last executing test programs:

5.283831871s ago: executing program 2 (id=3793):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = gettid()
sendmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x38, 0x800}, 0x40800)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
gettid()
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

4.854061995s ago: executing program 2 (id=3798):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0xe391e4aa703794f6, 0x5, 0x43a5bd72, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000000000a5f4fe5bf070d9cc80f37cd5acf87f5401ac1ff06b4ea71d1dff520e336f7e83a19c1d9ab164c4f603f9c722e30bdd7223", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000001300)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x1, @remote, 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)="7e50ad76cccbee03a4bd8da085f1f9e1696c390d596a10e25839e0d94818674f069dd677f8972d672aa0cb4c837381b6612ffad4179e6c5e2469aa0bb60c230af567a521615a8792d0802d8876423ae5c2327c1e76a72e63acc2dca6584cdfd88081b9951b173ec5da866637af4ffc8bd801c80b0ab0b45460cc4244247b5a3d96c9075a51e791dab6342ed5ee3870156bde41ea9d51579266037683ae413da130a249056f1d4e6cad5d5a68117dcd784b1ac68c956c1c0c683c364dba1f1ccbf0360cdae5c197bd561a2964499248c7a4053a864a7b783b08a9a8a875848ca2f4e771a8", 0xe4}, {&(0x7f0000000940)="c80e40ab95022f73e4ce4934b1215100e94db5c994e2966d89f5e88fa3a24a24fe5539de8469da78c96cd4409e1c155e5d323516b6a3ce588f0c2aac34b28d6b200026e74f65663e205ffdbabb215b8fc58e046a1d15347dc873d9c7c91db63104ed93ca2761798ab73c4cfcce2a8827ac4c9d6cb50a5e5f1ad1ca3f44db5b02d9ee716af70b9d361d0f14bdc0b5c616241005d8984464aebc7ab24ccad8ebdd9b949de0575888bb6e40ec", 0xab}, {&(0x7f0000000a00)="033caa3f7ecf587e7077b2456625f2681490ce99d27de2662200dd33301bb24dcad1a104b364af65b6e07d978ac7aeaad9cc36b6fd7e531bdc5dcaf2548eded6639d1cfc71e7ddedcc1d13c81933b45898e9cdef77db504b4f2ab1a14fd8e282a5a09e45e3eca31556312004bffa5652b1fb02a430e83813663709a79099f468994d1dc6771de99ae1039adcdb7a9f8380520f403d1389d9aef9e6881867cb7752aa1085d0f73d0320d4c43bbce0abb705421916dd5deabd466e8b59180c8099d02c3ce7f430c03dfa5d0908eac2c999188ccb69d93ef2a70440c8860ad798aeeb3e5a12ce4bb21073ec3dbbe58cb557e22e41c4db515c0cc5", 0xf9}, {&(0x7f0000000b00)="74876468454901043ea896647c92b0d6e60e726b80960c2a6c07459ab85639e4c1859c9a97783d907679d52e46fa805fecc536c98b90ac276aea14ff6142b97e6096d25f5e2e2c02f842a2ce751af393f9aedfc5683e54512b47d5165de288f20903d006b02b4fd065fb899188f15a54ea5448ffd1124efca04cfe20e2cf7c3aca4c90c36ebd633fda7da25730322740b36b7fb60057a438efdc667ce2a8a89f1662c51afcbb5ab9e8e6880d6651eecef9c141eb221ab8513165f96c7705a30e6f6d01fdb7ee8fcedf723f802ad06474e8bcaecbbecf8275c5789a9bb6c4c9dd4989dfdef875be01808fe1c0", 0xec}], 0x4, &(0x7f0000001000)=[{0x110, 0x10f, 0x3, "1eb0194e944c3a76a1ad11e7a8bd462ff867908a8e8feab43ea41a99493694cf650a0fee34cffcd2b438fb932ce2aa972212a4fad22704230560f89c7066affb6e8573656309951cad7bfde0afa0b1ff032f78ad1ebc6bca2b6fbd3cf9c2c9e3509a2a8ae45ae0a40aa7e301127dd32083c5458d1028ef18fc6be5967fc5224e4761ab9166248b6f9ca212d1721601604fb1b4015f67070179f66a8fa57461bd2e997fb5fa247bce9141e2531d53161fcdc93399f671c1d2cbbb5e04c9abd2943832d83717f23ea6dc43e68cc1609c3ed57a509d97096208c5c0b2f8ba93bfb71785a5b73477f40ddc254719db95f992af137b9e50a0a557e8"}, {0xd0, 0x119, 0xfffffff7, "e61b655bfeb6dcd02a920f783621d0ee13cf081b2259b35301be9aa319b6adff15e7a8f635d77547d5302bc58fa3056df83cbabf9b4e51875f96bbe889c916e4c35932dcbcb44c37f78235faae7ef960a21fef21d2055e2b21747b025b10f494bd0b31f22e94b4073efe007279b416bd3bba40ef1676277a0d3de9db661e7d9bc7f5ea74b596025dd3103b9c2476a7a512c51151a6662da27d9981ec744f13f7bbddc89ed4d85498bba76da35ffc0f99a88d1e29ae57aa20a76e"}, {0xe8, 0x6, 0xf, "6c89539a11cd1dcabbc9926cdc93eedb14f8dbbd00e83cf55c201ad1d3ae99882f705cf96d3d596fb5d8df742b608d92269ebe1385d5f92bf52446f0b7081c03091b8cc19ee29d17cfe1a9b415269ce9d9f7897bc37571a398d591213f761c1f11a2e3d09e0de29ae07e6389d064a4009644c94bf6a35f2a5ac936d586439e7a46c64560164bc94ac9a931b68c7166e2ce5876787c54aac7cd8dacdd9591cfe3ec06e867a37469ec9a8223a8bf6f97492efd3dd2cd657c89a34a8c388cf5271109545cb7d40bed0b1850c3cb18f0d5ae33"}], 0x2c8}, 0x20000000)
sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sendmsg(r4, 0x0, 0x40001)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
recvmsg$kcm(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/231, 0xe7}, 0x100)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000100000500"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa}, 0x28)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18101410000001f010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
socketpair(0x8, 0x2, 0x10, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.273100543s ago: executing program 2 (id=3803):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x7e3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

2.641729555s ago: executing program 2 (id=3808):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0009007ea60864160af36514001ac004000202080002000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed76ade70bd7647d191e1e2c914023ff8454b72b9b", 0x71}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

2.449735801s ago: executing program 0 (id=3811):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 64)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x0, 0x4, 0x0, 0x3, 0xc2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x12}, 0x2, 0x100000000, 0x6, 0x7, 0x9, 0x25, 0x7, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x9a, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x2e, 0x2e, 0x5f, 0x2e, 0x30, 0x30]}}, &(0x7f0000000700)=""/4096, 0x31, 0x1000}, 0x28) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x5, '\x00', 0x0, r1, 0x1, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x5, 0xc1, &(0x7f00000005c0)=""/193, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001740)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0xa, 0x5}, 0x10, 0x1a64b, r1, 0x5, &(0x7f0000001840)=[r1, r5, r1], &(0x7f0000001880)=[{0x5, 0x5, 0x9, 0x1}, {0x4, 0x1, 0x1, 0x4}, {0x4, 0x2, 0xf}, {0x0, 0x2, 0xb, 0xa}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x7f}, 0x94) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext, 0x100540, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x110010, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (rerun: 64)

2.438598192s ago: executing program 2 (id=3812):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100))
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x5, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
gettid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c"], 0x0, 0x6, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.116886142s ago: executing program 0 (id=3813):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x8000032, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c030002180000053582c137153e370248", 0x26}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66ff", 0x0, 0x8104, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0, 0x52, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0)

1.518706901s ago: executing program 3 (id=3817):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffbff}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8001}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_fd, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffd95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x7ff, 0x7f, &(0x7f0000000180)=""/127, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x2, 0x0, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1], &(0x7f00000002c0)=[{0x2, 0x5, 0x4, 0xa}, {0x1, 0x4, 0x8, 0xb}, {0x4, 0x3, 0xf, 0x1}, {0x1, 0x2, 0x2, 0xc}], 0x10, 0x5}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x23, &(0x7f00000003c0)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @generic={0x2, 0x9, 0x2, 0xd8, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x39}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x39}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0x2, 0xe, &(0x7f0000000540)=""/14, 0x40f00, 0x44, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xe, 0x1, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000600)=[{0x0, 0x1, 0xa, 0x4}, {0x2, 0x5, 0x4, 0xc}, {0x5, 0x1, 0x2, 0x3}], 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex=<r4=>0x0, 0x32, 0x0, 0x100, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r5=>0x0}, 0x40) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%+9llu \x00'}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r6, r2, 0xb, 0xd, r3, @void, @value, @void, @void, r5}, 0x20)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000980)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@ifindex=r4, r3, 0x16, 0x2000, r3, @value=r7}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz1\x00', 0x1ff) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000a40)='%+9llu \x00', <r8=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@cgroup=r0, r3, 0x1a, 0x34, r2, @void, @void, @void, @value=r8, r5}, 0x20) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x8, 0x0, r6, 0x3ff, '\x00', r4, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r3, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0x78, &(0x7f0000000dc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001080)={{r6, <r12=>0xffffffffffffffff}, &(0x7f0000001000), &(0x7f0000001040)='%pK    \x00'}, 0x20) (async)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @alu={0x4, 0x0, 0x2, 0xa, 0x1, 0xc, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='syzkaller\x00', 0xb, 0x1a, &(0x7f0000000c40)=""/26, 0x0, 0x20, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r11, 0x0, 0x2, &(0x7f0000001140)=[r6, r6, r6, r7, r6, r12, r13], &(0x7f0000001180)=[{0x5, 0x1, 0xf, 0x5}, {0x4, 0x2, 0xf}], 0x10, 0x40}, 0x94) (async)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x2c800, 0x0)
ioctl$TUNSETQUEUE(r14, 0x400454d9, &(0x7f00000012c0)={'wlan0\x00', 0x100})
openat$ppp(0xffffffffffffff9c, &(0x7f0000001300), 0x100, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000014c0)={r12, &(0x7f0000001340)="a8f92032d828b3e22f55143ccb74c600687ce33009ce072c5dd5029b7b60248ac227099a465cd75199749b3d5dc742ac68d0c3dea72b277882ac655e2093db5a46af06f0", &(0x7f00000013c0)=""/203}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000025c0)={r9, &(0x7f0000001500)="ed3f830ca2a037db3b6067a286498a1605318a7b077647cf8fa9d668a0c5808c0aab0c34d30d91cc280bea1d4dbd65a9f6eeb74f85c76f38dc20d31eab72e4bb4b0afb1f3eac3c914ed74e7fe3d2902ca5dffa3c7eb58f129ba7b85c393bb683efabedf9965ba333802b219a8f4274ea5eb141c9176bb6c735c1cdc5df33d0861b8635240c1efcdae02b1ceeb32c10b7d67130f283bed3d293d6593cf59ae343a8b4583f88a76ca268e1c38f71945f19", &(0x7f00000015c0)=""/4096}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000036c0)={0xffffffffffffffff, &(0x7f0000002600)="510892009914db84ad7d91f10efa3cdce438b2df551a54c64439d1582e37b85f688c7c3f01b2223533070250a1a58889b2b56957bda665186f540a2ef014cba4bf18836ff974b4a03854bc9745314373dab6642b3504137cfb5cf42cbf4d55f32a7c349316ca430110f4f14d09ac2d59ce465b8a6adafc44e55d20836f1924480f680046c7d0d1f8a123403160a621fc47c96c01a891e196ac8738a2f2f291b2f3c93657a4e28f9807fc70", &(0x7f00000026c0)=""/4096, 0x4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003780)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000003700), &(0x7f0000003740)=r3}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003a80)={0x1, 0x58, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r16=>0x0}}, 0x10) (async)
r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003b80)={&(0x7f0000003ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@struct={0x5, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xe, 0x0, 0x80000001}, {0x9, 0x4, 0x6}, {0x6, 0x4, 0x3}, {0xd, 0x1, 0x6c0}]}]}, {0x0, [0x0]}}, &(0x7f0000003b40)=""/58, 0x57, 0x3a, 0x0, 0xa}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003c40)=@bpf_ext={0x1c, 0x2e, &(0x7f00000037c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @call={0x85, 0x0, 0x0, 0xab}, @ldst={0x1, 0x3, 0x2, 0x6, 0x3, 0x8, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x2, 0x0, 0x4, 0xa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000003940)='GPL\x00', 0x3, 0x45, &(0x7f0000003980)=""/69, 0x41000, 0x7c, '\x00', r16, 0x0, r17, 0x8, &(0x7f0000003bc0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x8d05, r3, 0x3, 0x0, &(0x7f0000003c00)=[{0x3, 0x4, 0xe, 0x6}, {0x5, 0x3, 0xb, 0x3}, {0x0, 0x5, 0x1}], 0x10, 0x10001}, 0x94) (async)
write$cgroup_netprio_ifpriomap(r7, &(0x7f0000003d00)={'bond_slave_1', 0x32, 0x38}, 0xf) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003d40)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x5, '\x00', r10, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003dc0)={@fallback, r3, 0x4, 0x2030, 0x0, @void, @void, @value, @void, r5}, 0x20)

