278]  ? rcu_is_watching+0x15/0xb0
[  644.086181][T14278]  ? copyout_mc+0x70/0x70
[  644.090538][T14278]  ? __virt_addr_valid+0x18c/0x540
[  644.095673][T14278]  ? __virt_addr_valid+0x18c/0x540
[  644.100814][T14278]  ? __virt_addr_valid+0x469/0x540
[  644.105956][T14278]  ? __check_object_size+0x506/0xa20
[  644.111269][T14278]  netlink_sendmsg+0x76b/0xbf0
[  644.116072][T14278]  ? netlink_getsockopt+0x590/0x590
[  644.121290][T14278]  ? aa_sock_msg_perm+0x94/0x150
[  644.126256][T14278]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  644.131555][T14278]  ? security_socket_sendmsg+0x80/0xa0
[  644.137033][T14278]  ? netlink_getsockopt+0x590/0x590
[  644.142299][T14278]  ____sys_sendmsg+0x5ba/0x960
[  644.147103][T14278]  ? __asan_memset+0x22/0x40
[  644.151710][T14278]  ? __sys_sendmsg_sock+0x30/0x30
[  644.156738][T14278]  ? __import_iovec+0x5f2/0x850
[  644.161618][T14278]  ? import_iovec+0x73/0xa0
[  644.166136][T14278]  ___sys_sendmsg+0x2a6/0x360
[  644.170849][T14278]  ? __sys_sendmsg+0x2a0/0x2a0
[  644.175647][T14278]  ? __lock_acquire+0x7d40/0x7d40
[  644.180713][T14278]  __se_sys_sendmsg+0x1c2/0x2b0
[  644.185605][T14278]  ? __x64_sys_sendmsg+0x80/0x80
[  644.190592][T14278]  ? lockdep_hardirqs_on+0x98/0x150
[  644.195918][T14278]  do_syscall_64+0x55/0xa0
[  644.200367][T14278]  ? clear_bhb_loop+0x40/0x90
[  644.205073][T14278]  ? clear_bhb_loop+0x40/0x90
[  644.209766][T14278]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.215674][T14278] RIP: 0033:0x7f078639c799
[  644.220200][T14278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.239823][T14278] RSP: 002b:00007f07872aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.248259][T14278] RAX: ffffffffffffffda RBX: 00007f0786615fa0 RCX: 00007f078639c799
[  644.256262][T14278] RDX: 0000000020000090 RSI: 0000200000000080 RDI: 0000000000000003
[  644.264249][T14278] RBP: 00007f07872aa090 R08: 0000000000000000 R09: 0000000000000000
[  644.272236][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.280221][T14278] R13: 00007f0786616038 R14: 00007f0786615fa0 R15: 00007fffb9fa04a8
[  644.288224][T14278]  </TASK>
[  644.517562][T14277] IPv6: Can't replace route, no match found
[  644.545785][T14277] netlink: 'syz.3.2691': attribute type 1 has an invalid length.
[  644.589024][T14277] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2691'.
[  646.937236][T14306] netlink: 'syz.3.2701': attribute type 25 has an invalid length.
[  647.068272][T14306] netlink: 'syz.3.2701': attribute type 9 has an invalid length.
[  648.374790][T14317] netlink: 'syz.1.2704': attribute type 2 has an invalid length.
[  648.427909][T14317] netlink: 'syz.1.2704': attribute type 1 has an invalid length.
[  648.458840][T14317] netlink: 166284 bytes leftover after parsing attributes in process `syz.1.2704'.
[  648.480164][T14315] IPv6: Can't replace route, no match found
[  648.519766][T14315] netlink: 'syz.0.2703': attribute type 1 has an invalid length.
[  648.527780][T14315] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2703'.
