last executing test programs:

2m36.430383475s ago: executing program 4 (id=1592):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$kcm(0xa, 0x3, 0x3a)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x2, 0x4, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830b}, 0x8024, 0x2, 0xfffffffe, 0x1, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802400018014000300fe80000000000000000000000000002014000400ff010000000000000000000000000001f6ff018005000100980000003c0003800c00028005000100890000002c00018014000300fe80000000000007000000000000002a14000400ff0100000000000000000000000000013c0002802c00018014000300ff"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)

2m36.150024058s ago: executing program 4 (id=1593):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x5, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d010900500012804c00f88008003300", @ANYRES32=0x0, @ANYBLOB="3d00fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b720c003480d9f94469955f15e7000000200106801c01108018013e801401a080100161800c019d800801638008006000", @ANYRES32=0x0, @ANYBLOB="0800a50047504c00f4009080990044800800b00047504c00a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e968a84b3dad1bc88841ef786cbde797b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64b0000005100848008003e0000000000000000", @ANYRES32=r1, @ANYBLOB="578f41f21346600e8b97c8547badffbc172d50c86fbb143d0bfd04bd981257b4b68897845ab03be89e385e60e3b5b9022e699ec98db9b119e703878e33759b6390cb0d3969000000"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x9)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000250007002cbd7000000000007e"], 0x14}, 0x1, 0x0, 0x0, 0x24048851}, 0xc000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xf, 0x0, &(0x7f00000001c0)="e09d547ed387d9bc1d40cdde1639f3", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010009080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0)
r7 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@ax25={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x80, 0x0}, 0x0)

2m35.734404781s ago: executing program 4 (id=1594):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x0, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x4c, 0x0, 0x1}, 0x28) (fail_nth: 6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1e, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)

2m35.365149625s ago: executing program 4 (id=1595):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0xffffffc4, &(0x7f0000000000)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20}, 0x22)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000980)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007311310000000000851000000200000085000000a0000000958b31ebb80000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffff7f, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000001640)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a0000000000000000000000000000000000640101000000000000000000ffa7a46a243fa3"], 0x38}}, 0x40408c0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m34.424182079s ago: executing program 4 (id=1596):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)

2m33.301091756s ago: executing program 4 (id=1597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mount$bpf(0x0, 0x0, &(0x7f0000000600), 0x200401, &(0x7f0000000240)=ANY=[])
recvmsg(r1, 0x0, 0x40010100)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000200000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000007080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000800)=r5, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000640)}, 0x7)

2m32.953720172s ago: executing program 32 (id=1597):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mount$bpf(0x0, 0x0, &(0x7f0000000600), 0x200401, &(0x7f0000000240)=ANY=[])
recvmsg(r1, 0x0, 0x40010100)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000200000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000007080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000800)=r5, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000640)}, 0x7)

1m7.09581644s ago: executing program 2 (id=2064):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="0070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000805000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d000000000000"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28)
r0 = socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0800bc8445f30a24e0", 0x9}, {0x0}], 0x2}, 0x40010)
r1 = socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x15c, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140b, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000804)
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0)

1m6.827241357s ago: executing program 2 (id=2069):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10000, 0x5}, {0x10000002, 0x0, 0x0, 0x9}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
close(r0)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x100)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0xfffffffffffffd4e, 0x0}, 0x10)
r4 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10)
close(0x3)

1m6.709325612s ago: executing program 2 (id=2072):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10)
r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x40000000, 0x0, 0xf, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='(\'}*\'\x00')
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x118, 0x35, 0xb01, 0x70bd26, 0x25dfdbfb, {0x8}, [@nested={0x104, 0x9, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @uid=r6}, @nested={0x4, 0xe4}, @generic="bc22b1a7ef9cbf54f022dc07df32c847fab793d960d159dea4043c4f8fb97b68bc52373acf5cf665ac8ebceb89ac0cabbffcb6d81c7159f2dacb124721abbe0705771509ee5949cf1f656bc6291a34edf8c0001f14eb30ad84a5677d73958bca44d6356a3c285e0ba41ef8ff5898344b3237f45f27787af7643edffbc77fa3ed4fd5652032c1978fbe84c38c570e4dbce399d789abbc2226d3cc171d65e146c55e0a47836a286492ca68bff90d29c4d31f3d018fdf594bca7c937b4ecee28e639621b1306a396467ef612b701b36533ccd7a832abbad0dbd196154cffa21b159997d45aa3849dc4d4bb00c2119ed7828", @nested={0x4, 0x4c}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000)
fstat(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_generic(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0xe4, 0x1e, 0x800, 0x70bd2d, 0x25dfdbfe, {0x20}, [@generic="cb50fd51f5f89905f9e0ebf5918d653abfa106822f99", @nested={0xb7, 0x19, 0x0, 0x1, [@typed={0x4, 0x126}, @nested={0x4, 0x101}, @generic="6048bab09229be95bae694a8eeb46bb1844c1a45da4cfa3617575ff8e58b3decededd690c9506c0c039dc3f58b8c0ba640259660a54a0de965384276bc330fae6129e00b436dd24dd4d8671f6affa4d32cfcdf79539c1948fc28e8b63f0d35f3b3ae39b9dd11287960494d8610a9d9715e2a3c6d466916622ea5ad7b365abaa9a059fa0327c1c283b3bcc0", @nested={0x4, 0x127}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x16}, @nested={0x4, 0xc3}, @typed={0x8, 0x112, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x118}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)

1m6.348299164s ago: executing program 2 (id=2078):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000010000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

1m6.24348851s ago: executing program 2 (id=2079):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xec, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001500010000000000fcffffff0b1000000800020009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20048080)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x69d, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r8, &(0x7f0000000280), 0xfffffeed)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00')
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000100)=ANY=[@ANYRES32], 0xfc}}, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a80821, &(0x7f0000000600)=ANY=[])
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000108010400000000000000000a00000824000480080001400000000908000440000001ff08000840e9000000000000000000004005000300840000000900010073797a30000000d70500030084000000"], 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f0, &(0x7f0000000080))
sendmsg$nl_crypto(r11, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=@alg={0x130, 0x10, 0x100, 0x70bd26, 0x25dfdbfb, {{'drbg_nopr_ctr_aes256\x00'}, '\x00', '\x00', 0x0, 0x3400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xff}, {0x8, 0x1, 0x2}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m5.061103887s ago: executing program 2 (id=2086):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000002010901400676e4fd28000001000001140018800800014000e703b80800024000000004040005"], 0x2c}}, 0x24000881)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000000200)=@hci={0x1f, 0x29, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62031f00d70400000000000000afbcf711e12b7f9646781c8ef217300100000093c1cdf632dbb86770", 0x29}], 0x1}, 0x4084)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x72, &(0x7f0000000000)=r5, 0xc)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x81)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xb288, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xb}, {0xffff, 0xfff0}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x4000010)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socketpair(0x24, 0x6, 0x707, &(0x7f0000000000))
socket$kcm(0x2a, 0x2, 0x0)
r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13)

49.991035097s ago: executing program 33 (id=2086):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000002010901400676e4fd28000001000001140018800800014000e703b80800024000000004040005"], 0x2c}}, 0x24000881)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000b00)={&(0x7f0000000200)=@hci={0x1f, 0x29, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="62031f00d70400000000000000afbcf711e12b7f9646781c8ef217300100000093c1cdf632dbb86770", 0x29}], 0x1}, 0x4084)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$kcm(0x2, 0x5, 0x84)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x72, &(0x7f0000000000)=r5, 0xc)
ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x81)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xb288, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xb}, {0xffff, 0xfff0}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x4000010)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
socketpair(0x24, 0x6, 0x707, &(0x7f0000000000))
socket$kcm(0x2a, 0x2, 0x0)
r12 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r13)

6.537859509s ago: executing program 5 (id=2379):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
close(0x3)

1.55765097s ago: executing program 1 (id=2408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)='`\x00\x00', 0x3}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})

1.47176231s ago: executing program 3 (id=2410):
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x2d000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

1.295885931s ago: executing program 1 (id=2413):
r0 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4)

1.251445223s ago: executing program 3 (id=2414):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

1.200098624s ago: executing program 5 (id=2415):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20)
r1 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c34, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000eeffffffffffffff00000000620000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000500), 0x4)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xffffff7f}, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r5=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)=r4}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000a000000000000000000000300000000020000000500000002000000000000000600000e05000000000000000f000000000000100c0000000b00000000000008010000000300000004000006040000000d000000080000000800000001feffff07000000ffffffff0700000000020000040000000000000604000000050000000000000201000000002e302e305f51303000"], &(0x7f0000000800)=""/208, 0xa6, 0xd0, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x1000, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0xb, &(0x7f0000000540)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x101}, @call={0x85, 0x0, 0x0, 0x5c}, @call={0x85, 0x0, 0x0, 0x4e}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x71, &(0x7f0000000640)=""/113, 0x41100, 0x66, '\x00', 0x0, @sk_reuseport=0x27, r6, 0x8, &(0x7f0000000940)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0xd, 0x3, 0x1000}, 0x10, r7, r4, 0x7, &(0x7f0000000a00)=[r2], &(0x7f0000000a40)=[{0x4, 0x2, 0x10, 0xc}, {0x1, 0x1, 0xa, 0x8}, {0x2, 0x5, 0x9, 0x9}, {0x3, 0x3, 0x7, 0x1}, {0x3, 0x1, 0x8, 0xa}, {0x4, 0x3, 0x1, 0xa}, {0x3, 0x4, 0xe, 0xc}], 0x10, 0x10001}, 0x94)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x85, 0x0, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d000347fe000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8922, &(0x7f0000000080))
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0x10, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r12, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.149751569s ago: executing program 0 (id=2416):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600e2ff850000002d000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

1.149159971s ago: executing program 1 (id=2417):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000092b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r2})

1.106748659s ago: executing program 6 (id=2418):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4)

1.001662611s ago: executing program 3 (id=2419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="857e4d03f61940e727b165ada9ff", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

919.438432ms ago: executing program 0 (id=2420):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xce0, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000086dd", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

919.295432ms ago: executing program 1 (id=2421):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, 0x0, 0x0)

888.304675ms ago: executing program 0 (id=2422):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="f5ffffff0000000000000000050000007112190000000000950000000000000047f2392c2a500ccd1bef7bd99bbf2ca1173215e1ae53a563c330cfae1d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
getpid()
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f00000002c0)="833c318a3c2bdb8ccc64f4f8bb0b04ee94242231ac54606e4a64344bfbdfd150600947a6ceca004b312252be342e3d1b568723dd7936a7b50ec25416fde16b60f2eaada8", &(0x7f00000005c0)=""/215}, 0x20)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xb54b, 0x7ef9a35d9988a56d, @perf_bp={&(0x7f0000000280), 0x1}, 0x100708, 0x8, 0x2, 0x7, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x6)
socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="b23895fd04000000000000020000000000000000002b894ab984c8bc2c62d600000000000000"])
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x9, 0xad8}, 0x2461, 0x3, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0xc6d6, 0xc522, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0xfffffffffffffe05}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0)

847.370991ms ago: executing program 6 (id=2423):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$kcm(0x10, 0x2, 0x0)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x1000, 0x0, 0x40000, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12)

755.583824ms ago: executing program 1 (id=2424):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
close(r2)
socket$kcm(0x29, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[], 0xffdd)

755.306041ms ago: executing program 3 (id=2425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x36, 0x0, &(0x7f0000000180)="000200000000000022385ba988a88d0586ddab5efa35357c2f1025c2755756f646b2b9a5d04ddd863c4a91cf1a7a2860c1537d9673ef", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
close(0x3)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0)

729.0957ms ago: executing program 5 (id=2426):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)

636.448862ms ago: executing program 3 (id=2427):
close(0xffffffffffffffff)
socket$kcm(0x11, 0x200000000000002, 0x300)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041)
recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10100)

549.847603ms ago: executing program 0 (id=2428):
r0 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000200)=r3, 0x4)

549.722331ms ago: executing program 5 (id=2429):
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x5474)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

524.891715ms ago: executing program 6 (id=2430):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f00000001c0)='syz0\x00', 0x1ff)

445.87429ms ago: executing program 0 (id=2431):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

414.833463ms ago: executing program 5 (id=2432):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xce0, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000086dd", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

350.094179ms ago: executing program 3 (id=2433):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000006c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500), 0x7b}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r4=>0xffffffffffffffff}, 0x0, &(0x7f0000000080)=r3}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x15, &(0x7f0000000580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x0, 0x3, 0x1, 0x4, 0x9, 0x50}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xc, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r2, r2, r2, r2], &(0x7f0000000980)=[{0x4, 0x5, 0xa, 0x3}], 0x10, 0x7fff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0xe6a, 0x447, 0xee, 0x6241e, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x1}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b40)=""/233, 0xe9}], 0x1, &(0x7f0000000ac0)=""/1, 0x1}, 0x40000000)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'bond_slave_1\x00', @multicast})

339.321728ms ago: executing program 6 (id=2434):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, 0x0, 0x0)

319.027869ms ago: executing program 5 (id=2435):
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0xc8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x40002100)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef)

274.310686ms ago: executing program 1 (id=2436):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='l\x00'/27], 0x48)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0xc00}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004400000000000009aaa00009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, @perf_config_ext={0x8000000000000001, 0x6}, 0x74a2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042)
socketpair(0x1, 0x1, 0x0, 0x0)
r10 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r10, &(0x7f0000000280), 0x9)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

205.316892ms ago: executing program 0 (id=2437):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff41, 0x10, &(0x7f0000000040)}, 0x48)

171.768802ms ago: executing program 6 (id=2438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20)

0s ago: executing program 6 (id=2439):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r2 = socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f0000000200), 0x4)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x86}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

kernel console output (not intermixed with test programs):