1.289306029s ago: executing program 3 (id=3819):
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4000, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x1000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980), 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x10)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

1.142078413s ago: executing program 2 (id=3821):
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x98, 0x2}, 0x8002, 0x6, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
socket$kcm(0x2, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

1.087460935s ago: executing program 0 (id=3822):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x2, 0x32, 0x43a1bd76, 0xa, 0x9, 0x6c9, 0x1, 0x0, 0x1a, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x5)

907.25393ms ago: executing program 1 (id=3823):
socket$kcm(0x15, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=<r2=>0x1, 0x11, 0x1, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r4, r1, 0x2b, 0x18, 0x0, @void, @value=r1, @void, @void, r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x3ff, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r2, 0x34, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="182e601e5b00000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r6 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x1, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xead3086ce9776e28}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async)
close(r8) (async)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r9, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0xfe33) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, @perf_bp={&(0x7f00000006c0), 0x8}, 0x8c559ccba79cd8f2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r10, 0x4000, r10}, 0x18)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x4030582a, &(0x7f0000000040))

842.775323ms ago: executing program 1 (id=3824):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)

828.258223ms ago: executing program 0 (id=3825):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20880, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x500, &(0x7f00000009c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010000080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x200440c0)

728.863736ms ago: executing program 3 (id=3826):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) (rerun: 64)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000080)=""/45}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x2d89dd4bd82bb7f6, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x2, 0x5, "1e53606938206aca384553ab3a8e190faae6732ae860b3575a8b641bd1470a295930ba67b38c2fb60ad39e78b361a1fd585b43c85c7225fdee4e7f9c440422", 0x24}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="052fd95f749b5a13b41c9bcb5b95e2063d2c2ffe72a1569fda38e51a0edee547e89f840c3ba674234182", 0x2a}], 0x2, &(0x7f0000002100)=[{0x40, 0x10c, 0xfffffffb, "c4397984d44440d19c097350bf1b9932d6a52f2a05c8f78aec8cc91463d432fbbf083a12608218af6c14"}, {0x58, 0x10e, 0x8001, "38e87566d452eb3ed152c68f3ef6486e2258581afc63c18f535afe737fa5d3458c23bb6c5d31ab907ebb8a5fbf166c52f7c7fdca7e621321eec71edb4bcfc0e0e239fa5d0fee07"}], 0x98}, 0x800) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040810)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a000000030000000600000000000000000000010500000020000000000000000000040300000000020000be25acdca833759e000061002e2e72612e61305f00"], 0x0, 0x64}, 0x28) (async, rerun: 32)
r3 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001040), 0x12) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32)
r4 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
close(0x3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x2f) (async, rerun: 32)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4)

669.406458ms ago: executing program 1 (id=3827):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x1dc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x11, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

642.925079ms ago: executing program 3 (id=3828):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x48)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000580)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000001b80)=""/248, 0xf8}], 0x1}, 0x1f00)
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x32, &(0x7f0000001640)=[{&(0x7f00000000c0)="a2", 0x1}, {&(0x7f0000000640)="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", 0x1000}], 0x2}, 0x4000004)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x93, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x37, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8007f67}, 0x94)
r5 = perf_event_open(&(0x7f0000001c80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0xf, 0x0, 0x2)
sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a01ff02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000010040)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$tipc(r12, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001d80)="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", 0x245}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
recvmsg(r9, &(0x7f0000001a80)={&(0x7f0000000140)=@ieee802154, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000001680)=""/161, 0xa1}, {&(0x7f0000001740)=""/3, 0x3}, {&(0x7f0000001780)=""/161, 0xa1}, {&(0x7f0000001840)=""/92, 0x5c}, {&(0x7f00000018c0)=""/216, 0xd8}], 0x6, &(0x7f0000001a40)=""/12, 0xc}, 0x2000)
sendmsg$tipc(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x4000090}, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r13, <r14=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x47f, r14}, 0x38)
perf_event_open(&(0x7f0000000180)={0x2, 0xfffffff9, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114a66, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

505.078754ms ago: executing program 1 (id=3829):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4)
recvmsg$kcm(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x12}, 0x2142)

479.162534ms ago: executing program 0 (id=3830):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8903, 0x0)
r1 = socket$kcm(0x10, 0xf6b323de9624ee67, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

423.000296ms ago: executing program 1 (id=3831):
socket$kcm(0x2b, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c", 0x9e}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000004", @ANYRES32], 0x0}, 0x90)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0xa, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f0000ff00000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff8000}, @generic={0xfb, 0x9, 0x6, 0x7, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xe, '\x00', r8, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x4, 0x76, 0x8}, 0x10, 0x93a7, r0, 0x2, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x0, 0x3, 0xf, 0x8}, {0x4, 0x4, 0xc, 0x7}], 0x10, 0x3}, 0x94)

367.886008ms ago: executing program 3 (id=3832):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x5, 0x0, 0x2009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xe4, &(0x7f0000000040)=""/228, 0x41000, 0x3}, 0x94)

95.454197ms ago: executing program 0 (id=3833):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000020, 0x36508, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x62, 0x2}, 0x7602, 0x5, 0x0, 0x0, 0x400000000000, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x36, 0x1, 0xb15, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000008000000000004000b44d270f20ccb08819809c07001bfd70c214164be410b758cc09f7e4e68999dce0151722bba553cdb2d96ffffffdff577f116714992b9333de4d1f63475eb0770c86c623a3de593d19eb66cd066939de"], 0x50)
r3 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="80000000d30700ba564342b3335d4162c346f5808300000000000000"], 0x48)
sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000540), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
sendmsg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r8, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
close(r7)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

47.527118ms ago: executing program 3 (id=3834):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time\x00')
ioctl$TUNGETVNETHDRSZ(r4, 0x8004b709, 0x0)
perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, &(0x7f0000000140), 0x0}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000009400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r0, @ANYBLOB='-\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="6ad99817f5b850b422f867f99832ad5d496f9bc4661139df2d8e2c8382747a210902a9917a81fe24fc8a733a35e191c00456137d5f717dc1d33ec23426843277882e9fe7d00f354c0fad18f3261e33c568e90b80f5fac41a463f62da26fad39a33a791889d9312e34d", @ANYRES64=0x0], 0x20)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

0s ago: executing program 1 (id=3835):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4098, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/221, 0xe5}], 0x1, 0x0, 0xffffffffffffffa1}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_pressure(r8, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r9, &(0x7f0000000340)={'full', 0x20, 0x8, 0x20, 0xffffa}, 0xc)
sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r10=>0xffffffffffffffff})
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000100), 0x4)

kernel console output (not intermixed with test programs):

Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  490.122990][T14067] Call Trace:
[  490.126287][T14067]  <TASK>
[  490.129240][T14067]  dump_stack_lvl+0x18c/0x250
[  490.133946][T14067]  ? show_regs_print_info+0x20/0x20
[  490.139180][T14067]  ? load_image+0x420/0x420
[  490.143712][T14067]  ? __might_sleep+0xe0/0xe0
[  490.148331][T14067]  ? __lock_acquire+0x7d40/0x7d40
[  490.153388][T14067]  should_fail_ex+0x39d/0x4d0
[  490.158097][T14067]  should_failslab+0x9/0x20
[  490.162632][T14067]  slab_pre_alloc_hook+0x59/0x310
[  490.167687][T14067]  ? page_pool_create+0x71/0x5c0
[  490.172657][T14067]  __kmem_cache_alloc_node+0x53/0x250
[  490.178063][T14067]  ? page_pool_create+0x71/0x5c0
[  490.183040][T14067]  kmalloc_node_trace+0x26/0xe0
[  490.187924][T14067]  page_pool_create+0x71/0x5c0
[  490.192723][T14067]  bpf_test_run_xdp_live+0x203/0x1b20
[  490.198135][T14067]  ? 0xffffffffa0004740
[  490.202315][T14067]  ? 0xffffffffa0004740
[  490.206492][T14067]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  490.212414][T14067]  ? 0xffffffffa0004740
[  490.216604][T14067]  ? xdp_convert_md_to_buff+0x330/0x330
[  490.222210][T14067]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  490.228485][T14067]  ? _copy_from_user+0xa5/0xe0
[  490.233281][T14067]  ? bpf_test_init+0x119/0x140
[  490.238073][T14067]  ? xdp_convert_md_to_buff+0x5b/0x330
[  490.243565][T14067]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  490.248988][T14067]  ? dev_put+0x80/0x80
[  490.253096][T14067]  ? dev_put+0x80/0x80
[  490.257189][T14067]  bpf_prog_test_run+0x321/0x390
[  490.262159][T14067]  __sys_bpf+0x49d/0x890
[  490.266429][T14067]  ? bpf_link_show_fdinfo+0x390/0x390
[  490.271842][T14067]  ? lock_chain_count+0x20/0x20
[  490.276735][T14067]  __x64_sys_bpf+0x7c/0x90
[  490.281177][T14067]  do_syscall_64+0x55/0xb0
[  490.285616][T14067]  ? clear_bhb_loop+0x40/0x90
[  490.290310][T14067]  ? clear_bhb_loop+0x40/0x90
[  490.295004][T14067]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  490.300926][T14067] RIP: 0033:0x7f3f8779ce59
[  490.305361][T14067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.324989][T14067] RSP: 002b:00007f3f88572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  490.333431][T14067] RAX: ffffffffffffffda RBX: 00007f3f87a15fa0 RCX: 00007f3f8779ce59
[  490.341430][T14067] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  490.349424][T14067] RBP: 00007f3f88572090 R08: 0000000000000000 R09: 0000000000000000
[  490.357422][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.365420][T14067] R13: 00007f3f87a16038 R14: 00007f3f87a15fa0 R15: 00007ffcf0d6cb38
[  490.373429][T14067]  </TASK>
[  494.907920][T14153] __nla_validate_parse: 41 callbacks suppressed
[  494.907942][T14153] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2784'.
[  494.935376][T14153] bridge_slave_1: default FDB implementation only supports local addresses
[  495.139087][T14163] netlink: 'syz.1.2792': attribute type 39 has an invalid length.
[  495.660078][T14116] veth1_macvtap: left promiscuous mode
[  495.675864][T14116] macsec0: entered allmulticast mode
[  497.629906][T14211] syzkaller0: entered promiscuous mode
[  497.636310][T14211] syzkaller0: entered allmulticast mode
[  499.702076][T14226] netlink: 'syz.0.2811': attribute type 6 has an invalid length.
[  499.720266][T14226] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2811'.
[  501.182815][T14259] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2818'.
[  501.238246][T14268] netlink: 'syz.2.2823': attribute type 10 has an invalid length.
[  501.281747][T14268] team0: Port device macvlan0 added
[  501.655631][T14271] syzkaller0: entered promiscuous mode
[  501.685130][T14271] syzkaller0: entered allmulticast mode
[  501.740893][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  501.749246][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  502.117635][T14284] bridge0: port 3(syz_tun) entered blocking state
[  502.124578][T14284] bridge0: port 3(syz_tun) entered disabled state
[  502.146057][T14284] syz_tun: entered allmulticast mode
[  502.157662][T14284] syz_tun: entered promiscuous mode
[  502.163825][T14284] bridge0: port 3(syz_tun) entered blocking state
[  502.171567][T14284] bridge0: port 3(syz_tun) entered forwarding state
[  502.222296][T14259] veth1_macvtap: left promiscuous mode
[  502.228587][T14259] macsec0: entered allmulticast mode
[  502.501908][T14293] netlink: 668 bytes leftover after parsing attributes in process `syz.3.2829'.
[  502.511492][T14293] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  502.520177][T14293] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  504.011048][T14292] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2829'.
[  504.927150][T14320] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2838'.
[  504.954960][T14323] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2835'.
[  506.830813][T14360] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2851'.
[  507.405140][T14369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  507.427065][T14369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.451877][T14369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  507.462701][T14369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.660955][T14396] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2862'.
[  508.674806][T14393] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  508.711871][T14395] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2863'.
[  510.313315][T14433] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2875'.
[  510.366132][T14433] sctp: [Deprecated]: syz.3.2875 (pid 14433) Use of struct sctp_assoc_value in delayed_ack socket option.
[  510.366132][T14433] Use struct sctp_sack_info instead
[  510.615046][T14440] bridge0: port 5(syz_tun) entered blocking state
[  510.643399][T14440] bridge0: port 5(syz_tun) entered disabled state
[  510.676392][T14440] syz_tun: entered allmulticast mode
[  510.713373][T14440] syz_tun: entered promiscuous mode
[  516.218998][T14459] FAULT_INJECTION: forcing a failure.
[  516.218998][T14459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  516.306154][T14459] CPU: 1 PID: 14459 Comm: syz.1.2883 Not tainted syzkaller #0
[  516.313757][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  516.323909][T14459] Call Trace:
[  516.327292][T14459]  <TASK>
[  516.330317][T14459]  dump_stack_lvl+0x18c/0x250
[  516.335136][T14459]  ? show_regs_print_info+0x20/0x20
[  516.340451][T14459]  ? load_image+0x420/0x420
[  516.345090][T14459]  ? __might_fault+0xaa/0x120
[  516.349886][T14459]  ? __lock_acquire+0x7d40/0x7d40
[  516.355062][T14459]  should_fail_ex+0x39d/0x4d0
[  516.359887][T14459]  _copy_to_user+0x2f/0xa0
[  516.364431][T14459]  bpf_test_finish+0x25a/0x650
[  516.369353][T14459]  ? dst_hold+0x70/0x70
[  516.373614][T14459]  ? convert_skb_to___skb+0x420/0x420
[  516.379214][T14459]  bpf_prog_test_run_skb+0x1122/0x18c0
[  516.384961][T14459]  ? cpu_online+0x60/0x60
[  516.389416][T14459]  bpf_prog_test_run+0x321/0x390
[  516.394488][T14459]  __sys_bpf+0x49d/0x890
[  516.398857][T14459]  ? bpf_link_show_fdinfo+0x390/0x390
[  516.404464][T14459]  ? lock_chain_count+0x20/0x20
[  516.409506][T14459]  __x64_sys_bpf+0x7c/0x90
[  516.414041][T14459]  do_syscall_64+0x55/0xb0
[  516.418545][T14459]  ? clear_bhb_loop+0x40/0x90
[  516.423304][T14459]  ? clear_bhb_loop+0x40/0x90
[  516.428091][T14459]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.434075][T14459] RIP: 0033:0x7f0a73b9ce59
[  516.438593][T14459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.458299][T14459] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  516.466834][T14459] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  516.474896][T14459] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  516.482994][T14459] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  516.491058][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.499115][T14459] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  516.507319][T14459]  </TASK>
[  518.513131][ T9268] tipc: Left network mode
[  519.958736][T14496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  519.966256][T14496] IPv6: NLM_F_CREATE should be set when creating new route
[  519.973942][T14496] IPv6: NLM_F_CREATE should be set when creating new route
[  519.981478][T14496] IPv6: NLM_F_CREATE should be set when creating new route
[  519.994857][T14499] bridge0: port 3(syz_tun) entered blocking state
[  520.004611][T14499] bridge0: port 3(syz_tun) entered disabled state
[  520.025850][T14499] syz_tun: entered allmulticast mode
[  520.033504][T14499] syz_tun: entered promiscuous mode
[  520.444701][T14513] netlink: 'syz.3.2899': attribute type 10 has an invalid length.
[  520.452921][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2899'.
[  520.465101][T14513] batman_adv: batadv0: Adding interface: vlan1
[  520.474353][T14513] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.508195][T14513] batman_adv: batadv0: Interface activated: vlan1
[  520.533643][T14513] netlink: 'syz.3.2899': attribute type 29 has an invalid length.
[  520.588185][T14513] netlink: 'syz.3.2899': attribute type 29 has an invalid length.
[  520.616871][T14519] netlink: 'syz.3.2899': attribute type 29 has an invalid length.
[  521.375987][ T9268] hsr_slave_0: left promiscuous mode
[  521.427709][T14526] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2902'.
[  521.516077][ T9268] hsr_slave_1: left promiscuous mode
[  521.534857][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  521.542396][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_0
[  521.570629][ T9268] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  521.588411][ T9268] batman_adv: batadv0: Removing interface: batadv_slave_1
[  521.690902][ T9268] veth1_macvtap: left promiscuous mode
[  521.699382][ T9268] veth0_macvtap: left promiscuous mode
[  521.715398][ T9268] veth1_vlan: left promiscuous mode
[  521.732787][ T9268] veth0_vlan: left promiscuous mode
[  524.165981][T14552] Bluetooth: hci1: command 0x0406 tx timeout
[  525.239148][ T9268] team0 (unregistering): Port device team_slave_1 removed
[  525.343729][ T9268] team0 (unregistering): Port device team_slave_0 removed
[  525.770867][ T9268] team0 (unregistering): Port device dummy0 removed
[  525.844487][T14543] netlink: 'syz.0.2906': attribute type 10 has an invalid length.
[  525.859817][T14543] team0: Device ipvlan1 failed to register rx_handler
[  526.435499][T14572] FAULT_INJECTION: forcing a failure.
[  526.435499][T14572] name failslab, interval 1, probability 0, space 0, times 0
[  526.456647][T14572] CPU: 1 PID: 14572 Comm: syz.2.2913 Not tainted syzkaller #0
[  526.464154][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  526.474218][T14572] Call Trace:
[  526.477492][T14572]  <TASK>
[  526.480409][T14572]  dump_stack_lvl+0x18c/0x250
[  526.485079][T14572]  ? show_regs_print_info+0x20/0x20
[  526.490265][T14572]  ? load_image+0x420/0x420
[  526.494759][T14572]  ? __might_sleep+0xe0/0xe0
[  526.499345][T14572]  ? __lock_acquire+0x7d40/0x7d40
[  526.504360][T14572]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  526.509987][T14572]  should_fail_ex+0x39d/0x4d0
[  526.514685][T14572]  should_failslab+0x9/0x20
[  526.519217][T14572]  slab_pre_alloc_hook+0x59/0x310
[  526.524278][T14572]  kmem_cache_alloc_node+0x60/0x320
[  526.529501][T14572]  ? __alloc_skb+0x103/0x2c0
[  526.534118][T14572]  __alloc_skb+0x103/0x2c0
[  526.538571][T14572]  __ip_append_data+0x2af5/0x3b80
[  526.543685][T14572]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  526.548581][T14572]  ? ip_setup_cork+0x860/0x860
[  526.553378][T14572]  ? __local_bh_enable_ip+0x13a/0x1c0
[  526.558785][T14572]  ? lockdep_hardirqs_on+0x98/0x150
[  526.564024][T14572]  ip_append_data+0x10d/0x180
[  526.568794][T14572]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  526.573642][T14572]  udp_sendmsg+0x5d0/0x23b0
[  526.578187][T14572]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  526.583038][T14572]  ? udp_cmsg_send+0x350/0x350