[  648.532153][ T6062] vlan0: left allmulticast mode
[  648.570045][ T6062] veth0_vlan: left allmulticast mode
[  648.579077][ T6062] vlan0: left promiscuous mode
[  648.595275][ T6062] À: port 1(vlan0) entered disabled state
[  648.631497][ T6062] hsr_slave_0: left promiscuous mode
[  648.637932][ T6062] hsr_slave_1: left promiscuous mode
[  648.652944][ T6062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.664670][ T6062] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.729660][ T6062] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  648.743833][ T6062] batman_adv: batadv0: Removing interface: veth0_vlan
[  648.774248][ T6062] bridge_slave_1: left allmulticast mode
[  648.789497][ T6062] bridge_slave_1: left promiscuous mode
[  648.807190][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.850944][ T6062] bridge_slave_0: left allmulticast mode
[  648.878193][ T6062] bridge_slave_0: left promiscuous mode
[  648.888340][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.995488][ T6062] veth1_vlan: left promiscuous mode
[  649.002307][ T6062] veth0_vlan: left promiscuous mode
[  652.736574][T14340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2711'.
[  652.838782][T14350] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2714'.
[  652.889766][T14350] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  653.366050][T14359] netlink: 'syz.3.2719': attribute type 2 has an invalid length.
[  653.397336][T14359] netlink: 'syz.3.2719': attribute type 1 has an invalid length.
[  653.413736][T14359] netlink: 166284 bytes leftover after parsing attributes in process `syz.3.2719'.
[  656.216536][T14389] IPv6: Can't replace route, no match found
[  656.233577][T14389] netlink: 'syz.3.2724': attribute type 1 has an invalid length.
[  656.244527][T14389] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2724'.
[  656.492744][T14394] FAULT_INJECTION: forcing a failure.
[  656.492744][T14394] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.548837][T14398] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2731'.
[  656.580037][T14394] CPU: 1 PID: 14394 Comm: syz.2.2729 Not tainted syzkaller #0
[  656.587590][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  656.597697][T14394] Call Trace:
[  656.601013][T14394]  <TASK>
[  656.604079][T14394]  dump_stack_lvl+0x18c/0x250
[  656.608898][T14394]  ? show_regs_print_info+0x20/0x20
[  656.614142][T14394]  ? load_image+0x400/0x400
[  656.618669][T14394]  ? __might_fault+0xaa/0x120
[  656.623358][T14394]  ? __lock_acquire+0x7d40/0x7d40
[  656.628396][T14394]  should_fail_ex+0x39d/0x4d0
[  656.633094][T14394]  _copy_to_user+0x2f/0xa0
[  656.637524][T14394]  bpf_ctx_finish+0x18a/0x210
[  656.642215][T14394]  ? bpf_test_finish+0x650/0x650
[  656.647165][T14394]  ? __asan_memcpy+0x40/0x70
[  656.651771][T14394]  bpf_prog_test_run_skb+0xd09/0x12b0
[  656.657170][T14394]  ? cpu_online+0x60/0x60
[  656.661587][T14394]  bpf_prog_test_run+0x321/0x390
[  656.666570][T14394]  __sys_bpf+0x49d/0x890
[  656.670845][T14394]  ? bpf_link_show_fdinfo+0x390/0x390
[  656.676334][T14394]  ? lock_chain_count+0x20/0x20
[  656.681209][T14394]  __x64_sys_bpf+0x7c/0x90
[  656.685680][T14394]  do_syscall_64+0x55/0xa0
[  656.690128][T14394]  ? clear_bhb_loop+0x40/0x90
[  656.694839][T14394]  ? clear_bhb_loop+0x40/0x90
[  656.699544][T14394]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  656.705464][T14394] RIP: 0033:0x7fa46a99c799
[  656.709892][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.729597][T14394] RSP: 002b:00007fa46b8aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  656.738113][T14394] RAX: ffffffffffffffda RBX: 00007fa46ac15fa0 RCX: 00007fa46a99c799
[  656.746095][T14394] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  656.754085][T14394] RBP: 00007fa46b8aa090 R08: 0000000000000000 R09: 0000000000000000
[  656.762152][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  656.770133][T14394] R13: 00007fa46ac16038 R14: 00007fa46ac15fa0 R15: 00007ffe3402ea28
[  656.778132][T14394]  </TASK>
[  656.932822][T14399] Dead loop on virtual device ip6_vti0, fix it urgently!
[  657.011482][T14405] netlink: 'syz.3.2733': attribute type 2 has an invalid length.