 port 1(bridge_slave_0) entered disabled state
[  494.572254][T12458] bridge_slave_0: entered allmulticast mode
[  494.582017][T12458] bridge_slave_0: entered promiscuous mode
[  494.594099][T12458] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.620120][T12458] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.648546][T12458] bridge_slave_1: entered allmulticast mode
[  494.667464][T12458] bridge_slave_1: entered promiscuous mode
[  495.072597][T12558] netlink: 'syz.2.1723': attribute type 29 has an invalid length.
[  495.277205][ T5847] Bluetooth: hci2: command tx timeout
[  495.692918][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.729498][T12562] netlink: 'syz.2.1723': attribute type 29 has an invalid length.
[  495.771329][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  495.917550][T12458] team0: Port device team_slave_0 added
[  495.949887][T12458] team0: Port device team_slave_1 added
[  496.051259][T10640] hsr_slave_0: left promiscuous mode
[  496.068549][T10640] hsr_slave_1: left promiscuous mode
[  496.076539][T10640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  496.100423][T10640] batman_adv: batadv0: Removing interface: batadv_slave_0
[  496.138808][T10640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.162599][T10640] batman_adv: batadv0: Removing interface: batadv_slave_1
[  496.196724][T10640] veth1_macvtap: left promiscuous mode
[  496.210616][T10640] veth0_macvtap: left promiscuous mode
[  496.613988][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'.
[  496.674632][T12597] netlink: 'syz.3.1734': attribute type 9 has an invalid length.
[  496.701085][T12597] netlink: 'syz.3.1734': attribute type 11 has an invalid length.
[  496.754412][T12597] netlink: 'syz.3.1734': attribute type 12 has an invalid length.
[  496.792487][T12597] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.1734'.
[  496.893960][T10640] team0 (unregistering): Port device team_slave_1 removed
[  496.939257][T10640] team0 (unregistering): Port device team_slave_0 removed
[  497.302092][ T5847] Bluetooth: hci2: command tx timeout
[  497.670280][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.738729][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.767136][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.787183][T12612] netlink: 'syz.0.1738': attribute type 1 has an invalid length.
[  497.800984][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.808655][T12612] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1738'.
[  497.828486][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  497.860895][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  498.074977][T12458] hsr_slave_0: entered promiscuous mode
[  498.092742][T12458] hsr_slave_1: entered promiscuous mode
[  498.122815][T12458] debugfs: 'hsr0' already exists in 'hsr'
[  498.143779][T12458] Cannot create hsr debugfs directory
[  499.367089][ T5847] Bluetooth: hci2: command tx timeout
[  499.418266][T12650] netlink: 'syz.3.1747': attribute type 16 has an invalid length.
[  499.460606][T12650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1747'.
[  499.739086][T12657] netlink: 'syz.0.1749': attribute type 10 has an invalid length.
[  499.990293][T12657] 8021q: adding VLAN 0 to HW filter on device team0
[  500.187524][T12657] bond0: (slave team0): Enslaving as an active interface with an up link
[  500.492225][T12668] netlink: 'syz.2.1752': attribute type 29 has an invalid length.
[  500.566733][T12671] netlink: 'syz.2.1752': attribute type 29 has an invalid length.
[  500.723918][T12672] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  500.723918][T12672] 3�UH�5r��Bn���\d�Q�e'
[  500.746436][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.2.1752 Not tainted syzkaller #0 PREEMPT(full) 
[  500.746466][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  500.746481][T12672] Call Trace:
[  500.746490][T12672]  <TASK>
[  500.746500][T12672]  dump_stack_lvl+0xe8/0x150
[  500.746541][T12672]  sysfs_warn_dup+0x8e/0xa0
[  500.746577][T12672]  sysfs_do_create_link_sd+0xc0/0x110
[  500.746615][T12672]  device_add_class_symlinks+0x1cf/0x240
[  500.746658][T12672]  device_add+0x475/0xb70
[  500.746690][T12672]  wiphy_register+0x1d73/0x2d50
[  500.746746][T12672]  ? __pfx_wiphy_register+0x10/0x10
[  500.746781][T12672]  ? __pfx_netdev_run_todo+0x10/0x10
[  500.746806][T12672]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  500.746843][T12672]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  500.746890][T12672]  ieee80211_register_hw+0x3562/0x4200
[  500.746937][T12672]  ? ieee80211_register_hw+0x14f1/0x4200
[  500.746978][T12672]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  500.747028][T12672]  ? __hrtimer_setup+0x181/0x200
[  500.747060][T12672]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  500.747095][T12672]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  500.747165][T12672]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  500.747189][T12672]  ? kstrndup+0xbf/0x160
[  500.747235][T12672]  hwsim_new_radio_nl+0xf35/0x1bd0
[  500.747294][T12672]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  500.747335][T12672]  ? rcu_is_watching+0x15/0xb0
[  500.747369][T12672]  ? trace_kmalloc+0x2a/0x110
[  500.747404][T12672]  ? __nla_parse+0x40/0x60
[  500.747445][T12672]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  500.747484][T12672]  genl_family_rcv_msg_doit+0x22a/0x330
[  500.747520][T12672]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  500.747566][T12672]  ? bpf_lsm_capable+0x9/0x20
[  500.747597][T12672]  ? security_capable+0x7e/0x2c0
[  500.747645][T12672]  genl_rcv_msg+0x61c/0x7a0
[  500.747680][T12672]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.747704][T12672]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  500.747731][T12672]  ? __lock_acquire+0x6b5/0x2cf0
[  500.747780][T12672]  netlink_rcv_skb+0x232/0x4b0
[  500.747814][T12672]  ? __pfx_genl_rcv_msg+0x10/0x10
[  500.747842][T12672]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  500.747902][T12672]  ? down_read+0x272/0x2e0
[  500.747925][T12672]  ? genl_rcv+0xd/0x40
[  500.747948][T12672]  genl_rcv+0x28/0x40
[  500.747969][T12672]  netlink_unicast+0x80f/0x9b0
[  500.748010][T12672]  ? __pfx_netlink_unicast+0x10/0x10
[  500.748043][T12672]  ? netlink_sendmsg+0x650/0xb40
[  500.748072][T12672]  ? skb_put+0x11b/0x210
[  500.748112][T12672]  netlink_sendmsg+0x813/0xb40
[  500.748160][T12672]  ? __pfx_netlink_sendmsg+0x10/0x10
[  500.748199][T12672]  ? aa_sock_msg_perm+0xf1/0x1b0
[  500.748233][T12672]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  500.748266][T12672]  ____sys_sendmsg+0x972/0x9f0
[  500.748290][T12672]  ? __pfx_perf_trace_lock+0x10/0x10
[  500.748335][T12672]  ? __pfx_____sys_sendmsg+0x10/0x10
[  500.748374][T12672]  ? import_iovec+0x73/0xa0
[  500.748415][T12672]  ___sys_sendmsg+0x2a5/0x360
[  500.748449][T12672]  ? __pfx____sys_sendmsg+0x10/0x10
[  500.748480][T12672]  ? trace_call_bpf+0xc2/0xb70
[  500.748531][T12672]  ? __fget_files+0x2a/0x420
[  500.748584][T12672]  ? __fget_files+0x2a/0x420
[  500.748618][T12672]  ? __fget_files+0x3a0/0x420
[  500.748677][T12672]  __x64_sys_sendmsg+0x1bd/0x2a0
[  500.748707][T12672]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  500.748728][T12672]  ? perf_trace_preemptirq_template+0xb2/0x350
[  500.748786][T12672]  ? rcu_is_watching+0x15/0xb0
[  500.748839][T12672]  do_syscall_64+0x14d/0xf80
[  500.748861][T12672]  ? trace_irq_disable+0x3b/0x150
[  500.748893][T12672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.748917][T12672]  ? clear_bhb_loop+0x40/0x90
[  500.748947][T12672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.748971][T12672] RIP: 0033:0x7fe7e4f9c799
[  500.748994][T12672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.749014][T12672] RSP: 002b:00007fe7e5e7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  500.749038][T12672] RAX: ffffffffffffffda RBX: 00007fe7e5216180 RCX: 00007fe7e4f9c799
[  500.749053][T12672] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  500.749067][T12672] RBP: 00007fe7e5032bd9 R08: 0000000000000000 R09: 0000000000000000
[  500.749081][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.749094][T12672] R13: 00007fe7e5216218 R14: 00007fe7e5216180 R15: 00007ffce8abed18
[  500.749138][T12672]  </TASK>
[  501.570317][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'.
[  501.724454][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.731297][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.995544][T12458] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  502.128802][T12458] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  502.209283][T12458] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  502.406940][T12458] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  503.042378][T12458] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.130347][T12458] 8021q: adding VLAN 0 to HW filter on device team0
[  503.198511][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.205892][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  503.246409][T10640] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.254038][T10640] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.364645][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.556449][T12458] veth0_vlan: entered promiscuous mode
[  504.632521][T12458] veth1_vlan: entered promiscuous mode
[  504.742915][T12458] veth0_macvtap: entered promiscuous mode
[  504.810876][T12458] veth1_macvtap: entered promiscuous mode
[  504.945542][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.021405][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.098331][T10640] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.138307][T10640] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.196094][T10640] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.240747][T10640] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.513216][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.545383][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.647067][T10640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.675788][T10640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.711774][T12817] netlink: 'syz.5.1784': attribute type 29 has an invalid length.
[  505.743418][T12817] netlink: 'syz.5.1784': attribute type 29 has an invalid length.
[  505.833244][T12817] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  505.833244][T12817] 3�UH�5r��Bn���\d�Q�e'
[  505.854781][T12817] CPU: 0 UID: 0 PID: 12817 Comm: syz.5.1784 Not tainted syzkaller #0 PREEMPT(full) 
[  505.854814][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  505.854829][T12817] Call Trace:
[  505.854838][T12817]  <TASK>
[  505.854848][T12817]  dump_stack_lvl+0xe8/0x150
[  505.854887][T12817]  sysfs_warn_dup+0x8e/0xa0
[  505.854920][T12817]  sysfs_do_create_link_sd+0xc0/0x110
[  505.854955][T12817]  device_add_class_symlinks+0x1cf/0x240
[  505.854984][T12817]  device_add+0x475/0xb70
[  505.855012][T12817]  wiphy_register+0x1d73/0x2d50
[  505.855062][T12817]  ? __pfx_wiphy_register+0x10/0x10
[  505.855104][T12817]  ? ieee80211_register_hw+0x3258/0x4200
[  505.855135][T12817]  ieee80211_register_hw+0x3562/0x4200
[  505.855173][T12817]  ? ieee80211_register_hw+0x14f1/0x4200
[  505.855209][T12817]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  505.855253][T12817]  ? __hrtimer_setup+0x181/0x200
[  505.855283][T12817]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  505.855314][T12817]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  505.855371][T12817]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  505.855393][T12817]  ? kstrndup+0xbf/0x160
[  505.855433][T12817]  hwsim_new_radio_nl+0xf35/0x1bd0
[  505.855482][T12817]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  505.855519][T12817]  ? rcu_is_watching+0x15/0xb0
[  505.855560][T12817]  ? trace_kmalloc+0x2a/0x110
[  505.855591][T12817]  ? __nla_parse+0x40/0x60
[  505.855630][T12817]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  505.855665][T12817]  genl_family_rcv_msg_doit+0x22a/0x330
[  505.855690][T12817]  ? irqentry_exit+0x59e/0x620
[  505.855715][T12817]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  505.855753][T12817]  ? bpf_lsm_capable+0x9/0x20
[  505.855785][T12817]  ? security_capable+0x7e/0x2c0
[  505.855821][T12817]  genl_rcv_msg+0x61c/0x7a0
[  505.855851][T12817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.855872][T12817]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  505.855897][T12817]  ? __lock_acquire+0x6b5/0x2cf0
[  505.855940][T12817]  netlink_rcv_skb+0x232/0x4b0
[  505.855971][T12817]  ? __pfx_genl_rcv_msg+0x10/0x10
[  505.855994][T12817]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  505.856045][T12817]  ? down_read+0x272/0x2e0
[  505.856067][T12817]  ? genl_rcv+0xd/0x40
[  505.856090][T12817]  genl_rcv+0x28/0x40
[  505.856109][T12817]  netlink_unicast+0x80f/0x9b0
[  505.856146][T12817]  ? __pfx_netlink_unicast+0x10/0x10
[  505.856193][T12817]  ? netlink_sendmsg+0x650/0xb40
[  505.856221][T12817]  ? skb_put+0x11b/0x210
[  505.856258][T12817]  netlink_sendmsg+0x813/0xb40
[  505.856299][T12817]  ? __pfx_netlink_sendmsg+0x10/0x10
[  505.856349][T12817]  ? aa_sock_msg_perm+0xf1/0x1b0
[  505.856381][T12817]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  505.856411][T12817]  ____sys_sendmsg+0x972/0x9f0
[  505.856444][T12817]  ? __pfx_____sys_sendmsg+0x10/0x10
[  505.856478][T12817]  ? import_iovec+0x73/0xa0
[  505.856528][T12817]  ___sys_sendmsg+0x2a5/0x360
[  505.856564][T12817]  ? __pfx____sys_sendmsg+0x10/0x10
[  505.856629][T12817]  ? __fget_files+0x2a/0x420
[  505.856662][T12817]  ? __fget_files+0x3a0/0x420
[  505.856707][T12817]  __x64_sys_sendmsg+0x1bd/0x2a0
[  505.856733][T12817]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  505.856780][T12817]  do_syscall_64+0x14d/0xf80
[  505.856800][T12817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.856823][T12817]  ? clear_bhb_loop+0x40/0x90
[  505.856850][T12817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.856871][T12817] RIP: 0033:0x7f88db99c799
[  505.856893][T12817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.856913][T12817] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  505.856938][T12817] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  505.856955][T12817] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  505.856969][T12817] RBP: 00007f88dba32bd9 R08: 0000000000000000 R09: 0000000000000000
[  505.856983][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  505.856996][T12817] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  505.857033][T12817]  </TASK>
[  506.292060][T12823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1699'.
[  506.649196][T12829] netlink: 'syz.0.1788': attribute type 10 has an invalid length.
[  506.956023][T12829] team0: Port device dummy0 added
[  507.203078][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1794'.
[  507.234690][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  507.238460][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1794'.
[  507.332950][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  507.448353][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1795'.
[  507.468022][T12859] netlink: 'syz.2.1798': attribute type 29 has an invalid length.
[  507.491208][T12861] netlink: 'syz.2.1798': attribute type 29 has an invalid length.
[  507.618272][T12861] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  507.618272][T12861] 3�UH�5r��Bn���\d�Q�e'
[  507.664485][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(full) 
[  507.664519][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  507.664534][T12861] Call Trace:
[  507.664544][T12861]  <TASK>
[  507.664555][T12861]  dump_stack_lvl+0xe8/0x150
[  507.664595][T12861]  sysfs_warn_dup+0x8e/0xa0
[  507.664630][T12861]  sysfs_do_create_link_sd+0xc0/0x110
[  507.664668][T12861]  device_add_class_symlinks+0x1cf/0x240
[  507.664702][T12861]  device_add+0x475/0xb70
[  507.664733][T12861]  wiphy_register+0x1d73/0x2d50
[  507.664787][T12861]  ? __pfx_wiphy_register+0x10/0x10
[  507.664817][T12861]  ? __pfx_netdev_run_todo+0x10/0x10
[  507.664842][T12861]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  507.664879][T12861]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  507.664922][T12861]  ieee80211_register_hw+0x3562/0x4200
[  507.664968][T12861]  ? ieee80211_register_hw+0x14f1/0x4200
[  507.665008][T12861]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  507.665059][T12861]  ? __hrtimer_setup+0x181/0x200
[  507.665092][T12861]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  507.665127][T12861]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  507.665196][T12861]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  507.665219][T12861]  ? kstrndup+0xbf/0x160
[  507.665259][T12861]  hwsim_new_radio_nl+0xf35/0x1bd0
[  507.665328][T12861]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  507.665365][T12861]  ? rcu_is_watching+0x15/0xb0
[  507.665394][T12861]  ? trace_kmalloc+0x2a/0x110
[  507.665434][T12861]  ? __nla_parse+0x40/0x60
[  507.665470][T12861]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  507.665504][T12861]  genl_family_rcv_msg_doit+0x22a/0x330
[  507.665536][T12861]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  507.665576][T12861]  ? bpf_lsm_capable+0x9/0x20
[  507.665604][T12861]  ? security_capable+0x7e/0x2c0
[  507.665639][T12861]  genl_rcv_msg+0x61c/0x7a0
[  507.665670][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  507.665690][T12861]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  507.665713][T12861]  ? __lock_acquire+0x6b5/0x2cf0
[  507.665756][T12861]  netlink_rcv_skb+0x232/0x4b0
[  507.665785][T12861]  ? __pfx_genl_rcv_msg+0x10/0x10
[  507.665808][T12861]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  507.665860][T12861]  ? down_read+0x272/0x2e0
[  507.665880][T12861]  ? genl_rcv+0xd/0x40
[  507.665902][T12861]  genl_rcv+0x28/0x40
[  507.665920][T12861]  netlink_unicast+0x80f/0x9b0