[  526.587813][T14572]  ? aa_sk_perm+0x83c/0x970
[  526.592318][T14572]  ? aa_af_perm+0x330/0x330
[  526.596812][T14572]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  526.603231][T14572]  ? sock_rps_record_flow+0x19/0x3f0
[  526.608545][T14572]  ? inet_sendmsg+0x7c/0x2f0
[  526.613132][T14572]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  526.618423][T14572]  ? security_socket_sendmsg+0x80/0xa0
[  526.623878][T14572]  sock_write_iter+0x2df/0x420
[  526.628642][T14572]  ? sock_read_iter+0x3e0/0x3e0
[  526.633497][T14572]  ? common_file_perm+0x198/0x1f0
[  526.638521][T14572]  vfs_write+0x46c/0x990
[  526.642764][T14572]  ? file_end_write+0x250/0x250
[  526.647640][T14572]  ? __fget_files+0x43d/0x4b0
[  526.652323][T14572]  ? __fdget_pos+0x1d8/0x330
[  526.656908][T14572]  ? ksys_write+0x75/0x260
[  526.661320][T14572]  ksys_write+0x150/0x260
[  526.665649][T14572]  ? __ia32_sys_read+0x90/0x90
[  526.670410][T14572]  ? lockdep_hardirqs_on+0x98/0x150
[  526.675606][T14572]  do_syscall_64+0x55/0xb0
[  526.680017][T14572]  ? clear_bhb_loop+0x40/0x90
[  526.684686][T14572]  ? clear_bhb_loop+0x40/0x90
[  526.689443][T14572]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.695336][T14572] RIP: 0033:0x7f057279ce59
[  526.699743][T14572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.719355][T14572] RSP: 002b:00007f05709f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  526.727766][T14572] RAX: ffffffffffffffda RBX: 00007f0572a16090 RCX: 00007f057279ce59
[  526.735734][T14572] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000004
[  526.743694][T14572] RBP: 00007f05709f6090 R08: 0000000000000000 R09: 0000000000000000
[  526.751657][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  526.759619][T14572] R13: 00007f0572a16128 R14: 00007f0572a16090 R15: 00007ffcea54c1e8
[  526.767598][T14572]  </TASK>
[  529.018500][T14590] netlink: 'syz.0.2916': attribute type 1 has an invalid length.
[  529.125191][T14590] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  529.177642][T14590] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2916'.
[  529.285815][T14552] Bluetooth: hci4: command 0x0406 tx timeout
[  530.560877][T14616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  530.585235][T14623] netlink: 'syz.3.2929': attribute type 1 has an invalid length.
[  530.623345][T14623] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  530.652829][T14623] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2929'.
[  531.198256][T14633] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2931'.
[  531.242805][T14633] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2931'.
[  531.808507][T14643] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2935'.
[  533.046269][ T9267] wlan1: Trigger new scan to find an IBSS to join
[  535.159633][T14692] FAULT_INJECTION: forcing a failure.
[  535.159633][T14692] name failslab, interval 1, probability 0, space 0, times 0
[  535.263727][T14692] CPU: 0 PID: 14692 Comm: syz.0.2947 Not tainted syzkaller #0
[  535.271246][T14692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  535.281327][T14692] Call Trace:
[  535.284635][T14692]  <TASK>
[  535.287587][T14692]  dump_stack_lvl+0x18c/0x250
[  535.292307][T14692]  ? show_regs_print_info+0x20/0x20
[  535.297539][T14692]  ? load_image+0x420/0x420
[  535.302086][T14692]  ? __might_sleep+0xe0/0xe0
[  535.306711][T14692]  ? __lock_acquire+0x7d40/0x7d40
[  535.311776][T14692]  should_fail_ex+0x39d/0x4d0
[  535.316497][T14692]  should_failslab+0x9/0x20
[  535.321020][T14692]  slab_pre_alloc_hook+0x59/0x310
[  535.326070][T14692]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  535.331824][T14692]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  535.337582][T14692]  __kmem_cache_alloc_node+0x53/0x250
[  535.343006][T14692]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  535.348758][T14692]  __kmalloc+0xa4/0x230
[  535.352945][T14692]  tomoyo_realpath_from_path+0xe3/0x5d0
[  535.358541][T14692]  tomoyo_path_number_perm+0x248/0x620
[  535.364027][T14692]  ? tomoyo_path_number_perm+0x217/0x620
[  535.369691][T14692]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  535.375188][T14692]  ? ksys_write+0x1c4/0x260
[  535.379761][T14692]  ? __fget_files+0x28/0x4b0
[  535.384385][T14692]  ? __fget_files+0x28/0x4b0
[  535.389073][T14692]  security_file_ioctl+0x70/0xa0
[  535.394079][T14692]  __se_sys_ioctl+0x48/0x170
[  535.398740][T14692]  do_syscall_64+0x55/0xb0
[  535.403213][T14692]  ? clear_bhb_loop+0x40/0x90
[  535.407940][T14692]  ? clear_bhb_loop+0x40/0x90
[  535.412679][T14692]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.418632][T14692] RIP: 0033:0x7f6e4dd9ce59
[  535.423095][T14692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.442757][T14692] RSP: 002b:00007f6e4bfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  535.451261][T14692] RAX: ffffffffffffffda RBX: 00007f6e4e016180 RCX: 00007f6e4dd9ce59
[  535.459267][T14692] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000005
[  535.467266][T14692] RBP: 00007f6e4bfb4090 R08: 0000000000000000 R09: 0000000000000000
[  535.475252][T14692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.483236][T14692] R13: 00007f6e4e016218 R14: 00007f6e4e016180 R15: 00007ffe0c28c5c8
[  535.491262][T14692]  </TASK>
[  535.507361][T14692] ERROR: Out of memory at tomoyo_realpath_from_path.
[  537.046849][ T9267] wlan1: Trigger new scan to find an IBSS to join
[  537.227229][T14700] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2949'.
[  537.250695][T14700] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2949'.
[  537.391169][T14712] netlink: 'syz.2.2954': attribute type 21 has an invalid length.
[  537.399286][T14712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2954'.
[  537.418761][T14712] netlink: 'syz.2.2954': attribute type 5 has an invalid length.
[  537.485859][T14712] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2954'.
[  537.902482][T14707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  538.007892][   T11] wlan1: Creating new IBSS network, BSSID 3e:0a:5c:d4:1d:b1
[  538.029787][T14722] netlink: 'syz.3.2956': attribute type 33 has an invalid length.
[  538.055683][T14722] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2956'.
[  538.064799][T14722] `: renamed from syz_tun (while UP)
[  539.406655][T14746] netlink: 'syz.2.2964': attribute type 10 has an invalid length.
[  539.493491][T14746] team0: Port device geneve1 added
[  540.139811][T14760] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2969'.
[  540.169430][T14760] netlink: zone id is out of range
[  540.189532][T14760] netlink: zone id is out of range
[  540.194949][T14760] netlink: zone id is out of range
[  540.208101][T14760] netlink: zone id is out of range
[  540.213266][T14760] netlink: zone id is out of range
[  540.233382][T14760] netlink: zone id is out of range
[  540.239730][T14760] netlink: zone id is out of range
[  540.245503][T14760] netlink: zone id is out of range
[  540.250951][T14760] netlink: zone id is out of range
[  540.254953][T14765] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2969'.
[  540.257887][T14760] netlink: zone id is out of range
[  540.403753][T14767] syz.1.2970[14767] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  540.406397][T14767] syz.1.2970[14767] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  541.019597][T14779] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  543.586550][T14779] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  543.601123][T14781] netlink: 'syz.1.2974': attribute type 29 has an invalid length.
[  543.797183][T14812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2982'.
[  545.164084][T14836] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2990'.
[  545.187270][T14836] net_ratelimit: 216 callbacks suppressed
[  545.187285][T14836] netlink: zone id is out of range
[  545.208513][T14836] netlink: zone id is out of range
[  545.223860][T14836] netlink: zone id is out of range
[  545.231259][T14836] netlink: zone id is out of range
[  545.239056][T14839] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.2990'.
[  545.255733][T14836] netlink: zone id is out of range
[  545.260874][T14836] netlink: zone id is out of range
[  545.306755][T14836] netlink: zone id is out of range
[  545.311937][T14836] netlink: zone id is out of range
[  545.365694][T14836] netlink: zone id is out of range
[  545.370896][T14836] netlink: zone id is out of range
[  546.835573][T14868] netlink: 'syz.0.2999': attribute type 10 has an invalid length.
[  547.120147][T14877] netlink: 'syz.1.3001': attribute type 1 has an invalid length.
[  547.210475][T14877] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3001'.
[  547.225911][T14877] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3001'.
[  547.239354][T14877] tipc: Started in network mode
[  547.244508][T14877] tipc: Node identity b, cluster identity 73
[  547.251348][T14877] tipc: Node number set to 11
[  547.267922][T14879] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3002'.
[  547.323438][T14882] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3003'.
[  547.341433][T14882] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3003'.
[  548.889174][T14911] netlink: 'syz.3.3012': attribute type 10 has an invalid length.
[  549.770422][T14552] Bluetooth: hci0: command 0x0406 tx timeout
[  550.421551][T14949] FAULT_INJECTION: forcing a failure.
[  550.421551][T14949] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  550.462336][T14949] CPU: 0 PID: 14949 Comm: syz.3.3027 Not tainted syzkaller #0
[  550.469874][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  550.479968][T14949] Call Trace:
[  550.483280][T14949]  <TASK>
[  550.486243][T14949]  dump_stack_lvl+0x18c/0x250
[  550.490968][T14949]  ? show_regs_print_info+0x20/0x20
[  550.496208][T14949]  ? load_image+0x420/0x420
[  550.500756][T14949]  ? __might_fault+0xaa/0x120
[  550.505483][T14949]  ? __lock_acquire+0x7d40/0x7d40
[  550.510554][T14949]  should_fail_ex+0x39d/0x4d0
[  550.515291][T14949]  _copy_from_user+0x2f/0xe0
[  550.519928][T14949]  arp_ioctl+0x159/0x530
[  550.524225][T14949]  ? neigh_release+0x80/0x80
[  550.528867][T14949]  ? do_vfs_ioctl+0x1573/0x1cc0
[  550.533775][T14949]  inet_ioctl+0x3c5/0x560
[  550.538140][T14949]  ? tomoyo_path_number_perm+0x217/0x620
[  550.543808][T14949]  ? inet_shutdown+0x370/0x370
[  550.548609][T14949]  ? slab_free_freelist_hook+0x130/0x1a0
[  550.554281][T14949]  ? tomoyo_path_number_perm+0x500/0x620
[  550.559949][T14949]  ? __kmem_cache_free+0xba/0x1e0
[  550.565050][T14949]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  550.570559][T14949]  ? packet_ioctl+0x169/0x340
[  550.575289][T14949]  sock_do_ioctl+0xfc/0x310
[  550.579843][T14949]  ? sock_show_fdinfo+0xb0/0xb0
[  550.584767][T14949]  sock_ioctl+0x5ba/0x7e0
[  550.589148][T14949]  ? sock_poll+0x3e0/0x3e0
[  550.593632][T14949]  ? bpf_lsm_file_ioctl+0x9/0x10
[  550.598605][T14949]  ? security_file_ioctl+0x80/0xa0
[  550.603753][T14949]  ? sock_poll+0x3e0/0x3e0
[  550.608209][T14949]  __se_sys_ioctl+0xfd/0x170
[  550.612844][T14949]  do_syscall_64+0x55/0xb0
[  550.617297][T14949]  ? clear_bhb_loop+0x40/0x90
[  550.622000][T14949]  ? clear_bhb_loop+0x40/0x90
[  550.626684][T14949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  550.632584][T14949] RIP: 0033:0x7f3f8779ce59
[  550.637000][T14949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  550.656606][T14949] RSP: 002b:00007f3f88572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  550.665025][T14949] RAX: ffffffffffffffda RBX: 00007f3f87a15fa0 RCX: 00007f3f8779ce59
[  550.673000][T14949] RDX: 0000200000000040 RSI: 0000000000008953 RDI: 0000000000000006
[  550.680972][T14949] RBP: 00007f3f88572090 R08: 0000000000000000 R09: 0000000000000000
[  550.689117][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.697090][T14949] R13: 00007f3f87a16038 R14: 00007f3f87a15fa0 R15: 00007ffcf0d6cb38
[  550.705083][T14949]  </TASK>