[  657.038643][T14405] netlink: 'syz.3.2733': attribute type 1 has an invalid length.
[  657.064110][T14405] netlink: 166284 bytes leftover after parsing attributes in process `syz.3.2733'.
[  657.226978][T12927] Bluetooth: hci2: Malformed Event: 0x13
[  657.686967][T14425] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2741'.
[  657.812760][T14429] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2742'.
[  657.992382][T14433] netlink: 'syz.1.2745': attribute type 2 has an invalid length.
[  658.018505][T14433] netlink: 'syz.1.2745': attribute type 1 has an invalid length.
[  658.029676][T14433] netlink: 166284 bytes leftover after parsing attributes in process `syz.1.2745'.
[  658.179768][T14437] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2747'.
[  658.572950][T14451] netlink: 'syz.2.2751': attribute type 2 has an invalid length.
[  658.604416][T14451] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2751'.
[  658.684593][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2751'.
[  658.836373][T14451] netlink: 'syz.2.2751': attribute type 9 has an invalid length.
[  658.882645][T14451] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2751'.
[  659.204195][T14462] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2753'.
[  659.412928][T14465] netlink: 'syz.3.2754': attribute type 1 has an invalid length.
[  659.464109][T14465] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2754'.
[  659.479826][T14465] netlink: 'syz.3.2754': attribute type 1 has an invalid length.
[  659.520630][T14475] netlink: 'syz.2.2756': attribute type 2 has an invalid length.
[  659.528558][T14475] netlink: 'syz.2.2756': attribute type 1 has an invalid length.
[  659.536967][T14475] netlink: 166284 bytes leftover after parsing attributes in process `syz.2.2756'.
[  659.885336][T14479] netlink: 'syz.2.2758': attribute type 10 has an invalid length.
[  660.012051][T14479] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  660.718439][T14499] netlink: 'syz.0.2767': attribute type 2 has an invalid length.
[  660.749766][T14499] netlink: 151324 bytes leftover after parsing attributes in process `syz.0.2767'.
[  662.172222][T14535] netlink: 'syz.2.2778': attribute type 6 has an invalid length.
[  663.922769][T14555] netlink: 'syz.1.2782': attribute type 10 has an invalid length.
[  672.839562][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  678.076039][T14559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  678.093351][T14559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  678.102468][T14559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  678.112089][T14559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  678.120616][T14559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  678.128122][T14559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  678.438423][T14557] chnl_net:caif_netlink_parms(): no params data found
[  678.578162][T14557] bridge0: port 1(bridge_slave_0) entered blocking state
[  678.585418][T14557] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.599581][T14557] bridge_slave_0: entered allmulticast mode
[  678.607639][T14557] bridge_slave_0: entered promiscuous mode
[  678.622962][T14557] bridge0: port 2(bridge_slave_1) entered blocking state
[  678.641744][T14557] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.649005][T14557] bridge_slave_1: entered allmulticast mode
[  678.675303][T14557] bridge_slave_1: entered promiscuous mode
[  678.818766][T14557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.903218][T14557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  679.076614][T14557] team0: Port device team_slave_0 added
[  679.131601][T14557] team0: Port device team_slave_1 added
[  679.238365][T14557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  679.289375][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.394944][T14557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  679.445460][T14557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  679.479345][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  679.579628][T14557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  680.053149][T14572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  680.062783][T14572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  680.071319][T14572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  680.079839][T14572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  680.088518][T14572] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  680.096581][T14572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  680.239632][T14575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  680.257185][T14575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  680.265576][T14575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  680.275357][T14575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  680.283716][T14575] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  680.292311][T14575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  680.853456][T14578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  680.867705][T14578] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  680.876645][T14578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  680.885894][T14578] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  680.894088][T14578] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  680.901822][T14578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  689.568933][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  689.576185][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  692.288116][T14575] Bluetooth: hci2: command 0x0406 tx timeout