[  507.665958][T12861]  ? __pfx_netlink_unicast+0x10/0x10
[  507.665986][T12861]  ? netlink_sendmsg+0x650/0xb40
[  507.666011][T12861]  ? skb_put+0x11b/0x210
[  507.666047][T12861]  netlink_sendmsg+0x813/0xb40
[  507.666088][T12861]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.666122][T12861]  ? aa_sock_msg_perm+0xf1/0x1b0
[  507.666155][T12861]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  507.666188][T12861]  ____sys_sendmsg+0x972/0x9f0
[  507.666211][T12861]  ? __pfx_perf_trace_lock+0x10/0x10
[  507.666250][T12861]  ? __pfx_____sys_sendmsg+0x10/0x10
[  507.666282][T12861]  ? import_iovec+0x73/0xa0
[  507.666321][T12861]  ___sys_sendmsg+0x2a5/0x360
[  507.666350][T12861]  ? __pfx____sys_sendmsg+0x10/0x10
[  507.666403][T12861]  ? __fget_files+0x2a/0x420
[  507.666459][T12861]  ? __fget_files+0x2a/0x420
[  507.666491][T12861]  ? __fget_files+0x3a0/0x420
[  507.666539][T12861]  __x64_sys_sendmsg+0x1bd/0x2a0
[  507.666568][T12861]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  507.666589][T12861]  ? perf_trace_preemptirq_template+0xb2/0x350
[  507.666641][T12861]  ? rcu_is_watching+0x15/0xb0
[  507.666693][T12861]  do_syscall_64+0x14d/0xf80
[  507.666715][T12861]  ? trace_irq_disable+0x3b/0x150
[  507.666749][T12861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.666775][T12861]  ? clear_bhb_loop+0x40/0x90
[  507.666805][T12861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.666829][T12861] RIP: 0033:0x7fe7e4f9c799
[  507.666853][T12861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.666872][T12861] RSP: 002b:00007fe7e5e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.666897][T12861] RAX: ffffffffffffffda RBX: 00007fe7e5216090 RCX: 00007fe7e4f9c799
[  507.666914][T12861] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  507.666929][T12861] RBP: 00007fe7e5032bd9 R08: 0000000000000000 R09: 0000000000000000
[  507.666943][T12861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.666957][T12861] R13: 00007fe7e5216128 R14: 00007fe7e5216090 R15: 00007ffce8abed18
[  507.667001][T12861]  </TASK>
[  508.250785][T12866] netlink: 'syz.5.1800': attribute type 29 has an invalid length.
[  508.281498][T12870] netlink: 'syz.5.1800': attribute type 29 has an invalid length.
[  508.431683][T12866] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  508.431683][T12866] 3�UH�5r��Bn���\d�Q�e'
[  508.451374][T12866] CPU: 0 UID: 0 PID: 12866 Comm: syz.5.1800 Not tainted syzkaller #0 PREEMPT(full) 
[  508.451416][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  508.451432][T12866] Call Trace:
[  508.451443][T12866]  <TASK>
[  508.451454][T12866]  dump_stack_lvl+0xe8/0x150
[  508.451497][T12866]  sysfs_warn_dup+0x8e/0xa0
[  508.451532][T12866]  sysfs_do_create_link_sd+0xc0/0x110
[  508.451570][T12866]  device_add_class_symlinks+0x1cf/0x240
[  508.451602][T12866]  device_add+0x475/0xb70
[  508.451634][T12866]  wiphy_register+0x1d73/0x2d50
[  508.451691][T12866]  ? __pfx_wiphy_register+0x10/0x10
[  508.451755][T12866]  ieee80211_register_hw+0x3562/0x4200
[  508.451802][T12866]  ? ieee80211_register_hw+0x14f1/0x4200
[  508.451845][T12866]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  508.451896][T12866]  ? __hrtimer_setup+0x181/0x200
[  508.451928][T12866]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  508.451962][T12866]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  508.452032][T12866]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  508.452054][T12866]  ? kstrndup+0xbf/0x160
[  508.452099][T12866]  hwsim_new_radio_nl+0xf35/0x1bd0
[  508.452219][T12866]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  508.452261][T12866]  ? rcu_is_watching+0x15/0xb0
[  508.452295][T12866]  ? trace_kmalloc+0x2a/0x110
[  508.452330][T12866]  ? __nla_parse+0x40/0x60
[  508.452371][T12866]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  508.452409][T12866]  genl_family_rcv_msg_doit+0x22a/0x330
[  508.452444][T12866]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  508.452489][T12866]  ? bpf_lsm_capable+0x9/0x20
[  508.452521][T12866]  ? security_capable+0x7e/0x2c0
[  508.452561][T12866]  genl_rcv_msg+0x61c/0x7a0
[  508.452596][T12866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.452620][T12866]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  508.452646][T12866]  ? __lock_acquire+0x6b5/0x2cf0
[  508.452693][T12866]  netlink_rcv_skb+0x232/0x4b0
[  508.452727][T12866]  ? __pfx_genl_rcv_msg+0x10/0x10
[  508.452753][T12866]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  508.452811][T12866]  ? down_read+0x272/0x2e0
[  508.452834][T12866]  ? genl_rcv+0xd/0x40
[  508.452859][T12866]  genl_rcv+0x28/0x40
[  508.452879][T12866]  netlink_unicast+0x80f/0x9b0
[  508.452921][T12866]  ? __pfx_netlink_unicast+0x10/0x10
[  508.452953][T12866]  ? netlink_sendmsg+0x650/0xb40
[  508.452981][T12866]  ? skb_put+0x11b/0x210
[  508.453022][T12866]  netlink_sendmsg+0x813/0xb40
[  508.453069][T12866]  ? __pfx_netlink_sendmsg+0x10/0x10
[  508.453107][T12866]  ? __sanitizer_cov_trace_pc+0x10/0x70
[  508.453149][T12866]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  508.453182][T12866]  ____sys_sendmsg+0x972/0x9f0
[  508.453204][T12866]  ? lockdep_hardirqs_on+0x7a/0x110
[  508.453252][T12866]  ? __pfx_____sys_sendmsg+0x10/0x10
[  508.453286][T12866]  ? ___sys_sendmsg+0x28a/0x360
[  508.453320][T12866]  ___sys_sendmsg+0x2a5/0x360
[  508.453352][T12866]  ? __pfx____sys_sendmsg+0x10/0x10
[  508.453381][T12866]  ? perf_trace_preemptirq_template+0xb2/0x350
[  508.453419][T12866]  ? irqentry_enter+0xac/0x130
[  508.453500][T12866]  ? lockdep_hardirqs_on+0x7a/0x110
[  508.453564][T12866]  ? __x64_sys_sendmsg+0x1a2/0x2a0
[  508.453598][T12866]  __x64_sys_sendmsg+0x1bd/0x2a0
[  508.453626][T12866]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  508.453688][T12866]  do_syscall_64+0x14d/0xf80
[  508.453711][T12866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.453734][T12866]  ? clear_bhb_loop+0x40/0x90
[  508.453764][T12866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.453789][T12866] RIP: 0033:0x7f88db99c799
[  508.453812][T12866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  508.453832][T12866] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  508.453857][T12866] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  508.453874][T12866] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  508.453888][T12866] RBP: 00007f88dba32bd9 R08: 0000000000000000 R09: 0000000000000000
[  508.453902][T12866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.453915][T12866] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  508.453959][T12866]  </TASK>
[  509.445003][T12889] syz.3.1807: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  509.499404][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.3.1807 Not tainted syzkaller #0 PREEMPT(full) 
[  509.499438][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  509.499459][T12889] Call Trace:
[  509.499481][T12889]  <TASK>
[  509.499501][T12889]  dump_stack_lvl+0xe8/0x150
[  509.499591][T12889]  warn_alloc+0x249/0x340
[  509.499664][T12889]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  509.499778][T12889]  ? __pfx_warn_alloc+0x10/0x10
[  509.499939][T12889]  ? kasan_save_track+0x4f/0x80
[  509.499989][T12889]  ? kasan_save_track+0x3e/0x80
[  509.500022][T12889]  ? __kasan_kmalloc+0x93/0xb0
[  509.500056][T12889]  ? __kmalloc_cache_noprof+0x31c/0x660
[  509.500091][T12889]  ? xskq_create+0x56/0x170
[  509.500142][T12889]  ? xsk_setsockopt+0x603/0x990
[  509.500179][T12889]  ? do_sock_setsockopt+0x17c/0x1b0
[  509.500223][T12889]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  509.500270][T12889]  ? do_syscall_64+0x14d/0xf80
[  509.500367][T12889]  __vmalloc_node_range_noprof+0x132/0x1730
[  509.500824][T12889]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  509.500968][T12889]  ? __kasan_kmalloc+0x93/0xb0
[  509.501102][T12889]  vmalloc_user_noprof+0xad/0xe0
[  509.501161][T12889]  ? xskq_create+0xbf/0x170
[  509.501242][T12889]  xskq_create+0xbf/0x170
[  509.501356][T12889]  xsk_init_queue+0x8a/0xe0
[  509.501462][T12889]  xsk_setsockopt+0x603/0x990
[  509.501583][T12889]  ? __pfx_xsk_setsockopt+0x10/0x10
[  509.501653][T12889]  ? __pfx_aa_sk_perm+0x10/0x10
[  509.501763][T12889]  ? __fget_files+0x2a/0x420
[  509.501807][T12889]  ? aa_sock_opt_perm+0xff/0x1a0
[  509.501920][T12889]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  509.501958][T12889]  ? __pfx_xsk_setsockopt+0x10/0x10
[  509.502050][T12889]  do_sock_setsockopt+0x17c/0x1b0
[  509.502183][T12889]  __x64_sys_setsockopt+0x13d/0x1b0
[  509.502340][T12889]  do_syscall_64+0x14d/0xf80
[  509.502379][T12889]  ? trace_irq_disable+0x3b/0x150
[  509.502426][T12889]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.502471][T12889]  ? clear_bhb_loop+0x40/0x90
[  509.502570][T12889]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.502609][T12889] RIP: 0033:0x7fd23ff9c799
[  509.502664][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.502695][T12889] RSP: 002b:00007fd240d80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  509.502723][T12889] RAX: ffffffffffffffda RBX: 00007fd240215fa0 RCX: 00007fd23ff9c799
[  509.502742][T12889] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  509.502756][T12889] RBP: 00007fd240032bd9 R08: 0000000000000004 R09: 0000000000000000
[  509.502772][T12889] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  509.502787][T12889] R13: 00007fd240216038 R14: 00007fd240215fa0 R15: 00007ffdb9c10168
[  509.503071][T12889]  </TASK>
[  509.807110][T12889] Mem-Info:
[  509.810513][T12889] active_anon:6055 inactive_anon:0 isolated_anon:0
[  509.810513][T12889]  active_file:21491 inactive_file:40144 isolated_file:0
[  509.810513][T12889]  unevictable:768 dirty:102 writeback:13
[  509.810513][T12889]  slab_reclaimable:11940 slab_unreclaimable:110074
[  509.810513][T12889]  mapped:30861 shmem:1358 pagetables:1275
[  509.810513][T12889]  sec_pagetables:0 bounce:0
[  509.810513][T12889]  kernel_misc_reclaimable:0
[  509.810513][T12889]  free:1296110 free_pcp:8346 free_cma:0
[  509.874791][T12889] Node 0 active_anon:24220kB inactive_anon:0kB active_file:85964kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123444kB dirty:404kB writeback:52kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13832kB pagetables:4936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  509.910284][T12889] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  509.957118][T12889] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  509.996605][T12889] lowmem_reserve[]: 0 2492 2493 2493 2493
[  510.003839][T12889] Node 0 DMA32 free:1224620kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24220kB inactive_anon:0kB active_file:85964kB inactive_file:160372kB unevictable:1536kB writepending:456kB zspages:0kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:33256kB local_pcp:14252kB free_cma:0kB
[  510.049834][T12889] lowmem_reserve[]: 0 0 0 0 0
[  510.055021][T12889] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  510.099812][T12889] lowmem_reserve[]: 0 0 0 0 0
[  510.105717][T12889] Node 1 Normal free:3944460kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  510.154074][T12889] lowmem_reserve[]: 0 0 0 0 0
[  510.180364][T12889] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  510.224158][T12889] Node 0 DMA32: 3617*4kB (UM) 4611*8kB (UM) 2205*16kB (UME) 1064*32kB (UME) 308*64kB (UME) 294*128kB (UM) 299*256kB (UME) 168*512kB (UM) 109*1024kB (UME) 49*2048kB (UME) 164*4096kB (M) = 1224300kB
[  510.280906][T12889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  510.295308][T12889] Node 1 Normal: 9*4kB (UM) 15*8kB (UM) 11*16kB (UM) 10*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944460kB
[  510.315176][T12889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.328318][T12889] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  510.338499][T12889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  510.363477][T12889] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  510.380021][T12889] 62989 total pagecache pages
[  510.385156][T12889] 0 pages in swap cache
[  510.394118][T12889] Free swap  = 124996kB
[  510.415797][T12889] Total swap = 124996kB
[  510.420449][T12889] 2097051 pages RAM
[  510.424720][T12889] 0 pages HighMem/MovableOnly
[  510.430545][T12889] 427022 pages reserved
[  510.434979][T12889] 0 pages cma reserved
[  510.620329][T12901] FAULT_INJECTION: forcing a failure.
[  510.620329][T12901] name failslab, interval 1, probability 0, space 0, times 0
[  510.667192][T12901] CPU: 1 UID: 0 PID: 12901 Comm: syz.5.1811 Not tainted syzkaller #0 PREEMPT(full) 
[  510.667234][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  510.667248][T12901] Call Trace:
[  510.667257][T12901]  <TASK>
[  510.667267][T12901]  dump_stack_lvl+0xe8/0x150
[  510.667306][T12901]  should_fail_ex+0x412/0x560
[  510.667342][T12901]  should_failslab+0xa8/0x100
[  510.667374][T12901]  __kmalloc_cache_noprof+0x88/0x660
[  510.667399][T12901]  ? __pfx___mutex_lock+0x10/0x10
[  510.667422][T12901]  ? __inet_diag_dump_start+0x8b/0xbf0
[  510.667445][T12901]  ? netlink_lookup+0x30/0x200
[  510.667482][T12901]  __inet_diag_dump_start+0x8b/0xbf0
[  510.667507][T12901]  ? netlink_lookup+0x30/0x200
[  510.667535][T12901]  ? netlink_lookup+0x30/0x200
[  510.667560][T12901]  ? netlink_lookup+0x30/0x200
[  510.667595][T12901]  __netlink_dump_start+0x469/0x7e0
[  510.667633][T12901]  inet_diag_handler_cmd+0x1e0/0x2c0
[  510.667661][T12901]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[  510.667682][T12901]  ? __pfx_inet_diag_dump_start+0x10/0x10
[  510.667702][T12901]  ? __pfx_inet_diag_dump+0x10/0x10
[  510.667721][T12901]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  510.667746][T12901]  ? sock_diag_lock_handler+0x19/0x290
[  510.667776][T12901]  ? sock_diag_lock_handler+0x19/0x290
[  510.667812][T12901]  sock_diag_rcv_msg+0x4cc/0x600
[  510.667875][T12901]  netlink_rcv_skb+0x232/0x4b0
[  510.667907][T12901]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  510.667939][T12901]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  510.667982][T12901]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.668021][T12901]  netlink_unicast+0x80f/0x9b0
[  510.668057][T12901]  ? __pfx_netlink_unicast+0x10/0x10
[  510.668086][T12901]  ? netlink_sendmsg+0x650/0xb40
[  510.668114][T12901]  ? skb_put+0x11b/0x210
[  510.668151][T12901]  netlink_sendmsg+0x813/0xb40
[  510.668193][T12901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  510.668235][T12901]  ? aa_sock_msg_perm+0xf1/0x1b0
[  510.668267][T12901]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  510.668297][T12901]  ____sys_sendmsg+0x972/0x9f0
[  510.668330][T12901]  ? __pfx_____sys_sendmsg+0x10/0x10
[  510.668363][T12901]  ? import_iovec+0x73/0xa0
[  510.668403][T12901]  ___sys_sendmsg+0x2a5/0x360
[  510.668432][T12901]  ? __pfx____sys_sendmsg+0x10/0x10
[  510.668495][T12901]  ? __fget_files+0x2a/0x420
[  510.668541][T12901]  ? __fget_files+0x3a0/0x420
[  510.668586][T12901]  __x64_sys_sendmsg+0x1bd/0x2a0
[  510.668612][T12901]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  510.668633][T12901]  ? perf_trace_preemptirq_template+0xb2/0x350
[  510.668678][T12901]  ? __pfx_ksys_write+0x10/0x10
[  510.668715][T12901]  do_syscall_64+0x14d/0xf80
[  510.668735][T12901]  ? trace_irq_disable+0x3b/0x150
[  510.668765][T12901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.668788][T12901]  ? clear_bhb_loop+0x40/0x90
[  510.668815][T12901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.668848][T12901] RIP: 0033:0x7f88db99c799
[  510.668886][T12901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.668904][T12901] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  510.668929][T12901] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  510.668946][T12901] RDX: 0000000000008090 RSI: 0000200000000080 RDI: 0000000000000003
[  510.668961][T12901] RBP: 00007f88dc8e5090 R08: 0000000000000000 R09: 0000000000000000
[  510.668974][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.668986][T12901] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  510.669022][T12901]  </TASK>
[  511.233972][T12914] pimreg1: tun_chr_ioctl cmd 1074025677
[  511.259914][T12914] pimreg1: linktype set to 825
[  511.436641][T12919] netlink: 'syz.2.1818': attribute type 29 has an invalid length.
[  511.470980][T12917] netlink: 'syz.5.1816': attribute type 5 has an invalid length.
[  511.514815][T12923] netlink: 'syz.2.1818': attribute type 29 has an invalid length.
[  511.672275][T12923] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  511.672275][T12923] 3�UH�5r��Bn���\d�Q�e'
[  511.751876][T12923] CPU: 1 UID: 0 PID: 12923 Comm: syz.2.1818 Not tainted syzkaller #0 PREEMPT(full) 
[  511.751909][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  511.751922][T12923] Call Trace:
[  511.751931][T12923]  <TASK>
[  511.751942][T12923]  dump_stack_lvl+0xe8/0x150
[  511.751978][T12923]  sysfs_warn_dup+0x8e/0xa0
[  511.752010][T12923]  sysfs_do_create_link_sd+0xc0/0x110
[  511.752043][T12923]  device_add_class_symlinks+0x1cf/0x240
[  511.752072][T12923]  device_add+0x475/0xb70
[  511.752101][T12923]  wiphy_register+0x1d73/0x2d50
[  511.752181][T12923]  ? __pfx_wiphy_register+0x10/0x10
[  511.752211][T12923]  ? __pfx_netdev_run_todo+0x10/0x10
[  511.752236][T12923]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  511.752273][T12923]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  511.752312][T12923]  ieee80211_register_hw+0x3562/0x4200
[  511.752352][T12923]  ? ieee80211_register_hw+0x14f1/0x4200
[  511.752387][T12923]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  511.752429][T12923]  ? __hrtimer_setup+0x181/0x200
[  511.752459][T12923]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  511.752489][T12923]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  511.752545][T12923]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  511.752567][T12923]  ? kstrndup+0xbf/0x160
[  511.752605][T12923]  hwsim_new_radio_nl+0xf35/0x1bd0