[  550.980306][T14959] netlink: 'syz.0.3029': attribute type 10 has an invalid length.
[  551.526448][T14966] netlink: 'syz.3.3032': attribute type 4 has an invalid length.
[  551.575129][T14966] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3032'.
[  552.720986][T14978] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3035'.
[  552.739001][T14978] net_ratelimit: 443 callbacks suppressed
[  552.739020][T14978] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  552.763241][T14978] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  553.122769][T14988] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3038'.
[  553.132997][T14988] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  553.160634][T14988] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  553.825146][T15012] netlink: 'syz.1.3046': attribute type 4 has an invalid length.
[  553.893112][T15012] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3046'.
[  556.420710][T15051] netlink: 'syz.3.3060': attribute type 1 has an invalid length.
[  556.473257][T15050] netlink: 'syz.3.3060': attribute type 1 has an invalid length.
[  556.487285][T15050] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3060'.
[  556.554854][T15051] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3060'.
[  557.164372][T15072] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3069'.
[  558.150774][T15100] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3081'.
[  558.173135][T15100] openvswitch: netlink: Key type 29 is not supported
[  558.925234][T15115] netlink: 'syz.1.3086': attribute type 10 has an invalid length.
[  559.181603][T15115] team0: Device hsr_slave_0 failed to register rx_handler
[  559.671097][T15136] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3094'.
[  559.840776][T15140] netlink: 'syz.0.3095': attribute type 21 has an invalid length.
[  559.855898][T15140] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3095'.
[  560.015662][T14552] Bluetooth: hci3: command 0x0406 tx timeout
[  560.397818][T15154] bridge_slave_1: left allmulticast mode
[  560.403693][T15154] bridge_slave_1: left promiscuous mode
[  560.427137][T15154] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.460244][T15154] bridge_slave_0: left promiscuous mode
[  560.468385][T15154] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.703656][T15168] netlink: 'syz.3.3105': attribute type 12 has an invalid length.
[  560.727022][T15168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3105'.
[  560.792836][T15172] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  561.051670][T15173] syzkaller0: entered promiscuous mode
[  561.085057][T15173] syzkaller0: entered allmulticast mode
[  561.129455][T15172] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3106'.
[  563.060561][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.068039][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  564.012496][ T9093] wlan1: Trigger new scan to find an IBSS to join
[  564.053675][T15201] netlink: 'syz.1.3115': attribute type 21 has an invalid length.
[  564.072454][T15197] netlink: 'syz.2.3114': attribute type 21 has an invalid length.
[  564.091746][T15197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3114'.
[  564.601633][T15214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3119'.
[  564.733829][T15220] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3119'.
[  564.775987][T15218] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  564.812489][T15218] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  566.170429][T15236] netlink: 'syz.2.3127': attribute type 27 has an invalid length.
[  566.197904][T15236] netlink: 'syz.2.3127': attribute type 25 has an invalid length.
[  566.214679][T15231] tap0: tun_chr_ioctl cmd 1074025694
[  567.294159][T15249] netlink: 'syz.1.3130': attribute type 21 has an invalid length.
[  567.323401][T15249] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3130'.
[  567.497404][T15258] netlink: 'syz.0.3132': attribute type 10 has an invalid length.
[  567.551460][T15258] netlink: 'syz.0.3132': attribute type 10 has an invalid length.
[  567.583346][T15258] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3132'.
[  567.613392][T15258] team0: entered promiscuous mode
[  567.625761][T15258] team_slave_0: entered promiscuous mode
[  567.655990][T15258] team_slave_1: entered promiscuous mode
[  567.662401][T15258] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  567.731903][T15259] netlink: 'syz.0.3132': attribute type 29 has an invalid length.
[  567.759403][T15259] netlink: 'syz.0.3132': attribute type 29 has an invalid length.
[  567.838833][T15258] netlink: 'syz.0.3132': attribute type 29 has an invalid length.
[  567.948681][T15268] geneve0: entered promiscuous mode
[  568.008452][T15268] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  568.019725][ T9267] wlan1: Trigger new scan to find an IBSS to join
[  568.040755][T15267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.621039][T15283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3143'.
[  568.889696][T15296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3147'.
[  568.928365][ T9091] wlan1: Creating new IBSS network, BSSID 92:0b:13:0d:43:7a
[  569.220320][T15309] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3152'.
[  569.783992][T15328] validate_nla: 7 callbacks suppressed
[  569.784008][T15328] netlink: 'syz.1.3157': attribute type 29 has an invalid length.
[  569.802301][T15328] netlink: 'syz.1.3157': attribute type 29 has an invalid length.
[  570.187239][T15337] netlink: 'syz.2.3161': attribute type 21 has an invalid length.
[  570.206747][T15337] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3161'.
[  570.332473][T15346] netlink: 'syz.3.3163': attribute type 10 has an invalid length.
[  570.381708][T15346] netlink: 'syz.3.3163': attribute type 10 has an invalid length.
[  570.393048][T15346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3163'.
[  570.402972][T15346] team0: entered promiscuous mode
[  570.410130][T15346] team_slave_0: entered promiscuous mode
[  570.418499][T15346] team_slave_1: entered promiscuous mode
[  570.429968][T15346] bridge0: port 6(team0) entered blocking state
[  570.440045][T15346] bridge0: port 6(team0) entered disabled state
[  570.452651][T15346] team0: entered allmulticast mode
[  570.503735][T15346] team_slave_0: entered allmulticast mode
[  570.534499][T15349] netlink: 'syz.3.3163': attribute type 29 has an invalid length.
[  570.547936][T15346] team_slave_1: entered allmulticast mode
[  570.560908][T15349] netlink: 'syz.3.3163': attribute type 29 has an invalid length.
[  570.595328][T15346] netlink: 'syz.3.3163': attribute type 29 has an invalid length.
[  570.627273][T15346] netlink: 'syz.3.3163': attribute type 29 has an invalid length.
[  570.661334][T15346] netlink: 'syz.3.3163': attribute type 29 has an invalid length.
[  570.988354][T15366] FAULT_INJECTION: forcing a failure.
[  570.988354][T15366] name failslab, interval 1, probability 0, space 0, times 0
[  571.002834][T15366] CPU: 0 PID: 15366 Comm: syz.3.3168 Not tainted syzkaller #0
[  571.010338][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  571.020413][T15366] Call Trace:
[  571.023702][T15366]  <TASK>
[  571.026642][T15366]  dump_stack_lvl+0x18c/0x250
[  571.031333][T15366]  ? show_regs_print_info+0x20/0x20
[  571.036671][T15366]  ? load_image+0x420/0x420
[  571.041186][T15366]  ? __might_sleep+0xe0/0xe0
[  571.045786][T15366]  ? __lock_acquire+0x7d40/0x7d40
[  571.050836][T15366]  should_fail_ex+0x39d/0x4d0
[  571.055560][T15366]  should_failslab+0x9/0x20
[  571.060082][T15366]  slab_pre_alloc_hook+0x59/0x310
[  571.065115][T15366]  ? sctp_association_new+0x89/0x25c0
[  571.070603][T15366]  __kmem_cache_alloc_node+0x53/0x250
[  571.075986][T15366]  ? sctp_association_new+0x89/0x25c0
[  571.081361][T15366]  kmalloc_trace+0x2a/0xe0
[  571.085787][T15366]  sctp_association_new+0x89/0x25c0
[  571.090987][T15366]  ? sctp_do_bind+0x6bd/0x990
[  571.095713][T15366]  sctp_connect_new_asoc+0x2de/0x6a0
[  571.100998][T15366]  ? __sctp_connect+0xd80/0xd80
[  571.105844][T15366]  ? __local_bh_enable_ip+0x13a/0x1c0
[  571.111227][T15366]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  571.116774][T15366]  ? security_sctp_bind_connect+0x89/0xb0
[  571.122497][T15366]  sctp_sendmsg+0x15d2/0x2910
[  571.127181][T15366]  ? sctp_getsockopt+0xb60/0xb60
[  571.132114][T15366]  ? aa_sk_perm+0x83c/0x970
[  571.136618][T15366]  ? aa_af_perm+0x330/0x330
[  571.141109][T15366]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  571.147528][T15366]  ? sock_rps_record_flow+0x19/0x3f0
[  571.152815][T15366]  ? inet_sendmsg+0xe9/0x2f0
[  571.157408][T15366]  ? inet_send_prepare+0x260/0x260
[  571.162519][T15366]  ____sys_sendmsg+0x5ba/0x960
[  571.167286][T15366]  ? __lock_acquire+0x7d40/0x7d40
[  571.172312][T15366]  ? __sys_sendmsg_sock+0x30/0x30
[  571.177330][T15366]  ? __import_iovec+0x5f2/0x850
[  571.182182][T15366]  ? import_iovec+0x73/0xa0
[  571.186682][T15366]  ___sys_sendmsg+0x2a6/0x360
[  571.191355][T15366]  ? get_pid_task+0x20/0x1e0
[  571.195948][T15366]  ? __sys_sendmsg+0x2a0/0x2a0
[  571.200723][T15366]  ? __lock_acquire+0x7d40/0x7d40
[  571.205761][T15366]  __se_sys_sendmsg+0x1c2/0x2b0
[  571.210611][T15366]  ? __x64_sys_sendmsg+0x80/0x80
[  571.215558][T15366]  ? lockdep_hardirqs_on+0x98/0x150
[  571.220758][T15366]  do_syscall_64+0x55/0xb0
[  571.225167][T15366]  ? clear_bhb_loop+0x40/0x90
[  571.229834][T15366]  ? clear_bhb_loop+0x40/0x90
[  571.234509][T15366]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.240399][T15366] RIP: 0033:0x7f3f8779ce59
[  571.244809][T15366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.264424][T15366] RSP: 002b:00007f3f88572028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.272847][T15366] RAX: ffffffffffffffda RBX: 00007f3f87a15fa0 RCX: 00007f3f8779ce59
[  571.280813][T15366] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003
[  571.288782][T15366] RBP: 00007f3f88572090 R08: 0000000000000000 R09: 0000000000000000
[  571.296749][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  571.304711][T15366] R13: 00007f3f87a16038 R14: 00007f3f87a15fa0 R15: 00007ffcf0d6cb38
[  571.312723][T15366]  </TASK>
[  572.084458][T15391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3179'.
[  572.391969][T15395] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3180'.
[  572.635296][T15397] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3180'.
[  573.270188][T15410] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3182'.
[  573.648734][T15422] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.3188'.
[  573.685645][T15422] openvswitch: netlink: Flow key attr not present in new flow.
[  574.452072][T15434] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3191'.
[  574.623982][T15436] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3192'.
[  577.139277][T15443] validate_nla: 6 callbacks suppressed
[  577.139297][T15443] netlink: 'syz.0.3194': attribute type 9 has an invalid length.
[  577.162678][T15443] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3194'.
[  577.255254][T15446] netlink: 'syz.1.3195': attribute type 21 has an invalid length.
[  577.267177][T15452] netlink: 'syz.0.3194': attribute type 9 has an invalid length.
[  577.267237][T15452] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3194'.
[  577.374619][T15446] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3195'.
[  577.956723][T15475] netlink: 'syz.1.3212': attribute type 9 has an invalid length.
[  577.964641][T15475] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3212'.
[  578.075200][T15481] netlink: 'syz.1.3212': attribute type 9 has an invalid length.
[  578.108307][T15481] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3212'.
[  578.712983][T15487] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3206'.
[  578.801957][T15489] netlink: 'syz.3.3207': attribute type 19 has an invalid length.
[  578.811290][T15489] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3207'.