[  703.564042][T14587] Bluetooth: hci0: command 0x0406 tx timeout
[  720.199671][T14588] Bluetooth: hci3: command 0x0406 tx timeout
[  739.355941][T14592] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  739.365479][T14592] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  739.373778][T14592] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  739.381988][T14592] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  739.397934][T14592] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  739.406056][T14592] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  740.735315][T14599] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  740.744891][T14599] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  740.753737][T14599] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  740.764811][T14599] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  740.773043][T14599] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  740.780579][T14599] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  740.905285][T14601] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  740.929981][T14601] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  740.949553][T14601] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  740.960055][T14601] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  740.968565][T14601] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  740.976122][T14601] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  741.529228][T14605] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  741.550757][T14605] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  741.559228][T14605] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  741.568198][T14605] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  741.577077][T14605] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  741.586516][T14605] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  753.965722][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  753.987748][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  768.309280][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  768.316054][    C1] rcu: 	1-....: (10428 ticks this GP) idle=e14c/1/0x4000000000000000 softirq=50846/50848 fqs=4783
[  768.327841][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  768.334287][    C1] rcu: 	 number:  1490590        221            0
[  768.340733][    C1] rcu: 	cputime:    20318      32160           37   ==> 52480(ms)
[  768.348556][    C1] rcu: 	(t=10500 jiffies g=64777 q=2413 ncpus=2)
[  768.354925][    C1] CPU: 1 PID: 14534 Comm: syz.2.2778 Not tainted syzkaller #0
[  768.362408][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  768.372478][    C1] RIP: 0010:queue_work_on+0x1a4/0x1f0
[  768.377868][    C1] Code: 4d 85 e4 75 16 e8 4c b9 2f 00 eb 15 e8 45 b9 2f 00 e8 20 b1 2d 09 4d 85 e4 74 ea e8 36 b9 2f 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 41 c7 44
[  768.397487][    C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000246
[  768.403570][    C1] RAX: ffffffff8157632a RBX: 0000000000000000 RCX: ffff88802578da00
[  768.411553][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  768.419538][    C1] RBP: ffffc900001f0460 R08: ffffffff911c15f7 R09: 1ffffffff22382be
[  768.427615][    C1] R10: dffffc0000000000 R11: fffffbfff22382bf R12: 0000000000000200
[  768.435596][    C1] R13: 1ffff9200003e074 R14: 0000000000000000 R15: ffff88807b9a4001
[  768.443665][    C1] FS:  00007fa46b8aa6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  768.452605][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  768.459205][    C1] CR2: 00007fa46b889d58 CR3: 000000005f3f0000 CR4: 00000000003506e0
[  768.467200][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  768.475179][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[  768.483172][    C1] Call Trace:
[  768.486463][    C1]  <IRQ>
[  768.489321][    C1]  ? wq_worker_last_func+0x40/0x40
[  768.494444][    C1]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  768.500347][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  768.506250][    C1]  ? wiphy_work_queue+0x151/0x1a0
[  768.511292][    C1]  ieee80211_rx_h_mgmt+0x4f8/0x6f0