[  511.752654][T12923]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  511.752688][T12923]  ? rcu_is_watching+0x15/0xb0
[  511.752719][T12923]  ? trace_kmalloc+0x2a/0x110
[  511.752749][T12923]  ? __nla_parse+0x40/0x60
[  511.752784][T12923]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  511.752817][T12923]  genl_family_rcv_msg_doit+0x22a/0x330
[  511.752848][T12923]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  511.752886][T12923]  ? bpf_lsm_capable+0x9/0x20
[  511.752915][T12923]  ? security_capable+0x7e/0x2c0
[  511.752949][T12923]  genl_rcv_msg+0x61c/0x7a0
[  511.752979][T12923]  ? __pfx_genl_rcv_msg+0x10/0x10
[  511.753000][T12923]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  511.753023][T12923]  ? __lock_acquire+0x6b5/0x2cf0
[  511.753064][T12923]  netlink_rcv_skb+0x232/0x4b0
[  511.753094][T12923]  ? __pfx_genl_rcv_msg+0x10/0x10
[  511.753118][T12923]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  511.753175][T12923]  ? down_read+0x272/0x2e0
[  511.753198][T12923]  ? genl_rcv+0xd/0x40
[  511.753221][T12923]  genl_rcv+0x28/0x40
[  511.753239][T12923]  netlink_unicast+0x80f/0x9b0
[  511.753276][T12923]  ? __pfx_netlink_unicast+0x10/0x10
[  511.753305][T12923]  ? netlink_sendmsg+0x650/0xb40
[  511.753333][T12923]  ? skb_put+0x11b/0x210
[  511.753370][T12923]  netlink_sendmsg+0x813/0xb40
[  511.753410][T12923]  ? __pfx_netlink_sendmsg+0x10/0x10
[  511.753443][T12923]  ? aa_sock_msg_perm+0xf1/0x1b0
[  511.753473][T12923]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  511.753501][T12923]  ____sys_sendmsg+0x972/0x9f0
[  511.753533][T12923]  ? __pfx_____sys_sendmsg+0x10/0x10
[  511.753565][T12923]  ? import_iovec+0x73/0xa0
[  511.753603][T12923]  ___sys_sendmsg+0x2a5/0x360
[  511.753630][T12923]  ? __pfx____sys_sendmsg+0x10/0x10
[  511.753659][T12923]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  511.753690][T12923]  ? futex_wake+0x4ac/0x580
[  511.753750][T12923]  ? __fget_files+0x2a/0x420
[  511.753782][T12923]  ? __fget_files+0x3a0/0x420
[  511.753825][T12923]  __x64_sys_sendmsg+0x1bd/0x2a0
[  511.753850][T12923]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  511.753870][T12923]  ? perf_trace_preemptirq_template+0xb2/0x350
[  511.753917][T12923]  ? rcu_is_watching+0x15/0xb0
[  511.753961][T12923]  do_syscall_64+0x14d/0xf80
[  511.753980][T12923]  ? trace_irq_disable+0x3b/0x150
[  511.754010][T12923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.754033][T12923]  ? clear_bhb_loop+0x40/0x90
[  511.754060][T12923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.754081][T12923] RIP: 0033:0x7fe7e4f9c799
[  511.754102][T12923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.754121][T12923] RSP: 002b:00007fe7e5e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  511.754151][T12923] RAX: ffffffffffffffda RBX: 00007fe7e5216090 RCX: 00007fe7e4f9c799
[  511.754167][T12923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  511.754181][T12923] RBP: 00007fe7e5032bd9 R08: 0000000000000000 R09: 0000000000000000
[  511.754194][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.754208][T12923] R13: 00007fe7e5216128 R14: 00007fe7e5216090 R15: 00007ffce8abed18
[  511.754243][T12923]  </TASK>
[  512.224328][T12929] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1820'.
[  512.233600][T12929] netlink: 'syz.0.1820': attribute type 1 has an invalid length.
[  512.241994][T12929] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1820'.
[  512.774535][T12943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'.
[  513.007203][T12950] openvswitch: netlink: IPv4 tunnel dst address is zero
[  513.234631][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'.
[  514.072279][T12978] netlink: 'syz.0.1835': attribute type 9 has an invalid length.
[  514.876618][T12978] netlink: 'syz.0.1835': attribute type 10 has an invalid length.
[  515.203738][T13001] netlink: 'syz.1.1843': attribute type 4 has an invalid length.
[  515.227219][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1843'.
[  515.305996][T13007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1846'.
[  515.386649][T13007] netlink: 'syz.0.1846': attribute type 21 has an invalid length.
[  515.435209][T13006] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1844'.
[  515.534029][ T5847] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  517.699507][ T1719] block nbd2: Possible stuck request ffff888026cf8000: control (read@0,4096B). Runtime 60 seconds
[  519.345782][ T5195] udevd[5195]: worker [11750] /devices/virtual/block/nbd2 is taking a long time
[  519.609847][ T5847] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  519.620009][ T5847] Bluetooth: hci4: Injecting HCI hardware error event
[  519.629173][ T5847] Bluetooth: hci4: hardware error 0x00
[  520.120271][T13074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1869'.
[  521.697096][ T5847] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  521.712726][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1885'.
[  521.726669][T13124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1885'.
[  521.837931][T13126] netlink: 'syz.1.1885': attribute type 10 has an invalid length.
[  521.846895][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1885'.
[  521.858578][T13126] dummy0: entered promiscuous mode
[  521.864865][T13126] dummy0: entered allmulticast mode
[  521.973146][T13126] bridge0: port 3(dummy0) entered blocking state
[  521.984981][T13126] bridge0: port 3(dummy0) entered disabled state
[  522.093812][T13126] bridge0: port 3(dummy0) entered blocking state
[  522.102271][T13126] bridge0: port 3(dummy0) entered forwarding state
[  522.439274][T13136] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1892'.
[  522.509049][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'.
[  522.540267][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'.
[  522.869155][T13154] FAULT_INJECTION: forcing a failure.
[  522.869155][T13154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  522.882477][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.1.1898 Not tainted syzkaller #0 PREEMPT(full) 
[  522.882507][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  522.882521][T13154] Call Trace:
[  522.882530][T13154]  <TASK>
[  522.882540][T13154]  dump_stack_lvl+0xe8/0x150
[  522.882578][T13154]  should_fail_ex+0x412/0x560
[  522.882615][T13154]  _copy_from_iter+0x1d3/0x1670
[  522.882652][T13154]  ? rcu_is_watching+0x15/0xb0
[  522.882692][T13154]  ? __pfx__copy_from_iter+0x10/0x10
[  522.882735][T13154]  ? netlink_sendmsg+0x650/0xb40
[  522.882764][T13154]  ? skb_put+0x11b/0x210
[  522.882802][T13154]  netlink_sendmsg+0x6c0/0xb40
[  522.882845][T13154]  ? __pfx_netlink_sendmsg+0x10/0x10
[  522.882879][T13154]  ? aa_sock_msg_perm+0xf1/0x1b0
[  522.882911][T13154]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  522.882942][T13154]  ____sys_sendmsg+0x972/0x9f0
[  522.882977][T13154]  ? __pfx_____sys_sendmsg+0x10/0x10
[  522.883013][T13154]  ? import_iovec+0x73/0xa0
[  522.883052][T13154]  ___sys_sendmsg+0x2a5/0x360
[  522.883083][T13154]  ? __pfx____sys_sendmsg+0x10/0x10
[  522.883114][T13154]  ? __pfx_perf_trace_lock_acquire+0x10/0x10
[  522.883190][T13154]  ? __fget_files+0x2a/0x420
[  522.883223][T13154]  ? __fget_files+0x3a0/0x420
[  522.883270][T13154]  __x64_sys_sendmsg+0x1bd/0x2a0
[  522.883297][T13154]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  522.883333][T13154]  ? __pfx_ksys_write+0x10/0x10
[  522.883372][T13154]  do_syscall_64+0x14d/0xf80
[  522.883392][T13154]  ? trace_irq_disable+0x3b/0x150
[  522.883424][T13154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.883446][T13154]  ? clear_bhb_loop+0x40/0x90
[  522.883475][T13154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.883498][T13154] RIP: 0033:0x7f4be579c799
[  522.883519][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.883537][T13154] RSP: 002b:00007f4be6607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  522.883560][T13154] RAX: ffffffffffffffda RBX: 00007f4be5a15fa0 RCX: 00007f4be579c799
[  522.883576][T13154] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000010
[  522.883590][T13154] RBP: 00007f4be6607090 R08: 0000000000000000 R09: 0000000000000000
[  522.883603][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.883614][T13154] R13: 00007f4be5a16038 R14: 00007f4be5a15fa0 R15: 00007fff99694558
[  522.883653][T13154]  </TASK>
[  523.191384][T13161] netlink: 'syz.2.1900': attribute type 4 has an invalid length.
[  523.230531][T13147] netlink: 'syz.3.1894': attribute type 25 has an invalid length.
[  523.242056][T13147] netlink: 'syz.3.1894': attribute type 9 has an invalid length.
[  523.278075][T13163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  523.490725][T13171] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1904'.
[  523.620548][T13176] netlink: 'syz.5.1906': attribute type 10 has an invalid length.
[  523.652667][T13176] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1906'.
[  523.674263][T13180] delete_channel: no stack
[  523.678999][T13180] delete_channel: no stack
[  523.723744][T13176] batman_adv: batadv0: Interface deactivated: vlan1
[  523.909328][T13184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1908'.
[  523.984251][T13184] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  524.206251][T13176] batman_adv: batadv0: Removing interface: vlan1
[  525.442222][T13212] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1916'.
[  525.809175][T13218] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  526.274624][T13224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'.
[  526.849346][T13240] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1928'.
[  527.092974][T13245] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1929'.
[  527.164370][T13233] syzkaller0: entered promiscuous mode
[  527.171346][T13233] syzkaller0: entered allmulticast mode
[  527.592477][T13249] netlink: 'syz.3.1931': attribute type 23 has an invalid length.
[  527.940869][T13255] openvswitch: netlink: Flow actions attr not present in new flow.
[  528.627700][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1937'.
[  528.651565][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'.
[  528.928640][T13274] netlink: 'syz.3.1941': attribute type 10 has an invalid length.
[  528.956989][T13274] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1941'.
[  528.994600][T13275] delete_channel: no stack
[  529.009504][T13275] delete_channel: no stack
[  529.079217][T13279] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.1942'.
[  529.642773][T13289] netlink: 'syz.0.1946': attribute type 2 has an invalid length.
[  529.652115][T13289] netlink: 'syz.0.1946': attribute type 3 has an invalid length.
[  529.660928][T13289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1946'.
[  531.344280][T13278] netdevsim netdevsim2 ������: renamed from netdevsim0 (while UP)
[  531.426670][T13289] macvlan1: entered promiscuous mode
[  531.477308][T13290] macvlan1: entered allmulticast mode
[  531.482779][T13290] veth1_vlan: entered allmulticast mode
[  531.555288][T13299] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1947'.
[  531.985458][T13314] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1952'.
[  531.995545][T13314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'.
[  532.584264][T13329] netlink: 'syz.0.1957': attribute type 10 has an invalid length.
[  532.629259][T13330] netlink: 'syz.5.1955': attribute type 6 has an invalid length.
[  532.656168][T13330] netlink: 3936 bytes leftover after parsing attributes in process `syz.5.1955'.
[  532.764800][T13330] netlink: 'syz.5.1955': attribute type 1 has an invalid length.
[  532.907830][T13330] nbd3: detected capacity change from 0 to 339754496
[  532.972519][ T5847] block nbd3: Receive control failed (result -104)
[  533.006602][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1959'.
[  533.132430][T13339] netlink: zone id is out of range
[  533.139402][T13339] netlink: zone id is out of range
[  533.145764][T13339] netlink: zone id is out of range
[  533.151612][T13339] netlink: zone id is out of range
[  533.233926][T13339] netlink: zone id is out of range
[  533.247374][T13339] netlink: zone id is out of range
[  533.254927][T13339] netlink: zone id is out of range
[  533.262614][T13339] netlink: zone id is out of range
[  533.271193][T13339] netlink: zone id is out of range
[  533.278333][T13339] netlink: zone id is out of range
[  533.443387][T13342] netlink: 8620 bytes leftover after parsing attributes in process `syz.5.1961'.
[  533.603476][T13349] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1962'.
[  533.960977][T13354] netlink: 308 bytes leftover after parsing attributes in process `syz.5.1964'.
[  534.641785][T13373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'.
[  534.979900][T13387] netlink: 758 bytes leftover after parsing attributes in process `syz.2.1976'.
[  535.251518][T13402] FAULT_INJECTION: forcing a failure.
[  535.251518][T13402] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.277206][T13402] CPU: 1 UID: 0 PID: 13402 Comm: syz.0.1980 Not tainted syzkaller #0 PREEMPT(full) 
[  535.277238][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  535.277254][T13402] Call Trace:
[  535.277262][T13402]  <TASK>
[  535.277272][T13402]  dump_stack_lvl+0xe8/0x150
[  535.277309][T13402]  should_fail_ex+0x412/0x560
[  535.277344][T13402]  _copy_from_user+0x2d/0xb0
[  535.277381][T13402]  bpf_prog_test_run_skb+0x14e1/0x1e10
[  535.277438][T13402]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  535.277469][T13402]  bpf_prog_test_run+0x2c7/0x340
[  535.277497][T13402]  __sys_bpf+0x643/0x950
[  535.277532][T13402]  ? __pfx___sys_bpf+0x10/0x10
[  535.277600][T13402]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  535.277636][T13402]  ? ksys_write+0x242/0x270
[  535.277663][T13402]  ? __pfx_ksys_write+0x10/0x10
[  535.277696][T13402]  __x64_sys_bpf+0x7c/0x90
[  535.277728][T13402]  do_syscall_64+0x14d/0xf80
[  535.277749][T13402]  ? trace_irq_disable+0x3b/0x150
[  535.277780][T13402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.277803][T13402]  ? clear_bhb_loop+0x40/0x90
[  535.277831][T13402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.277853][T13402] RIP: 0033:0x7ff5eed9c799
[  535.277875][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.277894][T13402] RSP: 002b:00007ff5efcbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  535.277919][T13402] RAX: ffffffffffffffda RBX: 00007ff5ef015fa0 RCX: 00007ff5eed9c799
[  535.277935][T13402] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  535.277949][T13402] RBP: 00007ff5efcbe090 R08: 0000000000000000 R09: 0000000000000000
[  535.277962][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  535.277975][T13402] R13: 00007ff5ef016038 R14: 00007ff5ef015fa0 R15: 00007ffc0c6174d8
[  535.278010][T13402]  </TASK>
[  536.184903][T13427] netlink: 'syz.3.1987': attribute type 20 has an invalid length.
[  536.720648][T13437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'.
[  536.788611][T13439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'.
[  536.833627][T13433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'.
[  536.873700][T13434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1990'.
[  537.346952][T13457] FAULT_INJECTION: forcing a failure.
[  537.346952][T13457] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  537.498176][T13457] CPU: 0 UID: 0 PID: 13457 Comm: syz.5.1996 Not tainted syzkaller #0 PREEMPT(full) 
[  537.498209][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  537.498222][T13457] Call Trace:
[  537.498235][T13457]  <TASK>
[  537.498248][T13457]  dump_stack_lvl+0xe8/0x150
[  537.498303][T13457]  should_fail_ex+0x412/0x560
[  537.498371][T13457]  _copy_from_iter+0x1d3/0x1670
[  537.498441][T13457]  ? rcu_is_watching+0x15/0xb0
[  537.498514][T13457]  ? __pfx__copy_from_iter+0x10/0x10
[  537.498603][T13457]  ? netlink_sendmsg+0x650/0xb40
[  537.498635][T13457]  ? skb_put+0x11b/0x210
[  537.498700][T13457]  netlink_sendmsg+0x6c0/0xb40
[  537.498791][T13457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.498856][T13457]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  537.498906][T13457]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.498964][T13457]  ____sys_sendmsg+0x972/0x9f0
[  537.498994][T13457]  ? lockdep_hardirqs_on+0x7a/0x110
[  537.499079][T13457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.499171][T13457]  ? import_iovec+0x73/0xa0
[  537.499238][T13457]  ___sys_sendmsg+0x2a5/0x360
[  537.499276][T13457]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  537.499342][T13457]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.499500][T13457]  ? __fget_files+0x2a/0x420
[  537.499600][T13457]  ? __fget_files+0x2a/0x420
[  537.499639][T13457]  ? __fget_files+0x3a0/0x420
[  537.499748][T13457]  __x64_sys_sendmsg+0x1bd/0x2a0
[  537.499804][T13457]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  537.499971][T13457]  do_syscall_64+0x14d/0xf80
[  537.500011][T13457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.500041][T13457]  ? clear_bhb_loop+0x40/0x90
[  537.500090][T13457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.500119][T13457] RIP: 0033:0x7f88db99c799
[  537.500150][T13457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.500170][T13457] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.500193][T13457] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  537.500209][T13457] RDX: 0000000004040000 RSI: 00002000000003c0 RDI: 0000000000000006
[  537.500223][T13457] RBP: 00007f88dc8e5090 R08: 0000000000000000 R09: 0000000000000000
[  537.500236][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  537.500248][T13457] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  537.500352][T13457]  </TASK>
[  539.721085][T13491] mac80211_hwsim hwsim66 wlan1: entered promiscuous mode
[  539.738661][T13495] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2008'.
[  540.069442][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2011'.
[  540.391018][T13508] netlink: 'syz.2.2013': attribute type 2 has an invalid length.