[  578.945399][T15492] FAULT_INJECTION: forcing a failure.
[  578.945399][T15492] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.986024][T15492] CPU: 1 PID: 15492 Comm: syz.1.3209 Not tainted syzkaller #0
[  578.993541][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  579.003607][T15492] Call Trace:
[  579.006893][T15492]  <TASK>
[  579.009834][T15492]  dump_stack_lvl+0x18c/0x250
[  579.014532][T15492]  ? show_regs_print_info+0x20/0x20
[  579.019762][T15492]  ? load_image+0x420/0x420
[  579.024302][T15492]  ? __might_fault+0xaa/0x120
[  579.029004][T15492]  ? __lock_acquire+0x7d40/0x7d40
[  579.034033][T15492]  should_fail_ex+0x39d/0x4d0
[  579.038715][T15492]  _copy_from_iter+0x1d9/0x12e0
[  579.043565][T15492]  ? __might_fault+0xaa/0x120
[  579.048284][T15492]  ? _copy_from_iter+0x24e/0x12e0
[  579.053346][T15492]  ? __virt_addr_valid+0x18c/0x540
[  579.058472][T15492]  ? __lock_acquire+0x7d40/0x7d40
[  579.063497][T15492]  ? copyout_mc+0x70/0x70
[  579.067823][T15492]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  579.073802][T15492]  ? copyout_mc+0x70/0x70
[  579.078129][T15492]  ? __virt_addr_valid+0x18c/0x540
[  579.083237][T15492]  ? page_copy_sane+0x16a/0x270
[  579.088088][T15492]  copy_page_from_iter+0x7b/0x100
[  579.093109][T15492]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  579.098920][T15492]  tun_get_user+0x15db/0x3ca0
[  579.103601][T15492]  ? aa_file_perm+0x11b/0xee0
[  579.108276][T15492]  ? rcu_read_unlock+0xa0/0xa0
[  579.113044][T15492]  ? tun_get+0x1c/0x2e0
[  579.117201][T15492]  ? __lock_acquire+0x7d40/0x7d40
[  579.122227][T15492]  ? tun_get+0x1c/0x2e0
[  579.126388][T15492]  tun_chr_write_iter+0x119/0x200
[  579.131413][T15492]  vfs_write+0x46c/0x990
[  579.135660][T15492]  ? file_end_write+0x250/0x250
[  579.140527][T15492]  ksys_write+0x150/0x260
[  579.144852][T15492]  ? __ia32_sys_read+0x90/0x90
[  579.149613][T15492]  ? lockdep_hardirqs_on+0x98/0x150
[  579.154811][T15492]  do_syscall_64+0x55/0xb0
[  579.159287][T15492]  ? clear_bhb_loop+0x40/0x90
[  579.163985][T15492]  ? clear_bhb_loop+0x40/0x90
[  579.168686][T15492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.174583][T15492] RIP: 0033:0x7f0a73b9ce59
[  579.179014][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.198634][T15492] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  579.207055][T15492] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  579.215025][T15492] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8
[  579.222992][T15492] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  579.230958][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  579.238927][T15492] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  579.246910][T15492]  </TASK>
[  579.368143][T15492] netlink: 'syz.1.3209': attribute type 2 has an invalid length.
[  579.396191][T15492] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3209'.
[  579.426168][T15501] netlink: 'syz.3.3213': attribute type 1 has an invalid length.
[  579.436187][T15495] netlink: 'syz.0.3208': attribute type 21 has an invalid length.
[  579.465375][T15501] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3213'.
[  579.475314][T15495] netlink: 'syz.0.3208': attribute type 19 has an invalid length.
[  579.497010][T15495] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.3208'.
[  579.603825][T15507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3215'.
[  579.984991][T15526] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3220'.
[  580.980817][T15547] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3228'.
[  581.807309][T15551] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3230'.
[  582.275127][T15556] validate_nla: 4 callbacks suppressed
[  582.275146][T15556] netlink: 'syz.0.3232': attribute type 29 has an invalid length.
[  582.295685][   T51] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4
[  582.298753][T15556] netlink: 'syz.0.3232': attribute type 29 has an invalid length.
[  582.453436][T15564] netlink: 'syz.0.3236': attribute type 22 has an invalid length.
[  582.473882][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3236'.
[  583.168164][T15590] netlink: 'syz.0.3243': attribute type 2 has an invalid length.
[  583.190474][T15590] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3243'.
[  583.584482][T15601] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3246'.
[  583.710997][T15603] netlink: 'syz.0.3248': attribute type 21 has an invalid length.
[  584.192218][T15613] netlink: 'syz.1.3251': attribute type 10 has an invalid length.
[  584.216611][T15613] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3251'.
[  584.820632][T15628] netlink: 'syz.1.3254': attribute type 10 has an invalid length.
[  584.829170][T15628] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.3254'.
[  584.842454][T15628] openvswitch: netlink: Flow key attr not present in new flow.
[  585.524503][T15634] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3257'.
[  585.764430][T15640] netlink: 'syz.3.3259': attribute type 21 has an invalid length.
[  585.795825][T15640] IPv6: NLM_F_CREATE should be specified when creating new route
[  586.036939][T15654] netlink: 'syz.0.3262': attribute type 9 has an invalid length.
[  586.490804][   T51] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[  586.798435][T15665] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3266'.
[  587.099713][T15672] FAULT_INJECTION: forcing a failure.
[  587.099713][T15672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.135404][T15672] CPU: 1 PID: 15672 Comm: syz.3.3267 Not tainted syzkaller #0
[  587.142927][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  587.153004][T15672] Call Trace:
[  587.156301][T15672]  <TASK>
[  587.159254][T15672]  dump_stack_lvl+0x18c/0x250
[  587.163961][T15672]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  587.170209][T15672]  ? show_regs_print_info+0x20/0x20
[  587.175431][T15672]  ? load_image+0x420/0x420
[  587.179976][T15672]  should_fail_ex+0x39d/0x4d0
[  587.184689][T15672]  _copy_from_user+0x2f/0xe0
[  587.189309][T15672]  __sys_bpf+0x23e/0x890
[  587.193576][T15672]  ? bpf_link_show_fdinfo+0x390/0x390
[  587.198989][T15672]  ? lock_chain_count+0x20/0x20
[  587.203871][T15672]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  587.209891][T15672]  __x64_sys_bpf+0x7c/0x90
[  587.214338][T15672]  do_syscall_64+0x55/0xb0
[  587.218784][T15672]  ? clear_bhb_loop+0x40/0x90
[  587.223480][T15672]  ? clear_bhb_loop+0x40/0x90
[  587.228178][T15672]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  587.234094][T15672] RIP: 0033:0x7f3f8779ce59
[  587.238534][T15672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.258165][T15672] RSP: 002b:00007f3f88572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  587.266610][T15672] RAX: ffffffffffffffda RBX: 00007f3f87a15fa0 RCX: 00007f3f8779ce59
[  587.274607][T15672] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000f
[  587.282602][T15672] RBP: 00007f3f88572090 R08: 0000000000000000 R09: 0000000000000000
[  587.290597][T15672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.298593][T15672] R13: 00007f3f87a16038 R14: 00007f3f87a15fa0 R15: 00007ffcf0d6cb38
[  587.306604][T15672]  </TASK>
[  587.437988][T15685] netlink: 'syz.0.3271': attribute type 17 has an invalid length.
[  587.457994][T15685] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  587.485425][T15685] netlink: 'syz.0.3271': attribute type 3 has an invalid length.
[  587.493913][T15685] netlink: 'syz.0.3271': attribute type 1 has an invalid length.
[  587.504009][T15685] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3271'.
[  588.127435][T15698] netlink: 'syz.1.3279': attribute type 29 has an invalid length.
[  588.156337][T15698] netlink: 'syz.1.3279': attribute type 29 has an invalid length.
[  588.191033][T15698] netlink: 'syz.1.3279': attribute type 29 has an invalid length.
[  588.244395][T15698] netlink: 'syz.1.3279': attribute type 29 has an invalid length.
[  588.270921][T15703] FAULT_INJECTION: forcing a failure.
[  588.270921][T15703] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  588.292066][T15698] netlink: 'syz.1.3279': attribute type 29 has an invalid length.
[  588.429267][T15703] CPU: 1 PID: 15703 Comm: syz.0.3280 Not tainted syzkaller #0
[  588.436788][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  588.446853][T15703] Call Trace:
[  588.450143][T15703]  <TASK>
[  588.453083][T15703]  dump_stack_lvl+0x18c/0x250
[  588.457781][T15703]  ? show_regs_print_info+0x20/0x20
[  588.462991][T15703]  ? load_image+0x420/0x420
[  588.467513][T15703]  ? __might_fault+0xaa/0x120
[  588.472204][T15703]  should_fail_ex+0x39d/0x4d0
[  588.476905][T15703]  copyin+0x1a/0x90
[  588.480727][T15703]  _copy_from_iter+0x54f/0x12e0
[  588.485592][T15703]  ? slab_post_alloc_hook+0x8a/0x4b0
[  588.490898][T15703]  ? __virt_addr_valid+0x18c/0x540
[  588.496034][T15703]  ? copyout_mc+0x70/0x70
[  588.500378][T15703]  ? __virt_addr_valid+0x18c/0x540
[  588.505504][T15703]  ? __virt_addr_valid+0x18c/0x540
[  588.510624][T15703]  ? __virt_addr_valid+0x469/0x540
[  588.515752][T15703]  ? __check_object_size+0x506/0xa20
[  588.521049][T15703]  netlink_sendmsg+0x76b/0xbf0
[  588.525832][T15703]  ? netlink_getsockopt+0x590/0x590
[  588.531043][T15703]  ? aa_sock_msg_perm+0x94/0x150
[  588.535993][T15703]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  588.541291][T15703]  ? security_socket_sendmsg+0x80/0xa0
[  588.546759][T15703]  ? netlink_getsockopt+0x590/0x590
[  588.551967][T15703]  ____sys_sendmsg+0x5ba/0x960
[  588.556752][T15703]  ? __asan_memset+0x22/0x40
[  588.561353][T15703]  ? __sys_sendmsg_sock+0x30/0x30
[  588.566382][T15703]  ? __import_iovec+0x3fa/0x850
[  588.571250][T15703]  ? import_iovec+0x73/0xa0
[  588.575764][T15703]  ___sys_sendmsg+0x2a6/0x360
[  588.580465][T15703]  ? __sys_sendmsg+0x2a0/0x2a0
[  588.585269][T15703]  ? __lock_acquire+0x7d40/0x7d40
[  588.590330][T15703]  __se_sys_sendmsg+0x1c2/0x2b0
[  588.595198][T15703]  ? __x64_sys_sendmsg+0x80/0x80
[  588.600164][T15703]  ? lockdep_hardirqs_on+0x98/0x150
[  588.605381][T15703]  do_syscall_64+0x55/0xb0
[  588.609807][T15703]  ? clear_bhb_loop+0x40/0x90
[  588.614494][T15703]  ? clear_bhb_loop+0x40/0x90
[  588.619177][T15703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  588.625084][T15703] RIP: 0033:0x7f6e4dd9ce59
[  588.629505][T15703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.649121][T15703] RSP: 002b:00007f6e4bfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  588.657545][T15703] RAX: ffffffffffffffda RBX: 00007f6e4e016090 RCX: 00007f6e4dd9ce59
[  588.665523][T15703] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003
[  588.673503][T15703] RBP: 00007f6e4bfd5090 R08: 0000000000000000 R09: 0000000000000000
[  588.681489][T15703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  588.689473][T15703] R13: 00007f6e4e016128 R14: 00007f6e4e016090 R15: 00007ffe0c28c5c8
[  588.697476][T15703]  </TASK>
[  589.018020][T15712] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3284'.
[  589.539221][T15725] netlink: 'syz.2.3289': attribute type 4 has an invalid length.
[  589.550076][T15725] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3289'.
[  590.674078][T15732] netlink: 'syz.0.3292': attribute type 29 has an invalid length.
[  590.700167][T15732] FAULT_INJECTION: forcing a failure.
[  590.700167][T15732] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  590.744515][T15732] CPU: 0 PID: 15732 Comm: syz.0.3292 Not tainted syzkaller #0
[  590.752029][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  590.762094][T15732] Call Trace:
[  590.765379][T15732]  <TASK>
[  590.768323][T15732]  dump_stack_lvl+0x18c/0x250
[  590.773019][T15732]  ? show_regs_print_info+0x20/0x20
[  590.778229][T15732]  ? load_image+0x420/0x420
[  590.782747][T15732]  ? __lock_acquire+0x7d40/0x7d40
[  590.787798][T15732]  ? mark_lock+0x94/0x320
[  590.792142][T15732]  should_fail_ex+0x39d/0x4d0
[  590.796838][T15732]  prepare_alloc_pages+0x1e2/0x5f0
[  590.801964][T15732]  __alloc_pages+0x134/0x460