[  768.516424][    C1]  ieee80211_rx_handlers+0x65f9/0xb4a0
[  768.521930][    C1]  ? drv_event_callback+0x250/0x250
[  768.527152][    C1]  ? mark_lock+0x94/0x320
[  768.531606][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  768.537733][    C1]  ? lock_chain_count+0x20/0x20
[  768.542619][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.548791][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  768.554001][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.560180][    C1]  ieee80211_prepare_and_rx_handle+0x29ab/0x62c0
[  768.566541][    C1]  ? ieee80211_rx_8023+0x1280/0x1280
[  768.571845][    C1]  ? sta_info_get_bss+0x54/0x320
[  768.576813][    C1]  ? sta_info_get_bss+0x54/0x320
[  768.581758][    C1]  ? sta_info_get_bss+0x54/0x320
[  768.586705][    C1]  ? ieee80211_rx_data_set_sta+0x20f/0x410
[  768.592640][    C1]  ieee80211_rx_list+0x295e/0x32d0
[  768.597773][    C1]  ? ieee80211_check_fast_rx_iface+0x210/0x210
[  768.603933][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  768.609937][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.616106][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.622274][    C1]  ? read_lock_is_recursive+0x20/0x20
[  768.627670][    C1]  ? ieee80211_rx_napi+0xd4/0x3d0
[  768.632712][    C1]  ieee80211_rx_napi+0x1b2/0x3d0
[  768.637748][    C1]  ? ieee80211_rx_list+0x32d0/0x32d0
[  768.643046][    C1]  ? skb_dequeue+0x124/0x160
[  768.647651][    C1]  ieee80211_handle_queued_frames+0x106/0x1a0
[  768.653739][    C1]  tasklet_action_common+0x302/0x4d0
[  768.659038][    C1]  ? detach_timer+0x2b0/0x2b0
[  768.663765][    C1]  ? trace_raw_output_tasklet+0xc0/0xc0
[  768.669358][    C1]  handle_softirqs+0x280/0x820
[  768.674157][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  768.678941][    C1]  ? do_softirq+0x1a0/0x1a0
[  768.683456][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  768.688675][    C1]  __irq_exit_rcu+0xd3/0x190
[  768.693275][    C1]  ? irq_exit_rcu+0x20/0x20
[  768.697793][    C1]  irq_exit_rcu+0x9/0x20
[  768.702224][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  768.707869][    C1]  </IRQ>
[  768.710808][    C1]  <TASK>
[  768.713747][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.719742][    C1] RIP: 0010:generic_exec_single+0x481/0x4f0
[  768.725656][    C1] Code: 75 11 e8 72 03 0b 00 48 85 db 75 16 e8 68 03 0b 00 eb 15 e8 61 03 0b 00 e8 3c fb 08 09 48 85 db 74 ea e8 52 03 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[  768.745386][    C1] RSP: 0018:ffffc9000d6b7a00 EFLAGS: 00000246
[  768.751477][    C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  768.759458][    C1] RDX: ffffc90019ee1000 RSI: 00000000000074e6 RDI: 00000000000074e7
[  768.767437][    C1] RBP: ffffc9000d6b7ad0 R08: ffffffff911c15ff R09: 1ffffffff22382bf
[  768.775417][    C1] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: 1ffff92001ad6f44
[  768.783486][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001ad6f65
[  768.791486][    C1]  ? event_function+0x300/0x300
[  768.796366][    C1]  ? smp_call_function_single+0x5a0/0x5a0
[  768.802099][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  768.808094][    C1]  ? smp_call_function_single+0xb0/0x5a0
[  768.813741][    C1]  smp_call_function_single+0x36d/0x5a0
[  768.819306][    C1]  ? event_function+0x300/0x300
[  768.824183][    C1]  ? flush_smp_call_function_queue+0x250/0x250
[  768.830351][    C1]  ? event_function+0x300/0x300
[  768.835224][    C1]  perf_install_in_context+0x5be/0x920
[  768.840705][    C1]  ? exclusive_event_installable+0x2c0/0x2c0
[  768.846700][    C1]  ? add_event_to_ctx+0x1180/0x1180
[  768.851933][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  768.858103][    C1]  ? perf_event__header_size+0x165/0x220
[  768.863750][    C1]  __se_sys_perf_event_open+0x1836/0x1c50
[  768.869491][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  768.875151][    C1]  ? __x64_sys_perf_event_open+0x6e/0xc0
[  768.880805][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  768.886461][    C1]  do_syscall_64+0x55/0xa0
[  768.890928][    C1]  ? clear_bhb_loop+0x40/0x90
[  768.895615][    C1]  ? clear_bhb_loop+0x40/0x90
[  768.900411][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  768.906347][    C1] RIP: 0033:0x7fa46a99c799
[  768.910787][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.930412][    C1] RSP: 002b:00007fa46b8aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  768.938863][    C1] RAX: ffffffffffffffda RBX: 00007fa46ac15fa0 RCX: 00007fa46a99c799
[  768.946858][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  768.954837][    C1] RBP: 00007fa46aa32bd9 R08: 0000000000000002 R09: 0000000000000000
[  768.962828][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  768.970829][    C1] R13: 00007fa46ac16038 R14: 00007fa46ac15fa0 R15: 00007ffe3402ea28
[  768.978824][    C1]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)