[  540.694530][ T5847] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4
[  540.815847][T13524] FAULT_INJECTION: forcing a failure.
[  540.815847][T13524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  540.892096][T13524] CPU: 1 UID: 0 PID: 13524 Comm: syz.2.2017 Not tainted syzkaller #0 PREEMPT(full) 
[  540.892126][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  540.892140][T13524] Call Trace:
[  540.892148][T13524]  <TASK>
[  540.892158][T13524]  dump_stack_lvl+0xe8/0x150
[  540.892197][T13524]  should_fail_ex+0x412/0x560
[  540.892231][T13524]  _copy_from_iter+0x1d3/0x1670
[  540.892268][T13524]  ? rcu_is_watching+0x15/0xb0
[  540.892317][T13524]  ? __pfx__copy_from_iter+0x10/0x10
[  540.892360][T13524]  ? netlink_sendmsg+0x650/0xb40
[  540.892389][T13524]  ? skb_put+0x11b/0x210
[  540.892426][T13524]  netlink_sendmsg+0x6c0/0xb40
[  540.892470][T13524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.892505][T13524]  ? aa_sock_msg_perm+0xf1/0x1b0
[  540.892536][T13524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  540.892566][T13524]  ____sys_sendmsg+0x972/0x9f0
[  540.892588][T13524]  ? __pfx_perf_trace_lock+0x10/0x10
[  540.892630][T13524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.892665][T13524]  ? import_iovec+0x73/0xa0
[  540.892704][T13524]  ___sys_sendmsg+0x2a5/0x360
[  540.892734][T13524]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.892788][T13524]  ? __fget_files+0x2a/0x420
[  540.892836][T13524]  ? __fget_files+0x2a/0x420
[  540.892866][T13524]  ? __fget_files+0x3a0/0x420
[  540.892920][T13524]  __x64_sys_sendmsg+0x1bd/0x2a0
[  540.892946][T13524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  540.892967][T13524]  ? perf_trace_preemptirq_template+0xb2/0x350
[  540.893015][T13524]  ? __pfx_ksys_write+0x10/0x10
[  540.893056][T13524]  do_syscall_64+0x14d/0xf80
[  540.893076][T13524]  ? trace_irq_disable+0x3b/0x150
[  540.893106][T13524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.893133][T13524]  ? clear_bhb_loop+0x40/0x90
[  540.893162][T13524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.893185][T13524] RIP: 0033:0x7fe7e4f9c799
[  540.893205][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.893224][T13524] RSP: 002b:00007fe7e5e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  540.893248][T13524] RAX: ffffffffffffffda RBX: 00007fe7e5216090 RCX: 00007fe7e4f9c799
[  540.893264][T13524] RDX: 0000000000048030 RSI: 0000200000000180 RDI: 0000000000000006
[  540.893278][T13524] RBP: 00007fe7e5e9f090 R08: 0000000000000000 R09: 0000000000000000
[  540.893291][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  540.893303][T13524] R13: 00007fe7e5216128 R14: 00007fe7e5216090 R15: 00007ffce8abed18
[  540.893344][T13524]  </TASK>
[  541.439052][T13534] netlink: 'syz.3.2022': attribute type 1 has an invalid length.
[  542.711634][T13571] delete_channel: no stack
[  543.042968][T13585] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2041'.
[  543.225310][T13581] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2039'.
[  543.245538][T13581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2039'.
[  543.584600][T13599] FAULT_INJECTION: forcing a failure.
[  543.584600][T13599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  543.621820][T13600] netlink: 'syz.3.2046': attribute type 2 has an invalid length.
[  543.662694][T13600] netlink: 'syz.3.2046': attribute type 2 has an invalid length.
[  543.667618][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.2.2047 Not tainted syzkaller #0 PREEMPT(full) 
[  543.667694][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  543.667744][T13599] Call Trace:
[  543.667766][T13599]  <TASK>
[  543.667795][T13599]  dump_stack_lvl+0xe8/0x150
[  543.667888][T13599]  should_fail_ex+0x412/0x560
[  543.667975][T13599]  _copy_from_user+0x2d/0xb0
[  543.668065][T13599]  inet_ioctl+0x2f8/0x560
[  543.668130][T13599]  ? __pfx_inet_ioctl+0x10/0x10
[  543.668244][T13599]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  543.668294][T13599]  sock_do_ioctl+0x101/0x320
[  543.668379][T13599]  ? __pfx_sock_do_ioctl+0x10/0x10
[  543.668454][T13599]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  543.668571][T13599]  sock_ioctl+0x5c6/0x7f0
[  543.668637][T13599]  ? __pfx_sock_ioctl+0x10/0x10
[  543.668701][T13599]  ? __fget_files+0x2a/0x420
[  543.668797][T13599]  ? __fget_files+0x3a0/0x420
[  543.668872][T13599]  ? __fget_files+0x2a/0x420
[  543.668965][T13599]  ? bpf_lsm_file_ioctl+0x9/0x20
[  543.669042][T13599]  ? __pfx_sock_ioctl+0x10/0x10
[  543.669105][T13599]  __se_sys_ioctl+0xfc/0x170
[  543.669171][T13599]  do_syscall_64+0x14d/0xf80
[  543.669222][T13599]  ? trace_irq_disable+0x3b/0x150
[  543.669305][T13599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.669359][T13599]  ? clear_bhb_loop+0x40/0x90
[  543.669419][T13599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.669479][T13599] RIP: 0033:0x7fe7e4f9c799
[  543.669533][T13599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  543.669587][T13599] RSP: 002b:00007fe7e5ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  543.669649][T13599] RAX: ffffffffffffffda RBX: 00007fe7e5215fa0 RCX: 00007fe7e4f9c799
[  543.669684][T13599] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000005
[  543.669723][T13599] RBP: 00007fe7e5ec0090 R08: 0000000000000000 R09: 0000000000000000
[  543.669765][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.669803][T13599] R13: 00007fe7e5216038 R14: 00007fe7e5215fa0 R15: 00007ffce8abed18
[  543.669904][T13599]  </TASK>
[  543.958562][T13604] FAULT_INJECTION: forcing a failure.
[  543.958562][T13604] name failslab, interval 1, probability 0, space 0, times 0
[  544.039449][T13604] CPU: 0 UID: 0 PID: 13604 Comm: syz.5.2048 Not tainted syzkaller #0 PREEMPT(full) 
[  544.039479][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  544.039494][T13604] Call Trace:
[  544.039506][T13604]  <TASK>
[  544.039519][T13604]  dump_stack_lvl+0xe8/0x150
[  544.039575][T13604]  should_fail_ex+0x412/0x560
[  544.039645][T13604]  should_failslab+0xa8/0x100
[  544.039682][T13604]  ? skb_clone+0x212/0x3a0
[  544.039715][T13604]  kmem_cache_alloc_noprof+0x87/0x650
[  544.039764][T13604]  ? __pfx_perf_trace_lock+0x10/0x10
[  544.039826][T13604]  skb_clone+0x212/0x3a0
[  544.039881][T13604]  __netlink_deliver_tap+0x404/0x850
[  544.039987][T13604]  ? netlink_deliver_tap+0x2e/0x1b0
[  544.040045][T13604]  netlink_deliver_tap+0x19c/0x1b0
[  544.040095][T13604]  netlink_unicast+0x7e3/0x9b0
[  544.040189][T13604]  ? __pfx_netlink_unicast+0x10/0x10
[  544.040243][T13604]  ? netlink_sendmsg+0x650/0xb40
[  544.040274][T13604]  ? skb_put+0x11b/0x210
[  544.040340][T13604]  netlink_sendmsg+0x813/0xb40
[  544.040433][T13604]  ? __pfx_netlink_sendmsg+0x10/0x10
[  544.040499][T13604]  ? aa_sock_msg_perm+0xf1/0x1b0
[  544.040571][T13604]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  544.040625][T13604]  ____sys_sendmsg+0x972/0x9f0
[  544.040659][T13604]  ? __pfx_perf_trace_lock+0x10/0x10
[  544.040741][T13604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  544.040826][T13604]  ? import_iovec+0x73/0xa0
[  544.040894][T13604]  ___sys_sendmsg+0x2a5/0x360
[  544.040961][T13604]  ? __pfx____sys_sendmsg+0x10/0x10
[  544.041122][T13604]  ? __fget_files+0x2a/0x420
[  544.041218][T13604]  ? __fget_files+0x2a/0x420
[  544.041256][T13604]  ? __fget_files+0x3a0/0x420
[  544.041364][T13604]  __x64_sys_sendmsg+0x1bd/0x2a0
[  544.041415][T13604]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  544.041439][T13604]  ? perf_trace_preemptirq_template+0xb2/0x350
[  544.041534][T13604]  ? __pfx_ksys_write+0x10/0x10
[  544.041663][T13604]  do_syscall_64+0x14d/0xf80
[  544.041689][T13604]  ? trace_irq_disable+0x3b/0x150
[  544.041723][T13604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.041759][T13604]  ? clear_bhb_loop+0x40/0x90
[  544.041817][T13604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.041844][T13604] RIP: 0033:0x7f88db99c799
[  544.041876][T13604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.041895][T13604] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  544.041919][T13604] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  544.041935][T13604] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000005
[  544.041949][T13604] RBP: 00007f88dc8e5090 R08: 0000000000000000 R09: 0000000000000000
[  544.041962][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.041975][T13604] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  544.042104][T13604]  </TASK>
[  544.688215][T13617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2052'.
[  544.693109][T13613] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  544.728062][ T5847] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  544.737847][ T5847] Bluetooth: hci1: Injecting HCI hardware error event
[  544.747327][ T5844] Bluetooth: hci1: hardware error 0x00
[  545.466529][ T5847] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  545.602650][T13640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2058'.
[  545.645137][T13641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2061'.
[  546.583343][T13652] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2065'.
[  546.889869][ T5844] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  547.268175][T13683] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2078'.
[  547.381884][T13684] netlink: 'syz.3.2077': attribute type 3 has an invalid length.
[  547.901575][ T1719] block nbd2: Possible stuck request ffff888026cf8000: control (read@0,4096B). Runtime 90 seconds
[  548.356288][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'.
[  548.446031][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'.
[  548.661050][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  548.670743][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  548.679330][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  548.687879][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  548.695666][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  549.015118][T13709] chnl_net:caif_netlink_parms(): no params data found
[  549.468283][T13709] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.486172][T13709] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.519464][T13709] bridge_slave_0: entered allmulticast mode
[  549.527292][ T5847] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  549.537007][ T5847] Bluetooth: hci3: Injecting HCI hardware error event
[  549.545871][ T5844] Bluetooth: hci3: hardware error 0x00
[  549.557606][T13709] bridge_slave_0: entered promiscuous mode
[  549.568192][T13709] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.575569][T13709] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.582965][T13709] bridge_slave_1: entered allmulticast mode
[  549.609609][T13709] bridge_slave_1: entered promiscuous mode
[  549.713001][T13709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.770962][T13709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  549.953025][T13709] team0: Port device team_slave_0 added
[  549.980384][T13709] team0: Port device team_slave_1 added
[  550.095123][T13709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.120318][T13709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.219463][T13709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.268246][T13709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.292882][T13709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.336482][T13709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.461199][T13742] netlink: 'syz.5.2095': attribute type 7 has an invalid length.
[  550.655680][T13709] hsr_slave_0: entered promiscuous mode
[  550.681177][T13709] hsr_slave_1: entered promiscuous mode
[  550.690584][T13709] debugfs: 'hsr0' already exists in 'hsr'
[  550.699812][T13709] Cannot create hsr debugfs directory
[  550.727082][ T5847] Bluetooth: hci0: command tx timeout
[  551.607166][ T5844] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  551.957130][T13709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.161621][T13709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.541863][T13709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.654997][T13784] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2108'.
[  552.682598][T13709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.754157][T13785] netlink: 'syz.1.2108': attribute type 10 has an invalid length.
[  552.791396][T13787] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2109'.
[  552.802356][T13785] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  552.811801][ T5844] Bluetooth: hci0: command tx timeout
[  552.831910][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'.
[  553.123392][T13790] netlink: 'syz.3.2110': attribute type 19 has an invalid length.
[  553.399208][T13709] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  553.449468][T13709] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  553.492905][T13709] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  553.564104][T13709] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  553.741948][T13709] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.775345][T13709] 8021q: adding VLAN 0 to HW filter on device team0
[  553.791360][T10630] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.798686][T10630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.839791][T10632] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.847031][T10632] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.965480][T13709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  554.429047][T13709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.571577][T13709] veth0_vlan: entered promiscuous mode
[  554.644614][T13709] veth1_vlan: entered promiscuous mode
[  554.728631][T13709] veth0_macvtap: entered promiscuous mode
[  554.749653][T13709] veth1_macvtap: entered promiscuous mode
[  554.814728][T13709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.879370][T13709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.897376][ T5844] Bluetooth: hci0: command tx timeout
[  554.938145][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.977689][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.005757][ T1091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.114593][ T1091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  555.520487][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.541875][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.646636][T13846] lo speed is unknown, defaulting to 1000
[  555.647214][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.692132][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.717168][T13846] lo speed is unknown, defaulting to 1000
[  555.727655][T13846] lo speed is unknown, defaulting to 1000
[  555.786437][T13846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  555.872849][T13846] lo speed is unknown, defaulting to 1000
[  555.919674][T13846] lo speed is unknown, defaulting to 1000
[  555.949829][T13846] lo speed is unknown, defaulting to 1000
[  555.989965][T13846] lo speed is unknown, defaulting to 1000
[  556.000182][T13846] lo speed is unknown, defaulting to 1000
[  556.038767][T13846] lo speed is unknown, defaulting to 1000
[  556.075917][T13846] lo speed is unknown, defaulting to 1000
[  556.249500][T13846] lo speed is unknown, defaulting to 1000
[  556.319416][T13846] lo speed is unknown, defaulting to 1000
[  556.356327][T13846] lo speed is unknown, defaulting to 1000
[  556.702719][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2130'.
[  556.970811][ T5844] Bluetooth: hci0: command tx timeout
[  557.345970][T13874] netlink: 'syz.3.2131': attribute type 21 has an invalid length.
[  557.418282][T13874] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2131'.
[  558.061397][T13880] netlink: 'syz.5.2135': attribute type 9 has an invalid length.
[  558.149436][T13880] netlink: 'syz.5.2135': attribute type 11 has an invalid length.
[  558.178192][T13880] netlink: 'syz.5.2135': attribute type 12 has an invalid length.
[  558.191933][T10632] bridge_slave_1: left allmulticast mode
[  558.204894][T10632] bridge_slave_1: left promiscuous mode
[  558.211984][T13880] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2135'.
[  558.222688][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.353894][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'.
[  558.411319][T10632] bridge_slave_0: left allmulticast mode
[  558.417777][T10632] bridge_slave_0: left promiscuous mode
[  558.434058][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.410783][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'.
[  561.968698][T10632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.997543][T10632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.018154][T10632] bond0 (unregistering): Released all slaves
[  562.184505][T13896] tap0: tun_chr_ioctl cmd 1074025677
[  562.196288][T13896] tap0: linktype set to 769
[  562.227150][T13901] tap0: tun_chr_ioctl cmd 1074812118
[  562.573074][T13915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2143'.
[  562.617899][T13923] netlink: 'syz.5.2143': attribute type 33 has an invalid length.
[  562.625727][T13915] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2143'.
[  562.724243][T13923] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2143'.
[  562.837493][T13923] `: renamed from ip6tnl0 (while UP)
[  563.032060][T13923] net_ratelimit: 117 callbacks suppressed
[  563.032084][T13923] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  563.148277][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.156073][ T1719] block nbd3: Possible stuck request ffff888026d98000: control (read@0,4096B). Runtime 30 seconds
[  563.173414][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.460353][T13940] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2149'.
[  563.837988][T10632] hsr_slave_0: left promiscuous mode
[  563.878522][T10632] hsr_slave_1: left promiscuous mode