[  590.806564][T15732]  ? zone_statistics+0x170/0x170
[  590.811518][T15732]  ? do_wp_page+0x7ca/0x35f0
[  590.816116][T15732]  ? do_wp_page+0xfc5/0x35f0
[  590.820718][T15732]  __folio_alloc+0x10/0x20
[  590.825140][T15732]  vma_alloc_folio+0x47a/0x8f0
[  590.829921][T15732]  do_wp_page+0x1243/0x35f0
[  590.834456][T15732]  ? folio_put+0xd0/0xd0
[  590.838708][T15732]  ? do_raw_spin_lock+0x11f/0x2c0
[  590.843750][T15732]  ? __rwlock_init+0x150/0x150
[  590.848536][T15732]  handle_mm_fault+0x135d/0x4c00
[  590.853483][T15732]  ? handle_mm_fault+0xe7/0x4c00
[  590.858442][T15732]  ? numa_migrate_prep+0x350/0x350
[  590.863579][T15732]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  590.868876][T15732]  do_user_addr_fault+0x730/0x12c0
[  590.874022][T15732]  exc_page_fault+0x64/0x100
[  590.878634][T15732]  asm_exc_page_fault+0x26/0x30
[  590.883503][T15732] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  590.889335][T15732] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  590.908951][T15732] RSP: 0018:ffffc9000b48f630 EFLAGS: 00050202
[  590.915031][T15732] RAX: ffffffff84282801 RBX: 0000000000000d8f RCX: 0000000000000d8f
[  590.923009][T15732] RDX: 0000000000000000 RSI: ffff88802e9ba0d9 RDI: 0000200000003940
[  590.930986][T15732] RBP: ffffc9000b48f7c0 R08: ffff88802e9bae67 R09: 1ffff11005d375cc
[  590.938972][T15732] R10: dffffc0000000000 R11: ffffed1005d375cd R12: 00002000000046cf
[  590.946950][T15732] R13: ffffc9000b48fe40 R14: 0000200000003940 R15: ffff88802e9ba0d9
[  590.954937][T15732]  ? _copy_to_iter+0x10d1/0x1120
[  590.959899][T15732]  copyout+0x70/0x90
[  590.963812][T15732]  _copy_to_iter+0x432/0x1120
[  590.968515][T15732]  ? iov_iter_init+0x1e0/0x1e0
[  590.973300][T15732]  ? __virt_addr_valid+0x18c/0x540
[  590.978422][T15732]  ? __virt_addr_valid+0x469/0x540
[  590.983544][T15732]  ? __phys_addr_symbol+0x2f/0x70
[  590.988589][T15732]  __skb_datagram_iter+0xdb/0x780
[  590.993629][T15732]  ? skb_copy_datagram_iter+0x200/0x200
[  590.999188][T15732]  skb_copy_datagram_iter+0xb1/0x200
[  591.004487][T15732]  netlink_recvmsg+0x2d4/0xe60
[  591.009273][T15732]  ? netlink_sendmsg+0xbf0/0xbf0
[  591.014231][T15732]  ? aa_af_perm+0x330/0x330
[  591.018770][T15732]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  591.024085][T15732]  ? security_socket_recvmsg+0x89/0xb0
[  591.029562][T15732]  ? netlink_sendmsg+0xbf0/0xbf0
[  591.034518][T15732]  ____sys_recvmsg+0x2ce/0x5e0
[  591.039309][T15732]  ? __sys_recvmsg_sock+0x50/0x50
[  591.044390][T15732]  ? import_iovec+0x73/0xa0
[  591.048910][T15732]  ___sys_recvmsg+0x216/0x590
[  591.053607][T15732]  ? __sys_recvmsg+0x2a0/0x2a0
[  591.058389][T15732]  ? ksys_write+0x1c4/0x260
[  591.062918][T15732]  ? __fget_files+0x43d/0x4b0
[  591.067622][T15732]  __x64_sys_recvmsg+0x20c/0x2e0
[  591.072577][T15732]  ? ___sys_recvmsg+0x590/0x590
[  591.077457][T15732]  ? lockdep_hardirqs_on+0x98/0x150
[  591.082689][T15732]  do_syscall_64+0x55/0xb0
[  591.087132][T15732]  ? clear_bhb_loop+0x40/0x90
[  591.091830][T15732]  ? clear_bhb_loop+0x40/0x90
[  591.096524][T15732]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.102449][T15732] RIP: 0033:0x7f6e4dd9ce59
[  591.106888][T15732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.126512][T15732] RSP: 002b:00007f6e4bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  591.134948][T15732] RAX: ffffffffffffffda RBX: 00007f6e4e015fa0 RCX: 00007f6e4dd9ce59
[  591.142946][T15732] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000000000000005
[  591.150933][T15732] RBP: 00007f6e4bff6090 R08: 0000000000000000 R09: 0000000000000000
[  591.158918][T15732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.166902][T15732] R13: 00007f6e4e016038 R14: 00007f6e4e015fa0 R15: 00007ffe0c28c5c8
[  591.174901][T15732]  </TASK>
[  591.342256][T15734] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3293'.
[  592.872628][T15751] validate_nla: 4 callbacks suppressed
[  592.872646][T15751] netlink: 'syz.2.3300': attribute type 1 has an invalid length.
[  592.900079][T15751] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3300'.
[  592.950124][T15751] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3300'.
[  593.364572][ T9086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  594.066894][T15794] netlink: 'syz.0.3318': attribute type 10 has an invalid length.
[  594.095792][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3319'.
[  594.341840][T15811] FAULT_INJECTION: forcing a failure.
[  594.341840][T15811] name failslab, interval 1, probability 0, space 0, times 0
[  594.354834][T15811] CPU: 1 PID: 15811 Comm: syz.1.3324 Not tainted syzkaller #0
[  594.362330][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  594.372417][T15811] Call Trace:
[  594.375724][T15811]  <TASK>
[  594.378676][T15811]  dump_stack_lvl+0x18c/0x250
[  594.383396][T15811]  ? show_regs_print_info+0x20/0x20
[  594.388638][T15811]  ? load_image+0x420/0x420
[  594.393161][T15811]  ? verify_lock_unused+0x140/0x140
[  594.398375][T15811]  ? perf_trace_lock_acquire+0x34f/0x410
[  594.404033][T15811]  should_fail_ex+0x39d/0x4d0
[  594.408731][T15811]  should_failslab+0x9/0x20
[  594.413244][T15811]  slab_pre_alloc_hook+0x59/0x310
[  594.418283][T15811]  kmem_cache_alloc+0x5a/0x2d0
[  594.423050][T15811]  ? skb_clone+0x1eb/0x370
[  594.427479][T15811]  skb_clone+0x1eb/0x370
[  594.431743][T15811]  __netlink_deliver_tap+0x41c/0x830
[  594.437051][T15811]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.442252][T15811]  netlink_deliver_tap+0x19c/0x1b0
[  594.447368][T15811]  netlink_sendskb+0x68/0x130
[  594.452141][T15811]  netlink_ack+0xce1/0x1180
[  594.456686][T15811]  ? netlink_dump+0xe50/0xe50
[  594.461365][T15811]  ? ref_tracker_free+0x690/0x840
[  594.466410][T15811]  netlink_rcv_skb+0x2c5/0x4d0
[  594.471178][T15811]  ? rtnetlink_bind+0x80/0x80
[  594.475863][T15811]  ? netlink_ack+0x1180/0x1180
[  594.480650][T15811]  ? __lock_acquire+0x7d40/0x7d40
[  594.485698][T15811]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.490919][T15811]  netlink_unicast+0x751/0x8d0
[  594.495706][T15811]  netlink_sendmsg+0x8d0/0xbf0
[  594.500490][T15811]  ? netlink_getsockopt+0x590/0x590
[  594.505696][T15811]  ? aa_sock_msg_perm+0x94/0x150
[  594.510651][T15811]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  594.515940][T15811]  ? security_socket_sendmsg+0x80/0xa0
[  594.521401][T15811]  ? netlink_getsockopt+0x590/0x590
[  594.526605][T15811]  ____sys_sendmsg+0x5ba/0x960
[  594.531389][T15811]  ? __asan_memset+0x22/0x40
[  594.535987][T15811]  ? __sys_sendmsg_sock+0x30/0x30
[  594.541017][T15811]  ? __import_iovec+0x5f2/0x850
[  594.545884][T15811]  ? import_iovec+0x73/0xa0
[  594.550394][T15811]  ___sys_sendmsg+0x2a6/0x360
[  594.555071][T15811]  ? get_pid_task+0x20/0x1e0
[  594.559673][T15811]  ? __sys_sendmsg+0x2a0/0x2a0
[  594.564470][T15811]  ? __lock_acquire+0x7d40/0x7d40
[  594.569538][T15811]  __se_sys_sendmsg+0x1c2/0x2b0
[  594.574397][T15811]  ? __x64_sys_sendmsg+0x80/0x80
[  594.579372][T15811]  ? lockdep_hardirqs_on+0x98/0x150
[  594.584584][T15811]  do_syscall_64+0x55/0xb0
[  594.589007][T15811]  ? clear_bhb_loop+0x40/0x90
[  594.593686][T15811]  ? clear_bhb_loop+0x40/0x90
[  594.598369][T15811]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  594.604269][T15811] RIP: 0033:0x7f0a73b9ce59
[  594.608690][T15811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.628298][T15811] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  594.636717][T15811] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  594.644691][T15811] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  594.652664][T15811] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  594.660637][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.668614][T15811] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  594.676624][T15811]  </TASK>
[  595.004972][T15824] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3331'.
[  595.014760][T15824] batadv_slave_1: entered promiscuous mode
[  595.023627][T15824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3331'.
[  595.056753][T15824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.073979][T15824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.093186][T15824] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  595.108185][T15824] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  595.124904][T15824] bond0 (unregistering): Released all slaves
[  595.501288][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3338'.
[  595.513957][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3338'.
[  595.525358][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3338'.
[  595.539306][T15847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3338'.
[  596.708816][T15882] tap0: tun_chr_ioctl cmd 35108
[  596.715464][T15882] netlink: 'syz.2.3354': attribute type 2 has an invalid length.
[  596.725169][T15882] __nla_validate_parse: 3 callbacks suppressed
[  596.725184][T15882] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3354'.
[  598.676616][T15940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3371'.
[  598.872487][T15953] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3377'.
[  599.178275][T15970] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3384'.
[  599.194251][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.205971][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.216400][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  599.232685][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  599.264772][T15970] batadv_slave_1: entered promiscuous mode
[  599.272939][T15971] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3384'.
[  599.329891][T15973] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3385'.
[  599.425164][T15978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3387'.
[  599.437128][T15979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3387'.
[  599.447478][T15978] C: renamed from team_slave_0 (while UP)
[  599.479100][T15978] netlink: 'syz.3.3387': attribute type 1 has an invalid length.
[  599.483797][T15972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  599.486918][T15978] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3387'.
[  599.507949][T15978] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  599.523448][T15979] netlink: 'syz.3.3387': attribute type 1 has an invalid length.
[  599.532486][T15979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3387'.
[  599.542712][T15979] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  599.676215][   T51] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  602.963757][T16025] netlink: 'syz.0.3403': attribute type 29 has an invalid length.
[  602.993444][T16025] netlink: 'syz.0.3403': attribute type 29 has an invalid length.
[  603.003241][T16025] netlink: 'syz.0.3403': attribute type 29 has an invalid length.
[  603.016866][T16028] netlink: 703 bytes leftover after parsing attributes in process `syz.2.3405'.
[  603.259848][T16043] netlink: 'syz.1.3412': attribute type 29 has an invalid length.
[  603.268996][T16043] netlink: 'syz.1.3412': attribute type 29 has an invalid length.
[  603.278378][T16043] netlink: 'syz.1.3412': attribute type 29 has an invalid length.
[  603.288241][T16043] netlink: 'syz.1.3412': attribute type 29 has an invalid length.
[  603.298894][T16043] FAULT_INJECTION: forcing a failure.
[  603.298894][T16043] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  603.325668][T16043] CPU: 1 PID: 16043 Comm: syz.1.3412 Not tainted syzkaller #0
[  603.333181][T16043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  603.343262][T16043] Call Trace:
[  603.346558][T16043]  <TASK>
[  603.349506][T16043]  dump_stack_lvl+0x18c/0x250
[  603.354211][T16043]  ? show_regs_print_info+0x20/0x20
[  603.359427][T16043]  ? load_image+0x420/0x420
[  603.363931][T16043]  ? __lock_acquire+0x7d40/0x7d40
[  603.368949][T16043]  ? mark_lock+0x94/0x320
[  603.373275][T16043]  should_fail_ex+0x39d/0x4d0
[  603.377954][T16043]  prepare_alloc_pages+0x1e2/0x5f0