[  563.885184][T13949] netlink: 'syz.5.2154': attribute type 1 has an invalid length.
[  563.907878][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.915343][T10632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.991685][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.032014][T10632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.069505][T10632] veth1_macvtap: left promiscuous mode
[  564.083034][T10632] veth0_macvtap: left promiscuous mode
[  564.111726][T10632] veth1_vlan: left promiscuous mode
[  564.144918][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  564.151185][T10632] veth0_vlan: left promiscuous mode
[  564.158097][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  564.168301][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  564.177765][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  564.187431][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  564.532253][T13965] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  564.920390][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2160'.
[  564.983537][T13969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2160'.
[  565.130902][T10632] team0 (unregistering): Port device team_slave_1 removed
[  565.176928][T10632] team0 (unregistering): Port device team_slave_0 removed
[  565.479064][T13948] netlink: 'syz.5.2154': attribute type 4 has an invalid length.
[  565.610230][T13956] lo speed is unknown, defaulting to 1000
[  565.708351][T13983] netlink: 'syz.0.2165': attribute type 6 has an invalid length.
[  566.134157][T13956] chnl_net:caif_netlink_parms(): no params data found
[  566.249020][ T5847] Bluetooth: hci5: command tx timeout
[  566.374581][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2168'.
[  566.743967][T13956] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.751466][T13956] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.758890][T13956] bridge_slave_0: entered allmulticast mode
[  566.771559][T13956] bridge_slave_0: entered promiscuous mode
[  566.956623][T10632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.015698][T13956] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.033156][T13956] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.041158][T13956] bridge_slave_1: entered allmulticast mode
[  567.059772][T13956] bridge_slave_1: entered promiscuous mode
[  567.186490][T10632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.360887][T10632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.436301][T13956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.460946][T13956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  567.520781][T13956] team0: Port device team_slave_0 added
[  567.531677][T13956] team0: Port device team_slave_1 added
[  567.724680][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  567.734744][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  567.743281][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  567.816359][T10632] netdevsim netdevsim2 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.827540][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  567.838708][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  567.882689][T13956] batman_adv: batadv0: Adding interface: batadv_slave_0
[  567.889169][T14043] netlink: 'syz.0.2180': attribute type 39 has an invalid length.
[  567.921786][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.015655][T13956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.035461][T14046] raw_sendmsg: syz.5.2179 forgot to set AF_INET. Fix it!
[  568.371624][ T5844] Bluetooth: hci5: command tx timeout
[  568.787761][T13956] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.799344][T13956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.840945][T13956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  568.989483][T14035] lo speed is unknown, defaulting to 1000
[  569.100952][T13956] hsr_slave_0: entered promiscuous mode
[  569.129479][T13956] hsr_slave_1: entered promiscuous mode
[  569.146397][T13956] debugfs: 'hsr0' already exists in 'hsr'
[  569.157427][T13956] Cannot create hsr debugfs directory
[  569.385217][T10632] bridge_slave_1: left allmulticast mode
[  569.392395][T10632] bridge_slave_1: left promiscuous mode
[  569.411873][T10632] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.422671][T10632] bridge_slave_0: left allmulticast mode
[  569.461449][T10632] bridge_slave_0: left promiscuous mode
[  569.473178][T10632] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.698955][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  569.912809][T14083] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2189'.
[  569.922365][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2189'.
[  569.931854][ T5844] Bluetooth: hci1: command tx timeout
[  569.938946][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  570.355595][T10632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  570.388507][T10632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  570.407134][ T5844] Bluetooth: hci5: command tx timeout
[  570.419948][T10632] bond0 (unregistering): Released all slaves
[  570.933949][T14109] netlink: 'syz.5.2195': attribute type 1 has an invalid length.
[  570.959039][T14109] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2195'.
[  570.990140][T14109] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2195'.
[  571.029246][T14109] netlink: 'syz.5.2195': attribute type 1 has an invalid length.
[  571.518085][T14035] chnl_net:caif_netlink_parms(): no params data found
[  572.019326][ T5844] Bluetooth: hci1: command tx timeout
[  572.189314][T13956] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  572.309148][T13956] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  572.449801][T13956] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  572.488858][ T5844] Bluetooth: hci5: command tx timeout
[  572.508999][T14035] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.517013][T14035] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.524410][T14035] bridge_slave_0: entered allmulticast mode
[  572.532770][T14035] bridge_slave_0: entered promiscuous mode
[  572.544711][T14035] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.553372][T14035] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.561153][T14035] bridge_slave_1: entered allmulticast mode
[  572.569099][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2200'.
[  572.576415][T14035] bridge_slave_1: entered promiscuous mode
[  572.594410][T13956] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  572.635698][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2201'.
[  572.783833][T10632] hsr_slave_0: left promiscuous mode
[  572.807002][T10632] hsr_slave_1: left promiscuous mode
[  572.822187][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  572.836863][T10632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  572.871643][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  572.889204][T10632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  572.940365][T10632] veth1_macvtap: left promiscuous mode
[  572.945924][T10632] veth0_macvtap: left promiscuous mode
[  572.976972][T10632] veth1_vlan: left promiscuous mode
[  572.982417][T10632] veth0_vlan: left promiscuous mode
[  573.014048][T14160] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2204'.
[  573.356191][T10632] team0 (unregistering): Port device team_slave_1 removed
[  573.379564][T10632] team0 (unregistering): Port device team_slave_0 removed
[  573.570863][T14035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.589735][T14035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.759372][T14035] team0: Port device team_slave_0 added
[  573.801680][T14035] team0: Port device team_slave_1 added
[  573.845973][T14035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.856013][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.946810][T14035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.979234][T14035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.986318][T14035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  574.017354][T14181] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2209'.
[  574.058587][T14035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.088194][ T5844] Bluetooth: hci1: command tx timeout
[  574.156713][T14035] hsr_slave_0: entered promiscuous mode
[  574.176032][T14035] hsr_slave_1: entered promiscuous mode
[  574.189670][T14035] debugfs: 'hsr0' already exists in 'hsr'
[  574.202407][T14035] Cannot create hsr debugfs directory
[  574.650636][T14192] lo speed is unknown, defaulting to 1000
[  575.450381][T14209] __nla_validate_parse: 1 callbacks suppressed
[  575.450404][T14209] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2214'.
[  575.509575][T14209] netlink: 424 bytes leftover after parsing attributes in process `syz.0.2214'.
[  575.716315][T14216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.752473][T14035] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.804644][T13956] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.818912][T14214] netlink: 'syz.0.2216': attribute type 29 has an invalid length.
[  575.831724][T14216] netlink: 'syz.1.2215': attribute type 4 has an invalid length.
[  575.908308][T14218] netlink: 'syz.0.2216': attribute type 29 has an invalid length.
[  576.132168][T14035] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.178803][ T5844] Bluetooth: hci1: command tx timeout
[  576.456505][T14035] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.635139][T14035] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.697165][T13956] 8021q: adding VLAN 0 to HW filter on device team0
[  576.733880][T14062] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.741206][T14062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.828865][T14239] wg1 speed is unknown, defaulting to 1000
[  576.841514][T14062] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.849136][T14062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.946286][T14239] wg1 speed is unknown, defaulting to 1000
[  577.031125][T14239] wg1 speed is unknown, defaulting to 1000
[  577.189127][T14035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  577.344206][T13956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  577.406034][T13956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  577.511462][T14035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  577.587833][T14035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  577.621959][T14255] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2221'.
[  577.668497][T14035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  578.029193][T14035] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.064063][T14035] 8021q: adding VLAN 0 to HW filter on device team0
[  578.079357][T14059] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.086635][T14059] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.144489][T14059] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.151793][T14059] bridge0: port 2(bridge_slave_1) entered forwarding state
[  578.175177][T14254] delete_channel: no stack
[  578.450712][T14282] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2224'.
[  578.463156][T13956] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.474934][T14239] infiniband syz2: set active
[  578.494821][   T24] wg1 speed is unknown, defaulting to 1000
[  578.507952][T14239] infiniband syz2: added wg1
[  578.526887][ T1719] block nbd2: Possible stuck request ffff888026cf8000: control (read@0,4096B). Runtime 120 seconds
[  578.531335][T14282] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2224'.
[  578.612616][T14239] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  578.633443][T14239] infiniband syz2: Couldn't open port 1
[  578.798153][T14285] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.2224'.
[  578.823391][T14282] netlink: 'syz.5.2224': attribute type 6 has an invalid length.
[  578.823438][T14282] netlink: 'syz.5.2224': attribute type 5 has an invalid length.
[  578.823463][T14282] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2224'.
[  578.938934][T14239] RDS/IB: syz2: added
[  578.943927][T14239] smc: adding ib device syz2 with port count 1
[  578.990045][T14239] smc:    ib device syz2 port 1 has no pnetid
[  578.998885][T11962] wg1 speed is unknown, defaulting to 1000
[  579.028471][T14239] wg1 speed is unknown, defaulting to 1000
[  579.109685][T14035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.306397][T14035] veth0_vlan: entered promiscuous mode
[  579.360755][T14035] veth1_vlan: entered promiscuous mode
[  579.397065][T14297] netlink: 'syz.5.2226': attribute type 29 has an invalid length.
[  579.462995][T14297] netlink: 'syz.5.2226': attribute type 29 has an invalid length.
[  579.536213][T14035] veth0_macvtap: entered promiscuous mode
[  579.613059][T14035] veth1_macvtap: entered promiscuous mode
[  579.653725][T14297] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  579.653725][T14297] 3�UH�5r��Bn���\d�Q�e'
[  579.696264][T14297] CPU: 1 UID: 0 PID: 14297 Comm: syz.5.2226 Not tainted syzkaller #0 PREEMPT(full) 
[  579.696298][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  579.696312][T14297] Call Trace:
[  579.696320][T14297]  <TASK>
[  579.696330][T14297]  dump_stack_lvl+0xe8/0x150
[  579.696369][T14297]  sysfs_warn_dup+0x8e/0xa0
[  579.696412][T14297]  sysfs_do_create_link_sd+0xc0/0x110
[  579.696447][T14297]  device_add_class_symlinks+0x1cf/0x240
[  579.696477][T14297]  device_add+0x475/0xb70
[  579.696506][T14297]  wiphy_register+0x1d73/0x2d50
[  579.696555][T14297]  ? __pfx_wiphy_register+0x10/0x10
[  579.696585][T14297]  ? __pfx_netdev_run_todo+0x10/0x10
[  579.696611][T14297]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  579.696644][T14297]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  579.696687][T14297]  ieee80211_register_hw+0x3562/0x4200
[  579.696727][T14297]  ? ieee80211_register_hw+0x14f1/0x4200
[  579.696762][T14297]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  579.696790][T14297]  ? kasan_check_range+0x9d/0x2c0
[  579.696828][T14297]  ? __hrtimer_setup+0x181/0x200
[  579.696858][T14297]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  579.696898][T14297]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  579.696956][T14297]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  579.696976][T14297]  ? kstrndup+0xbf/0x160
[  579.697015][T14297]  hwsim_new_radio_nl+0xf35/0x1bd0
[  579.697039][T14297]  ? perf_trace_run_bpf_submit+0xee/0x170
[  579.697071][T14297]  ? perf_trace_preemptirq_template+0x26f/0x350
[  579.697117][T14297]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  579.697149][T14297]  ? irqentry_exit+0x59e/0x620
[  579.697169][T14297]  ? lockdep_hardirqs_on+0x7a/0x110
[  579.697203][T14297]  ? irqentry_exit+0x59e/0x620
[  579.697222][T14297]  ? trace_irq_disable+0x3b/0x150
[  579.697266][T14297]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  579.697298][T14297]  genl_family_rcv_msg_doit+0x22a/0x330
[  579.697330][T14297]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  579.697368][T14297]  ? bpf_lsm_capable+0x9/0x20
[  579.697406][T14297]  ? security_capable+0x7e/0x2c0
[  579.697442][T14297]  genl_rcv_msg+0x61c/0x7a0
[  579.697472][T14297]  ? __pfx_genl_rcv_msg+0x10/0x10
[  579.697493][T14297]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  579.697534][T14297]  netlink_rcv_skb+0x232/0x4b0
[  579.697564][T14297]  ? __pfx_genl_rcv_msg+0x10/0x10
[  579.697587][T14297]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  579.697643][T14297]  ? down_read+0x272/0x2e0
[  579.697665][T14297]  ? genl_rcv+0xd/0x40
[  579.697689][T14297]  genl_rcv+0x28/0x40
[  579.697709][T14297]  netlink_unicast+0x80f/0x9b0
[  579.697745][T14297]  ? __pfx_netlink_unicast+0x10/0x10
[  579.697774][T14297]  ? netlink_sendmsg+0x650/0xb40
[  579.697801][T14297]  ? skb_put+0x11b/0x210
[  579.697838][T14297]  netlink_sendmsg+0x813/0xb40
[  579.697879][T14297]  ? __pfx_netlink_sendmsg+0x10/0x10
[  579.697914][T14297]  ? aa_sock_msg_perm+0xf1/0x1b0
[  579.697945][T14297]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  579.697974][T14297]  ____sys_sendmsg+0x972/0x9f0
[  579.698006][T14297]  ? __pfx_____sys_sendmsg+0x10/0x10
[  579.698037][T14297]  ? import_iovec+0x73/0xa0
[  579.698073][T14297]  ___sys_sendmsg+0x2a5/0x360
[  579.698102][T14297]  ? __pfx____sys_sendmsg+0x10/0x10
[  579.698149][T14297]  ? __fget_files+0x2a/0x420
[  579.698215][T14297]  ? __fget_files+0x2a/0x420
[  579.698246][T14297]  ? __fget_files+0x3a0/0x420
[  579.698288][T14297]  __x64_sys_sendmsg+0x1bd/0x2a0
[  579.698314][T14297]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  579.698359][T14297]  do_syscall_64+0x14d/0xf80
[  579.698379][T14297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.698411][T14297]  ? clear_bhb_loop+0x40/0x90
[  579.698439][T14297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.698461][T14297] RIP: 0033:0x7f88db99c799
[  579.698481][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.698501][T14297] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.698524][T14297] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  579.698541][T14297] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  579.698555][T14297] RBP: 00007f88dba32bd9 R08: 0000000000000000 R09: 0000000000000000
[  579.698569][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.698581][T14297] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  579.698617][T14297]  </TASK>
[  580.269124][T14239] wg1 speed is unknown, defaulting to 1000
[  580.291665][T14035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  580.303865][T14035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  580.425187][T14062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  580.439946][T14062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  580.510857][T14062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  580.533223][T14062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  580.564668][T14239] wg1 speed is unknown, defaulting to 1000
[  580.616325][T13956] veth0_vlan: entered promiscuous mode
[  580.692090][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2229'.
[  580.731545][T13956] veth1_vlan: entered promiscuous mode
[  580.748444][T14310] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2229'.
[  580.881543][T13956] veth0_macvtap: entered promiscuous mode
[  580.899160][T14058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  580.913407][T14058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  580.989891][T13956] veth1_macvtap: entered promiscuous mode
[  581.014604][T14316] FAULT_INJECTION: forcing a failure.
[  581.014604][T14316] name failslab, interval 1, probability 0, space 0, times 0
[  581.035147][T14316] CPU: 1 UID: 0 PID: 14316 Comm: syz.0.2233 Not tainted syzkaller #0 PREEMPT(full) 
[  581.035184][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  581.035197][T14316] Call Trace:
[  581.035206][T14316]  <TASK>
[  581.035215][T14316]  dump_stack_lvl+0xe8/0x150
[  581.035252][T14316]  should_fail_ex+0x412/0x560
[  581.035286][T14316]  should_failslab+0xa8/0x100
[  581.035315][T14316]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  581.035348][T14316]  ? __alloc_skb+0x186/0x7d0
[  581.035377][T14316]  ? __alloc_skb+0x1d0/0x7d0
[  581.035405][T14316]  ? __local_bh_enable_ip+0xd0/0x130
[  581.035438][T14316]  __alloc_skb+0x1d0/0x7d0
[  581.035471][T14062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.035472][T14316]  netlink_sendmsg+0x5d4/0xb40
[  581.035511][T14316]  ? __pfx_netlink_sendmsg+0x10/0x10
[  581.035622][T14316]  ? aa_sock_msg_perm+0xf1/0x1b0
[  581.035684][T14316]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  581.035775][T14316]  ____sys_sendmsg+0x972/0x9f0
[  581.035861][T14316]  ? __pfx_____sys_sendmsg+0x10/0x10
[  581.035946][T14316]  ? import_iovec+0x73/0xa0
[  581.036043][T14316]  ___sys_sendmsg+0x2a5/0x360
[  581.036109][T14316]  ? __pfx____sys_sendmsg+0x10/0x10
[  581.036256][T14316]  ? __fget_files+0x2a/0x420
[  581.036340][T14316]  ? __fget_files+0x3a0/0x420
[  581.036447][T14316]  __x64_sys_sendmsg+0x1bd/0x2a0
[  581.036510][T14316]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  581.036589][T14316]  ? __pfx_ksys_write+0x10/0x10
[  581.036684][T14316]  do_syscall_64+0x14d/0xf80
[  581.036731][T14316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.036793][T14316]  ? clear_bhb_loop+0x40/0x90
[  581.036858][T14316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.036920][T14316] RIP: 0033:0x7f277fd9c799
[  581.036975][T14316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.037040][T14316] RSP: 002b:00007f2780bbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  581.037123][T14316] RAX: ffffffffffffffda RBX: 00007f2780015fa0 RCX: 00007f277fd9c799
[  581.037165][T14316] RDX: 0000000004048800 RSI: 0000200000000180 RDI: 0000000000000005
[  581.037199][T14316] RBP: 00007f2780bbc090 R08: 0000000000000000 R09: 0000000000000000
[  581.037238][T14316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  581.037270][T14316] R13: 00007f2780016038 R14: 00007f2780015fa0 R15: 00007ffea8270b58
[  581.037364][T14316]  </TASK>
[  581.181634][T14314] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2232'.
[  581.256087][T14062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.323372][T14317] netlink: 'syz.5.2232': attribute type 10 has an invalid length.
[  581.364505][T13956] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.399719][T13956] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.431539][T14239] wg1 speed is unknown, defaulting to 1000
[  581.493425][T14317] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  581.588327][T14058] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.597190][T14058] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.606091][T14058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.638313][T14061] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.717997][T14324] netlink: 'syz.0.2235': attribute type 2 has an invalid length.
[  581.735557][T14324] netlink: 'syz.0.2235': attribute type 2 has an invalid length.
[  581.953812][T14061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.966164][T14061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.011889][T14332] FAULT_INJECTION: forcing a failure.
[  582.011889][T14332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.040868][T14239] wg1 speed is unknown, defaulting to 1000
[  582.067083][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.5.2239 Not tainted syzkaller #0 PREEMPT(full) 
[  582.067114][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  582.067128][T14332] Call Trace:
[  582.067137][T14332]  <TASK>
[  582.067145][T14332]  dump_stack_lvl+0xe8/0x150
[  582.067179][T14332]  should_fail_ex+0x412/0x560
[  582.067220][T14332]  _copy_from_user+0x2d/0xb0
[  582.067255][T14332]  btf_new_fd+0x352/0xd10
[  582.067288][T14332]  ? __pfx_btf_new_fd+0x10/0x10
[  582.067316][T14332]  ? bpf_token_put+0x143/0x160
[  582.067341][T14332]  ? bpf_btf_load+0x126/0x190
[  582.067366][T14332]  __sys_bpf+0x4e5/0x950
[  582.067402][T14332]  ? __pfx___sys_bpf+0x10/0x10
[  582.067453][T14332]  ? ksys_write+0x242/0x270
[  582.067480][T14332]  ? __pfx_ksys_write+0x10/0x10
[  582.067512][T14332]  __x64_sys_bpf+0x7c/0x90
[  582.067543][T14332]  do_syscall_64+0x14d/0xf80
[  582.067561][T14332]  ? trace_irq_disable+0x3b/0x150
[  582.067591][T14332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.067612][T14332]  ? clear_bhb_loop+0x40/0x90
[  582.067638][T14332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.067659][T14332] RIP: 0033:0x7f88db99c799
[  582.067678][T14332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.067696][T14332] RSP: 002b:00007f88dc8e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  582.067719][T14332] RAX: ffffffffffffffda RBX: 00007f88dbc15fa0 RCX: 00007f88db99c799
[  582.067735][T14332] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012
[  582.067749][T14332] RBP: 00007f88dc8e5090 R08: 0000000000000000 R09: 0000000000000000
[  582.067762][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.067774][T14332] R13: 00007f88dbc16038 R14: 00007f88dbc15fa0 R15: 00007ffe245ea4e8
[  582.067807][T14332]  </TASK>
[  582.087143][T10632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.098215][T14338] netlink: 'syz.3.2238': attribute type 29 has an invalid length.
[  582.117578][T10632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.313675][T14339] netlink: 'syz.3.2238': attribute type 29 has an invalid length.
[  582.458271][T14338] debugfs: '1��^!�Y������
[  582.458271][T14338] 3�UH�5r��Bn���\d�Q�e' already exists in 'ieee80211'
[  582.906846][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2153'.
[  583.094151][T14239] wg1 speed is unknown, defaulting to 1000
[  583.183467][T14360] tap0: tun_chr_ioctl cmd 2147767506
[  583.244102][T14360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  583.296366][T14362] netlink: 'syz.6.2247': attribute type 5 has an invalid length.
[  583.736364][T14239] wg1 speed is unknown, defaulting to 1000
[  584.161147][T14393] netlink: 'syz.6.2255': attribute type 29 has an invalid length.
[  584.175366][T14393] netlink: 'syz.6.2255': attribute type 29 has an invalid length.
[  584.277313][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2254'.
[  584.328296][T14392] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2254'.
[  584.379901][T14397] debugfs: '1��^!�Y������
[  584.379901][T14397] 3�UH�5r��Bn���\d�Q�e' already exists in 'ieee80211'
[  584.884285][T14239] wg1 speed is unknown, defaulting to 1000
[  585.677438][T14239] wg1 speed is unknown, defaulting to 1000
[  586.040723][T14239] wg1 speed is unknown, defaulting to 1000
[  586.257153][T14408] FAULT_INJECTION: forcing a failure.
[  586.257153][T14408] name failslab, interval 1, probability 0, space 0, times 0
[  586.317260][T14408] CPU: 0 UID: 0 PID: 14408 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT(full) 
[  586.317294][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  586.317309][T14408] Call Trace:
[  586.317318][T14408]  <TASK>
[  586.317329][T14408]  dump_stack_lvl+0xe8/0x150
[  586.317366][T14408]  should_fail_ex+0x412/0x560
[  586.317401][T14408]  should_failslab+0xa8/0x100
[  586.317431][T14408]  __kvmalloc_node_noprof+0x178/0x8a0
[  586.317459][T14408]  ? bpf_test_run_xdp_live+0x223/0x1cf0
[  586.317492][T14408]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  586.317523][T14408]  bpf_test_run_xdp_live+0x223/0x1cf0
[  586.317561][T14408]  ? bpf_dispatcher_change_prog+0xae0/0xd70
[  586.317607][T14408]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  586.317641][T14408]  ? __pfx_autoremove_wake_function+0x10/0x10
[  586.317670][T14408]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  586.317724][T14408]  ? 0xffffffffa020379c
[  586.317787][T14408]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  586.317831][T14408]  ? _copy_from_user+0x94/0xb0
[  586.317865][T14408]  ? bpf_test_init+0x113/0x150
[  586.317891][T14408]  ? xdp_convert_md_to_buff+0x5b/0x330
[  586.317924][T14408]  bpf_prog_test_run_xdp+0x81c/0x1160
[  586.317970][T14408]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  586.318006][T14408]  ? __fget_files+0x2a/0x420
[  586.318043][T14408]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  586.318074][T14408]  bpf_prog_test_run+0x2c7/0x340
[  586.318101][T14408]  __sys_bpf+0x643/0x950
[  586.318137][T14408]  ? __pfx___sys_bpf+0x10/0x10
[  586.318186][T14408]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  586.318225][T14408]  ? ksys_write+0x242/0x270
[  586.318252][T14408]  ? __pfx_ksys_write+0x10/0x10
[  586.318284][T14408]  __x64_sys_bpf+0x7c/0x90
[  586.318316][T14408]  do_syscall_64+0x14d/0xf80
[  586.318336][T14408]  ? trace_irq_disable+0x3b/0x150
[  586.318367][T14408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.318390][T14408]  ? clear_bhb_loop+0x40/0x90
[  586.318417][T14408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.318440][T14408] RIP: 0033:0x7f277fd9c799
[  586.318459][T14408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.318479][T14408] RSP: 002b:00007f2780bbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  586.318503][T14408] RAX: ffffffffffffffda RBX: 00007f2780015fa0 RCX: 00007f277fd9c799
[  586.318520][T14408] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[  586.318534][T14408] RBP: 00007f2780bbc090 R08: 0000000000000000 R09: 0000000000000000
[  586.318549][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  586.318561][T14408] R13: 00007f2780016038 R14: 00007f2780015fa0 R15: 00007ffea8270b58
[  586.318590][T14408]  </TASK>
[  586.832746][T14423] netlink: 'syz.0.2265': attribute type 23 has an invalid length.
[  587.797565][T14435] syz.0.2267: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  587.960470][T14435] CPU: 0 UID: 0 PID: 14435 Comm: syz.0.2267 Not tainted syzkaller #0 PREEMPT(full) 
[  587.960507][T14435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  587.960524][T14435] Call Trace:
[  587.960534][T14435]  <TASK>
[  587.960546][T14435]  dump_stack_lvl+0xe8/0x150
[  587.960586][T14435]  warn_alloc+0x249/0x340
[  587.960616][T14435]  ? stack_trace_save+0xa9/0x100
[  587.960645][T14435]  ? __pfx_warn_alloc+0x10/0x10
[  587.960681][T14435]  ? kasan_save_track+0x4f/0x80
[  587.960704][T14435]  ? kasan_save_track+0x3e/0x80
[  587.960726][T14435]  ? __kasan_kmalloc+0x93/0xb0
[  587.960750][T14435]  ? __kmalloc_cache_noprof+0x31c/0x660
[  587.960775][T14435]  ? xskq_create+0x56/0x170
[  587.960807][T14435]  ? xsk_setsockopt+0x603/0x990
[  587.960835][T14435]  ? do_sock_setsockopt+0x17c/0x1b0
[  587.960869][T14435]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  587.960903][T14435]  ? do_syscall_64+0x14d/0xf80
[  587.960930][T14435]  __vmalloc_node_range_noprof+0x132/0x1730
[  587.960992][T14435]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  587.961026][T14435]  ? __kasan_kmalloc+0x93/0xb0
[  587.961066][T14435]  vmalloc_user_noprof+0xad/0xe0
[  587.961092][T14435]  ? xskq_create+0xbf/0x170
[  587.961126][T14435]  xskq_create+0xbf/0x170
[  587.961162][T14435]  xsk_init_queue+0x8a/0xe0
[  587.961197][T14435]  xsk_setsockopt+0x603/0x990
[  587.961231][T14435]  ? __pfx_xsk_setsockopt+0x10/0x10
[  587.961262][T14435]  ? __pfx_aa_sk_perm+0x10/0x10
[  587.961294][T14435]  ? __fget_files+0x2a/0x420
[  587.961326][T14435]  ? aa_sock_opt_perm+0xff/0x1a0
[  587.961361][T14435]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  587.961388][T14435]  ? __pfx_xsk_setsockopt+0x10/0x10
[  587.961420][T14435]  do_sock_setsockopt+0x17c/0x1b0
[  587.961462][T14435]  __x64_sys_setsockopt+0x13d/0x1b0
[  587.961503][T14435]  do_syscall_64+0x14d/0xf80
[  587.961525][T14435]  ? trace_irq_disable+0x3b/0x150
[  587.961559][T14435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.961582][T14435]  ? clear_bhb_loop+0x40/0x90
[  587.961610][T14435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.961633][T14435] RIP: 0033:0x7f277fd9c799
[  587.961656][T14435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.961676][T14435] RSP: 002b:00007f2780b7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  587.961702][T14435] RAX: ffffffffffffffda RBX: 00007f2780016180 RCX: 00007f277fd9c799
[  587.961719][T14435] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a
[  587.961732][T14435] RBP: 00007f277fe32bd9 R08: 0000000000000004 R09: 0000000000000000
[  587.961746][T14435] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  587.961760][T14435] R13: 00007f2780016218 R14: 00007f2780016180 R15: 00007ffea8270b58
[  587.961793][T14435]  </TASK>
[  587.961806][T14435] Mem-Info:
[  588.271021][T14435] active_anon:6227 inactive_anon:0 isolated_anon:0
[  588.271021][T14435]  active_file:21629 inactive_file:40183 isolated_file:0
[  588.271021][T14435]  unevictable:768 dirty:228 writeback:0
[  588.271021][T14435]  slab_reclaimable:12182 slab_unreclaimable:119459
[  588.271021][T14435]  mapped:30038 shmem:1362 pagetables:1373
[  588.271021][T14435]  sec_pagetables:0 bounce:0
[  588.271021][T14435]  kernel_misc_reclaimable:0
[  588.271021][T14435]  free:1285819 free_pcp:7291 free_cma:0
[  588.315867][T14436] netlink: 'syz.5.2269': attribute type 29 has an invalid length.
[  588.360443][T14435] Node 0 active_anon:24880kB inactive_anon:0kB active_file:86516kB inactive_file:160528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120088kB dirty:908kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14132kB pagetables:5020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  588.452392][T14437] netlink: 'syz.5.2269': attribute type 29 has an invalid length.
[  588.507814][T14435] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  588.595628][T14437] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  588.595628][T14437] 3�UH�5r��Bn���\d�Q�e'
[  588.612560][T14435] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  588.661530][T14437] CPU: 1 UID: 0 PID: 14437 Comm: syz.5.2269 Not tainted syzkaller #0 PREEMPT(full) 
[  588.661566][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  588.661582][T14437] Call Trace:
[  588.661592][T14437]  <TASK>
[  588.661604][T14437]  dump_stack_lvl+0xe8/0x150
[  588.661646][T14437]  sysfs_warn_dup+0x8e/0xa0
[  588.661681][T14437]  sysfs_do_create_link_sd+0xc0/0x110
[  588.661719][T14437]  device_add_class_symlinks+0x1cf/0x240
[  588.661752][T14437]  device_add+0x475/0xb70
[  588.661794][T14437]  wiphy_register+0x1d73/0x2d50
[  588.661851][T14437]  ? __pfx_wiphy_register+0x10/0x10
[  588.661884][T14437]  ? __pfx_netdev_run_todo+0x10/0x10
[  588.661910][T14437]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  588.661948][T14437]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  588.661991][T14437]  ieee80211_register_hw+0x3562/0x4200
[  588.662035][T14437]  ? ieee80211_register_hw+0x14f1/0x4200
[  588.662074][T14437]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  588.662125][T14437]  ? __hrtimer_setup+0x181/0x200
[  588.662157][T14437]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  588.662192][T14437]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  588.662263][T14437]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  588.662288][T14437]  ? kstrndup+0xbf/0x160
[  588.662334][T14437]  hwsim_new_radio_nl+0xf35/0x1bd0
[  588.662393][T14437]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  588.662435][T14437]  ? rcu_is_watching+0x15/0xb0
[  588.662470][T14437]  ? trace_kmalloc+0x2a/0x110
[  588.662506][T14437]  ? __nla_parse+0x40/0x60
[  588.662547][T14437]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  588.662587][T14437]  genl_family_rcv_msg_doit+0x22a/0x330
[  588.662621][T14437]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  588.662666][T14437]  ? bpf_lsm_capable+0x9/0x20
[  588.662698][T14437]  ? security_capable+0x7e/0x2c0
[  588.662739][T14437]  genl_rcv_msg+0x61c/0x7a0
[  588.662783][T14437]  ? __pfx_genl_rcv_msg+0x10/0x10
[  588.662809][T14437]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  588.662836][T14437]  ? __lock_acquire+0x6b5/0x2cf0
[  588.662886][T14437]  netlink_rcv_skb+0x232/0x4b0
[  588.662921][T14437]  ? __pfx_genl_rcv_msg+0x10/0x10
[  588.662949][T14437]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  588.663008][T14437]  ? down_read+0x272/0x2e0
[  588.663032][T14437]  ? genl_rcv+0xd/0x40
[  588.663058][T14437]  genl_rcv+0x28/0x40
[  588.663079][T14437]  netlink_unicast+0x80f/0x9b0
[  588.663121][T14437]  ? __pfx_netlink_unicast+0x10/0x10
[  588.663154][T14437]  ? netlink_sendmsg+0x650/0xb40
[  588.663184][T14437]  ? skb_put+0x11b/0x210
[  588.663225][T14437]  netlink_sendmsg+0x813/0xb40
[  588.663273][T14437]  ? __pfx_netlink_sendmsg+0x10/0x10
[  588.663312][T14437]  ? aa_sock_msg_perm+0xf1/0x1b0
[  588.663346][T14437]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  588.663380][T14437]  ____sys_sendmsg+0x972/0x9f0
[  588.663403][T14437]  ? __pfx_perf_trace_lock+0x10/0x10
[  588.663447][T14437]  ? __pfx_____sys_sendmsg+0x10/0x10
[  588.663485][T14437]  ? import_iovec+0x73/0xa0
[  588.663528][T14437]  ___sys_sendmsg+0x2a5/0x360
[  588.663561][T14437]  ? __pfx____sys_sendmsg+0x10/0x10
[  588.663592][T14437]  ? trace_call_bpf+0xc2/0xb70
[  588.663643][T14437]  ? __fget_files+0x2a/0x420
[  588.663695][T14437]  ? __fget_files+0x2a/0x420
[  588.663729][T14437]  ? __fget_files+0x3a0/0x420
[  588.663786][T14437]  __x64_sys_sendmsg+0x1bd/0x2a0
[  588.663814][T14437]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  588.663834][T14437]  ? perf_trace_preemptirq_template+0xb2/0x350
[  588.663881][T14437]  ? rcu_is_watching+0x15/0xb0
[  588.663930][T14437]  do_syscall_64+0x14d/0xf80
[  588.663950][T14437]  ? trace_irq_disable+0x3b/0x150
[  588.663980][T14437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.664002][T14437]  ? clear_bhb_loop+0x40/0x90
[  588.664031][T14437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.664056][T14437] RIP: 0033:0x7f88db99c799
[  588.664080][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.664100][T14437] RSP: 002b:00007f88dc8c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.664125][T14437] RAX: ffffffffffffffda RBX: 00007f88dbc16090 RCX: 00007f88db99c799
[  588.664143][T14437] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  588.664158][T14437] RBP: 00007f88dba32bd9 R08: 0000000000000000 R09: 0000000000000000
[  588.664173][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.664187][T14437] R13: 00007f88dbc16128 R14: 00007f88dbc16090 R15: 00007ffe245ea4e8
[  588.664232][T14437]  </TASK>
[  589.192586][T14435] lowmem_reserve[]: 0 2492 2493 2493 2493
[  589.200248][T14435] Node 0 DMA32 free:1183140kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25432kB inactive_anon:0kB active_file:86516kB inactive_file:160528kB unevictable:1536kB writepending:908kB zspages:0kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:26980kB local_pcp:14540kB free_cma:0kB
[  589.235691][T14435] lowmem_reserve[]: 0 0 0 0 0
[  589.240846][T14435] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  589.271039][T14435] lowmem_reserve[]: 0 0 0 0 0
[  589.276020][T14435] Node 1 Normal free:3944456kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  589.310210][T14435] lowmem_reserve[]: 0 0 0 0 0
[  589.315285][T14435] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  589.328347][T14435] Node 0 DMA32: 2373*4kB (UM) 5194*8kB (UM) 2200*16kB (UME) 1092*32kB (UME) 431*64kB (UME) 273*128kB (UME) 322*256kB (UME) 185*512kB (UME) 127*1024kB (UM) 58*2048kB (UME) 140*4096kB (M) = 1183140kB
[  589.348417][T14435] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  589.360341][T14435] Node 1 Normal: 8*4kB (UM) 15*8kB (UM) 11*16kB (UM) 10*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 961*4096kB (M) = 3944456kB
[  589.378790][T14435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  589.389236][T14435] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  589.398889][T14435] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  589.410518][T14435] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  589.420236][T14435] 63170 total pagecache pages
[  589.425255][T14435] 0 pages in swap cache
[  589.429531][T14435] Free swap  = 124996kB
[  589.433720][T14435] Total swap = 124996kB
[  589.437975][T14435] 2097051 pages RAM
[  589.441847][T14435] 0 pages HighMem/MovableOnly
[  589.446668][T14435] 427022 pages reserved
[  589.451908][T14435] 0 pages cma reserved
[  590.389622][T14475] syzkaller0: entered promiscuous mode
[  590.395196][T14475] syzkaller0: entered allmulticast mode
[  590.869919][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'.
[  590.879839][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2286'.
[  590.913864][T14500] netlink: 'syz.0.2285': attribute type 6 has an invalid length.
[  590.994513][ T5844] Bluetooth: hci0: Dropping invalid advertising data
[  591.001963][ T5844] Bluetooth: hci0: unknown advertising packet type: 0xdc
[  591.001995][ T5844] Bluetooth: hci0: Malformed LE Event: 0x02
[  591.446694][T14512] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2289'.
[  593.213178][ T1719] block nbd3: Possible stuck request ffff888026d98000: control (read@0,4096B). Runtime 60 seconds
[  593.413213][T14512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  593.517505][T14512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  593.585496][T14512] bond0 (unregistering): Released all slaves
[  594.170510][T14566] macvlan1: entered promiscuous mode
[  594.181436][T14566] macvlan1: entered allmulticast mode
[  594.187599][T14566] veth1_vlan: entered allmulticast mode
[  594.299803][T14571] bond0: entered promiscuous mode
[  594.324681][T14571] bond_slave_0: entered promiscuous mode
[  594.351135][T14571] bond_slave_1: entered promiscuous mode
[  595.713114][T14607] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2316'.
[  596.055341][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2317'.
[  597.309864][T14663] netlink: 'syz.0.2328': attribute type 12 has an invalid length.
[  597.325383][T14663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2328'.
[  597.720565][T14672] siw: device registration error -23
[  599.020285][T14689] syzkaller0: entered promiscuous mode
[  599.028024][T14689] syzkaller0: entered allmulticast mode
[  599.270849][T14702] netlink: 'syz.5.2341': attribute type 11 has an invalid length.
[  600.795525][T14730] netlink: 'syz.6.2350': attribute type 10 has an invalid length.
[  601.953200][T14725] veth0_vlan: entered allmulticast mode
[  601.975391][T14726] veth0_vlan: left promiscuous mode
[  601.989069][T14726] veth0_vlan: entered promiscuous mode
[  602.039381][T14730] team0: Port device syz_tun added
[  604.627596][T14739] mac80211_hwsim hwsim66 wlan1: left promiscuous mode
[  605.878441][T14790] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2369'.
[  606.005078][T14787] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2369'.
[  607.085525][T14812] netlink: 'syz.1.2377': attribute type 33 has an invalid length.
[  607.093733][T14812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2377'.
[  607.145400][T14817] netlink: 'syz.0.2380': attribute type 10 has an invalid length.
[  607.397263][T14820] lo speed is unknown, defaulting to 1000
[  607.413926][T14820] wg1 speed is unknown, defaulting to 1000
[  607.430165][T14828] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2383'.
[  607.479665][T14828] ksmbd: Unknown IPC event: 1, ignore.
[  608.335639][T14851] netlink: 'syz.6.2392': attribute type 21 has an invalid length.
[  608.377748][T14851] netlink: 'syz.6.2392': attribute type 10 has an invalid length.
[  608.385646][T14851] netlink: 'syz.6.2392': attribute type 10 has an invalid length.
[  608.430007][T14851] netlink: 'syz.6.2392': attribute type 11 has an invalid length.
[  608.448606][T14851] netlink: 'syz.6.2392': attribute type 12 has an invalid length.
[  608.456593][T14851] netlink: 'syz.6.2392': attribute type 13 has an invalid length.
[  608.476525][T14851] netlink: 'syz.6.2392': attribute type 14 has an invalid length.
[  608.484907][T14851] netlink: 'syz.6.2392': attribute type 15 has an invalid length.
[  608.572815][ T1719] block nbd2: Possible stuck request ffff888026cf8000: control (read@0,4096B). Runtime 150 seconds
[  610.769924][T14864] wg2: entered promiscuous mode
[  610.774882][T14864] wg2: entered allmulticast mode
[  611.063264][T14876] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2399'.
[  611.473102][ T5915] lo speed is unknown, defaulting to 1000
[  612.517752][T14909] validate_nla: 5 callbacks suppressed
[  612.517796][T14909] netlink: 'syz.5.2415': attribute type 2 has an invalid length.
[  612.556371][T14909] netlink: 'syz.5.2415': attribute type 8 has an invalid length.
[  612.617036][T14909] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2415'.
[  612.916113][T14927] syzkaller0: entered promiscuous mode
[  612.956936][T14927] syzkaller0: entered allmulticast mode
[  613.312604][T14947] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  613.337054][T14946] bond_slave_1: entered promiscuous mode
[  613.342926][T14946] bond_slave_1: entered allmulticast mode
[  613.577973][T14959] ------------[ cut here ]------------
[  613.584173][T14959] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000)
[  613.609186][T14959] WARNING: kernel/bpf/verifier.c:2844 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.6.2439/14959
[  613.620678][T14959] Modules linked in:
[  613.624877][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.6.2439 Not tainted syzkaller #0 PREEMPT(full) 
[  613.634400][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  613.644915][T14959] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  613.654175][T14959] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  613.678172][T14959] RSP: 0018:ffffc90012dbeeb0 EFLAGS: 00010246
[  613.684468][T14959] RAX: dffffc0000000000 RBX: 1ffff1100b36584a RCX: 00000000ffffdfcd
[  613.699784][T14959] RDX: ffffffff8bd47240 RSI: ffffffff8bd4fb40 RDI: ffffffff90159300
[  613.708064][T14959] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  613.716564][T14959] R10: ffff888059b2c358 R11: 1ffff1100b365850 R12: ffff888059b2c250
[  613.724885][T14959] R13: 00000000ffffdfcd R14: 1ffff1100b365849 R15: 00000000ffffdfcc
[  613.733450][T14959] FS:  00007f2167cf96c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000
[  613.742659][T14959] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  613.749552][T14959] CR2: 0000200000001000 CR3: 00000000261ae000 CR4: 00000000003526f0
[  613.758140][T14959] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000
[  613.766442][T14959] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  613.779259][T14959] Call Trace:
[  613.782882][T14959]  <TASK>
[  613.786487][T14959]  reg_set_min_max+0x264/0x340
[  613.791945][T14959]  check_cond_jmp_op+0x1dbb/0x31a0
[  613.797459][T14959]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  613.803168][T14959]  ? kfree+0x1c1/0x630
[  613.807458][T14959]  ? do_check+0x62ee/0x105f0
[  613.812224][T14959]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  613.818737][T14959]  do_check+0x7938/0x105f0
[  613.823462][T14959]  ? irqentry_exit+0x59e/0x620
[  613.829005][T14959]  ? __pfx_do_check+0x10/0x10
[  613.834103][T14959]  ? init_func_state+0x1ad5/0x2910
[  613.839704][T14959]  do_check_common+0x1a21/0x2600
[  613.844841][T14959]  bpf_check+0x5f3e/0x1ce00
[  613.849965][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  613.855077][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  613.860346][T14959]  ? __mutex_trylock_common+0x158/0x260
[  613.866096][T14959]  ? __pfx___mutex_trylock_common+0x10/0x10
[  613.872277][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  613.881244][T14959]  ? css_rstat_updated+0x23a/0x530
[  613.886610][T14959]  ? __pfx_css_rstat_updated+0x10/0x10
[  613.892384][T14959]  ? pcpu_alloc_noprof+0xe8f/0x19c0
[  613.897948][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  613.903073][T14959]  ? __pfx_bpf_check+0x10/0x10
[  613.908105][T14959]  ? lockdep_hardirqs_on+0x7a/0x110
[  613.913688][T14959]  ? irqentry_exit+0x59e/0x620
[  613.919131][T14959]  ? trace_irq_disable+0x3b/0x150
[  613.925045][T14959]  ? ktime_get_with_offset+0x93/0x2a0
[  613.931917][T14959]  ? ktime_get_with_offset+0x93/0x2a0
[  613.938022][T14959]  ? __asan_memset+0x22/0x50
[  613.943322][T14959]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  613.949526][T14959]  ? security_bpf_prog_load+0x125/0x3c0
[  613.956154][T14959]  bpf_prog_load+0x1484/0x1ae0
[  613.962167][T14959]  ? __pfx_bpf_prog_load+0x10/0x10
[  613.968111][T14959]  ? futex_wait+0x29a/0x380
[  613.973305][T14959]  ? bpf_lsm_bpf+0x9/0x20
[  613.981848][T14959]  ? security_bpf+0x7e/0x2d0
[  613.987173][T14959]  __sys_bpf+0x618/0x950
[  613.991752][T14959]  ? __pfx___sys_bpf+0x10/0x10
[  613.997949][T14959]  __x64_sys_bpf+0x7c/0x90
[  614.003580][T14959]  do_syscall_64+0x14d/0xf80
[  614.012645][T14959]  ? trace_irq_disable+0x3b/0x150
[  614.018992][T14959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.025599][T14959]  ? clear_bhb_loop+0x40/0x90
[  614.030564][T14959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.036698][T14959] RIP: 0033:0x7f2166d9c799
[  614.041567][T14959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.062200][T14959] RSP: 002b:00007f2167cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.071286][T14959] RAX: ffffffffffffffda RBX: 00007f2167015fa0 RCX: 00007f2166d9c799
[  614.082796][T14959] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  614.092472][T14959] RBP: 00007f2166e32bd9 R08: 0000000000000000 R09: 0000000000000000
[  614.101948][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.111730][T14959] R13: 00007f2167016038 R14: 00007f2167015fa0 R15: 00007ffd2a3860f8
[  614.120909][T14959]  </TASK>
[  614.124206][T14959] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  614.132455][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.6.2439 Not tainted syzkaller #0 PREEMPT(full) 
[  614.142579][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  614.153401][T14959] Call Trace:
[  614.157049][T14959]  <TASK>
[  614.160029][T14959]  vpanic+0x56c/0xa60
[  614.164244][T14959]  ? __pfx_vpanic+0x10/0x10
[  614.169377][T14959]  ? lockdep_hardirqs_on+0x7a/0x110
[  614.175116][T14959]  ? irqentry_exit+0x59e/0x620
[  614.180057][T14959]  ? trace_irq_disable+0x3b/0x150
[  614.185641][T14959]  panic+0xc5/0xd0
[  614.189576][T14959]  ? __pfx_panic+0x10/0x10
[  614.194532][T14959]  ? __warn+0x2fd/0x4f0
[  614.198982][T14959]  __warn+0x315/0x4f0
[  614.203572][T14959]  ? reg_bounds_sanity_check+0x201/0xc30
[  614.209351][T14959]  ? reg_bounds_sanity_check+0x201/0xc30
[  614.215407][T14959]  __report_bug+0x29a/0x540
[  614.220536][T14959]  ? reg_bounds_sanity_check+0x201/0xc30
[  614.226558][T14959]  ? __pfx___report_bug+0x10/0x10
[  614.231888][T14959]  ? reg_bounds_sanity_check+0x3eb/0xc30
[  614.237694][T14959]  ? reg_bounds_sanity_check+0x3e6/0xc30
[  614.243695][T14959]  ? pt_regs_val+0xc/0x70
[  614.248258][T14959]  report_bug_entry+0x19a/0x290
[  614.253301][T14959]  ? reg_bounds_sanity_check+0x3e6/0xc30
[  614.259284][T14959]  ? reg_bounds_sanity_check+0x3eb/0xc30
[  614.265258][T14959]  handle_bug+0xce/0x200
[  614.269567][T14959]  exc_invalid_op+0x1a/0x50
[  614.274312][T14959]  asm_exc_invalid_op+0x1a/0x20
[  614.279521][T14959] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30
[  614.286028][T14959] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84
[  614.306217][T14959] RSP: 0018:ffffc90012dbeeb0 EFLAGS: 00010246
[  614.312614][T14959] RAX: dffffc0000000000 RBX: 1ffff1100b36584a RCX: 00000000ffffdfcd
[  614.320992][T14959] RDX: ffffffff8bd47240 RSI: ffffffff8bd4fb40 RDI: ffffffff90159300
[  614.329246][T14959] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd
[  614.337625][T14959] R10: ffff888059b2c358 R11: 1ffff1100b365850 R12: ffff888059b2c250
[  614.346432][T14959] R13: 00000000ffffdfcd R14: 1ffff1100b365849 R15: 00000000ffffdfcc
[  614.354999][T14959]  reg_set_min_max+0x264/0x340
[  614.360416][T14959]  check_cond_jmp_op+0x1dbb/0x31a0
[  614.365793][T14959]  ? __pfx_check_cond_jmp_op+0x10/0x10
[  614.371514][T14959]  ? kfree+0x1c1/0x630
[  614.375733][T14959]  ? do_check+0x62ee/0x105f0
[  614.380643][T14959]  ? bpf_reset_stack_write_marks+0x1eb/0x260
[  614.387036][T14959]  do_check+0x7938/0x105f0
[  614.391769][T14959]  ? irqentry_exit+0x59e/0x620
[  614.396882][T14959]  ? __pfx_do_check+0x10/0x10
[  614.401842][T14959]  ? init_func_state+0x1ad5/0x2910
[  614.407197][T14959]  do_check_common+0x1a21/0x2600
[  614.412187][T14959]  bpf_check+0x5f3e/0x1ce00
[  614.416740][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  614.421898][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  614.427191][T14959]  ? __mutex_trylock_common+0x158/0x260
[  614.433279][T14959]  ? __pfx___mutex_trylock_common+0x10/0x10
[  614.440339][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  614.446519][T14959]  ? css_rstat_updated+0x23a/0x530
[  614.451860][T14959]  ? __pfx_css_rstat_updated+0x10/0x10
[  614.457732][T14959]  ? pcpu_alloc_noprof+0xe8f/0x19c0
[  614.463270][T14959]  ? __lock_acquire+0x6b5/0x2cf0
[  614.468398][T14959]  ? __pfx_bpf_check+0x10/0x10
[  614.473760][T14959]  ? lockdep_hardirqs_on+0x7a/0x110
[  614.479188][T14959]  ? irqentry_exit+0x59e/0x620
[  614.484026][T14959]  ? trace_irq_disable+0x3b/0x150
[  614.489129][T14959]  ? ktime_get_with_offset+0x93/0x2a0
[  614.494554][T14959]  ? ktime_get_with_offset+0x93/0x2a0
[  614.500251][T14959]  ? __asan_memset+0x22/0x50
[  614.505030][T14959]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  614.510396][T14959]  ? security_bpf_prog_load+0x125/0x3c0
[  614.515987][T14959]  bpf_prog_load+0x1484/0x1ae0
[  614.521095][T14959]  ? __pfx_bpf_prog_load+0x10/0x10
[  614.526340][T14959]  ? futex_wait+0x29a/0x380
[  614.530927][T14959]  ? bpf_lsm_bpf+0x9/0x20
[  614.535675][T14959]  ? security_bpf+0x7e/0x2d0
[  614.540483][T14959]  __sys_bpf+0x618/0x950
[  614.546046][T14959]  ? __pfx___sys_bpf+0x10/0x10
[  614.551253][T14959]  __x64_sys_bpf+0x7c/0x90
[  614.556527][T14959]  do_syscall_64+0x14d/0xf80
[  614.561372][T14959]  ? trace_irq_disable+0x3b/0x150
[  614.566745][T14959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.573457][T14959]  ? clear_bhb_loop+0x40/0x90
[  614.578495][T14959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.584739][T14959] RIP: 0033:0x7f2166d9c799
[  614.589563][T14959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.609798][T14959] RSP: 002b:00007f2167cf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  614.618814][T14959] RAX: ffffffffffffffda RBX: 00007f2167015fa0 RCX: 00007f2166d9c799
[  614.627540][T14959] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  614.636020][T14959] RBP: 00007f2166e32bd9 R08: 0000000000000000 R09: 0000000000000000
[  614.644528][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  614.653082][T14959] R13: 00007f2167016038 R14: 00007f2167015fa0 R15: 00007ffd2a3860f8
[  614.661464][T14959]  </TASK>
[  614.665270][T14959] Kernel Offset: disabled
[  614.669650][T14959] Rebooting in 86400 seconds..