[  603.383062][T16043]  __alloc_pages+0x134/0x460
[  603.387644][T16043]  ? zone_statistics+0x170/0x170
[  603.392577][T16043]  ? do_wp_page+0x7ca/0x35f0
[  603.397155][T16043]  ? do_wp_page+0xfc5/0x35f0
[  603.401738][T16043]  __folio_alloc+0x10/0x20
[  603.406145][T16043]  vma_alloc_folio+0x47a/0x8f0
[  603.410906][T16043]  do_wp_page+0x1243/0x35f0
[  603.415411][T16043]  ? folio_put+0xd0/0xd0
[  603.419641][T16043]  ? do_raw_spin_lock+0x11f/0x2c0
[  603.424664][T16043]  ? __rwlock_init+0x150/0x150
[  603.429426][T16043]  handle_mm_fault+0x135d/0x4c00
[  603.434358][T16043]  ? handle_mm_fault+0xe7/0x4c00
[  603.439293][T16043]  ? numa_migrate_prep+0x350/0x350
[  603.444406][T16043]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  603.449685][T16043]  do_user_addr_fault+0x730/0x12c0
[  603.454798][T16043]  exc_page_fault+0x64/0x100
[  603.459388][T16043]  asm_exc_page_fault+0x26/0x30
[  603.464233][T16043] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  603.470032][T16043] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  603.489640][T16043] RSP: 0018:ffffc90003237630 EFLAGS: 00050202
[  603.495707][T16043] RAX: ffffffff84282801 RBX: 0000000000000d8f RCX: 0000000000000d8f
[  603.503674][T16043] RDX: 0000000000000000 RSI: ffff88804f15c0d9 RDI: 0000200000003940
[  603.511645][T16043] RBP: ffffc900032377c0 R08: ffff88804f15ce67 R09: 1ffff11009e2b9cc
[  603.519615][T16043] R10: dffffc0000000000 R11: ffffed1009e2b9cd R12: 00002000000046cf
[  603.527583][T16043] R13: ffffc90003237e40 R14: 0000200000003940 R15: ffff88804f15c0d9
[  603.535559][T16043]  ? _copy_to_iter+0x10d1/0x1120
[  603.540510][T16043]  copyout+0x70/0x90
[  603.544403][T16043]  _copy_to_iter+0x432/0x1120
[  603.549086][T16043]  ? iov_iter_init+0x1e0/0x1e0
[  603.553846][T16043]  ? __virt_addr_valid+0x18c/0x540
[  603.558951][T16043]  ? __virt_addr_valid+0x469/0x540
[  603.564055][T16043]  ? __phys_addr_symbol+0x2f/0x70
[  603.569077][T16043]  __skb_datagram_iter+0xdb/0x780
[  603.574096][T16043]  ? skb_copy_datagram_iter+0x200/0x200
[  603.579637][T16043]  skb_copy_datagram_iter+0xb1/0x200
[  603.584913][T16043]  netlink_recvmsg+0x2d4/0xe60
[  603.589681][T16043]  ? netlink_sendmsg+0xbf0/0xbf0
[  603.594611][T16043]  ? aa_af_perm+0x330/0x330
[  603.599104][T16043]  ? __lock_acquire+0x1273/0x7d40
[  603.604125][T16043]  ? verify_lock_unused+0x140/0x140
[  603.609319][T16043]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  603.614598][T16043]  ? security_socket_recvmsg+0x89/0xb0
[  603.620047][T16043]  ? netlink_sendmsg+0xbf0/0xbf0
[  603.624976][T16043]  ____sys_recvmsg+0x2ce/0x5e0
[  603.629739][T16043]  ? __sys_recvmsg_sock+0x50/0x50
[  603.634765][T16043]  ? import_iovec+0x73/0xa0
[  603.639259][T16043]  ___sys_recvmsg+0x216/0x590
[  603.643938][T16043]  ? __sys_recvmsg+0x2a0/0x2a0
[  603.648699][T16043]  ? ksys_write+0x1c4/0x260
[  603.653204][T16043]  ? __fget_files+0x43d/0x4b0
[  603.657891][T16043]  __x64_sys_recvmsg+0x20c/0x2e0
[  603.662837][T16043]  ? ___sys_recvmsg+0x590/0x590
[  603.667691][T16043]  ? lockdep_hardirqs_on+0x98/0x150
[  603.672885][T16043]  do_syscall_64+0x55/0xb0
[  603.677315][T16043]  ? clear_bhb_loop+0x40/0x90
[  603.681982][T16043]  ? clear_bhb_loop+0x40/0x90
[  603.686648][T16043]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  603.692538][T16043] RIP: 0033:0x7f0a73b9ce59
[  603.696945][T16043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  603.716546][T16043] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  603.724951][T16043] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  603.732922][T16043] RDX: 0000000000000000 RSI: 0000200000001c80 RDI: 0000000000000003
[  603.740884][T16043] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  603.748855][T16043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  603.756815][T16043] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  603.764804][T16043]  </TASK>
[  603.780371][T16043] netlink: 'syz.1.3412': attribute type 29 has an invalid length.
[  604.127084][T16057] geneve1: entered promiscuous mode
[  604.140287][T16057] team0: Port device geneve1 added
[  604.363204][T16069] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3420'.
[  604.445859][T16073] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3420'.
[  605.115382][T16089] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3426'.
[  605.237140][T16090] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3426'.
[  605.471631][T16097] validate_nla: 2 callbacks suppressed
[  605.471709][T16097] netlink: 'syz.3.3429': attribute type 29 has an invalid length.
[  605.507917][T16094] syzkaller0: entered promiscuous mode
[  605.526497][T16094] syzkaller0: entered allmulticast mode
[  606.232373][T16097] netlink: 'syz.3.3429': attribute type 29 has an invalid length.
[  606.251172][T16102] netlink: 'syz.3.3429': attribute type 29 has an invalid length.
[  609.702886][T16129] netlink: 'syz.0.3438': attribute type 10 has an invalid length.
[  609.715839][T16129] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3438'.
[  610.111185][T16134] team0: Port device team_slave_0 removed
[  610.202493][T16140] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3440'.
[  610.299788][T16145] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.3440'.
[  610.394822][T16143] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  610.425168][T16143] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  610.528703][T16149] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3444'.
[  611.181127][T16163] FAULT_INJECTION: forcing a failure.
[  611.181127][T16163] name failslab, interval 1, probability 0, space 0, times 0
[  611.195680][T16163] CPU: 1 PID: 16163 Comm: syz.3.3450 Not tainted syzkaller #0
[  611.203184][T16163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  611.213261][T16163] Call Trace:
[  611.216579][T16163]  <TASK>
[  611.219533][T16163]  dump_stack_lvl+0x18c/0x250
[  611.224238][T16163]  ? show_regs_print_info+0x20/0x20
[  611.229476][T16163]  ? load_image+0x420/0x420
[  611.233999][T16163]  ? __might_sleep+0xe0/0xe0
[  611.238612][T16163]  ? __lock_acquire+0x7d40/0x7d40
[  611.243665][T16163]  should_fail_ex+0x39d/0x4d0
[  611.248378][T16163]  should_failslab+0x9/0x20
[  611.252906][T16163]  slab_pre_alloc_hook+0x59/0x310
[  611.257958][T16163]  ? __xdp_reg_mem_model+0x1e4/0x5c0
[  611.263248][T16163]  __kmem_cache_alloc_node+0x53/0x250
[  611.268624][T16163]  ? __asan_memset+0x22/0x40
[  611.273211][T16163]  ? __xdp_reg_mem_model+0x1e4/0x5c0
[  611.278488][T16163]  kmalloc_trace+0x2a/0xe0
[  611.282903][T16163]  __xdp_reg_mem_model+0x1e4/0x5c0
[  611.288011][T16163]  ? kvmalloc_node+0x70/0x180
[  611.292683][T16163]  ? kvmalloc_node+0x70/0x180
[  611.297353][T16163]  ? xdp_reg_mem_model+0x40/0x40
[  611.302298][T16163]  xdp_reg_mem_model+0x22/0x40
[  611.307055][T16163]  bpf_test_run_xdp_live+0x262/0x1b20
[  611.312432][T16163]  ? 0xffffffffa0004740
[  611.316583][T16163]  ? 0xffffffffa0004740
[  611.320728][T16163]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  611.326612][T16163]  ? 0xffffffffa0004740
[  611.330761][T16163]  ? xdp_convert_md_to_buff+0x330/0x330
[  611.336327][T16163]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  611.342568][T16163]  ? _copy_from_user+0xa5/0xe0
[  611.347329][T16163]  ? bpf_test_init+0x119/0x140
[  611.352096][T16163]  ? xdp_convert_md_to_buff+0x5b/0x330
[  611.357553][T16163]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  611.362930][T16163]  ? dev_put+0x80/0x80
[  611.367003][T16163]  ? dev_put+0x80/0x80
[  611.371067][T16163]  bpf_prog_test_run+0x321/0x390
[  611.376000][T16163]  __sys_bpf+0x49d/0x890
[  611.380234][T16163]  ? bpf_link_show_fdinfo+0x390/0x390
[  611.385612][T16163]  ? lock_chain_count+0x20/0x20
[  611.390467][T16163]  __x64_sys_bpf+0x7c/0x90
[  611.394877][T16163]  do_syscall_64+0x55/0xb0
[  611.399289][T16163]  ? clear_bhb_loop+0x40/0x90
[  611.403959][T16163]  ? clear_bhb_loop+0x40/0x90
[  611.408628][T16163]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  611.414518][T16163] RIP: 0033:0x7f3f8779ce59
[  611.418927][T16163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.438529][T16163] RSP: 002b:00007f3f88572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  611.446938][T16163] RAX: ffffffffffffffda RBX: 00007f3f87a15fa0 RCX: 00007f3f8779ce59
[  611.454903][T16163] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  611.462864][T16163] RBP: 00007f3f88572090 R08: 0000000000000000 R09: 0000000000000000
[  611.470824][T16163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.478785][T16163] R13: 00007f3f87a16038 R14: 00007f3f87a15fa0 R15: 00007ffcf0d6cb38
[  611.486761][T16163]  </TASK>
[  611.699541][T16172] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3454'.
[  611.725782][T16172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  611.749662][T16172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.769600][T16172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  611.799621][T16172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  611.816131][T16172] batadv_slave_1: entered promiscuous mode
[  612.322143][T16180] team_slave_0: left promiscuous mode
[  612.424107][T16180] team0: Port device team_slave_0 removed
[  612.668584][T16190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3459'.
[  612.708290][T16192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3461'.
[  612.785995][T16198] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.3459'.
[  613.163409][T16202] FAULT_INJECTION: forcing a failure.
[  613.163409][T16202] name failslab, interval 1, probability 0, space 0, times 0
[  613.182611][T16202] CPU: 0 PID: 16202 Comm: syz.0.3464 Not tainted syzkaller #0
[  613.190101][T16202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  613.200160][T16202] Call Trace:
[  613.203450][T16202]  <TASK>
[  613.206383][T16202]  dump_stack_lvl+0x18c/0x250
[  613.211073][T16202]  ? show_regs_print_info+0x20/0x20
[  613.216291][T16202]  ? load_image+0x420/0x420
[  613.220796][T16202]  ? __lock_acquire+0x7d40/0x7d40
[  613.225826][T16202]  should_fail_ex+0x39d/0x4d0
[  613.230526][T16202]  should_failslab+0x9/0x20
[  613.235045][T16202]  slab_pre_alloc_hook+0x59/0x310
[  613.240077][T16202]  ? kvmalloc_node+0x70/0x180
[  613.244764][T16202]  ? kvmalloc_node+0x70/0x180
[  613.249437][T16202]  __kmem_cache_alloc_node+0x53/0x250
[  613.254814][T16202]  ? kvmalloc_node+0x70/0x180
[  613.259487][T16202]  __kmalloc_node+0xa4/0x230
[  613.264079][T16202]  kvmalloc_node+0x70/0x180
[  613.268589][T16202]  map_get_next_key+0x295/0x620
[  613.273435][T16202]  ? __might_fault+0xc6/0x120
[  613.278115][T16202]  __sys_bpf+0x715/0x890
[  613.282354][T16202]  ? bpf_link_show_fdinfo+0x390/0x390
[  613.287732][T16202]  ? lock_chain_count+0x20/0x20
[  613.292585][T16202]  __x64_sys_bpf+0x7c/0x90
[  613.296999][T16202]  do_syscall_64+0x55/0xb0
[  613.301408][T16202]  ? clear_bhb_loop+0x40/0x90
[  613.306072][T16202]  ? clear_bhb_loop+0x40/0x90
[  613.310751][T16202]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  613.316640][T16202] RIP: 0033:0x7f6e4dd9ce59
[  613.321048][T16202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.340661][T16202] RSP: 002b:00007f6e4bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  613.349069][T16202] RAX: ffffffffffffffda RBX: 00007f6e4e015fa0 RCX: 00007f6e4dd9ce59
[  613.357037][T16202] RDX: 0000000000000020 RSI: 0000200000000700 RDI: 0000000000000004
[  613.364998][T16202] RBP: 00007f6e4bff6090 R08: 0000000000000000 R09: 0000000000000000
[  613.372959][T16202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.381009][T16202] R13: 00007f6e4e016038 R14: 00007f6e4e015fa0 R15: 00007ffe0c28c5c8
[  613.388990][T16202]  </TASK>
[  613.574105][T16207] syzkaller0: entered promiscuous mode
[  613.579698][T16207] syzkaller0: entered allmulticast mode
[  613.894886][T16220] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3471'.
[  613.994839][T16222] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode
[  614.007986][T16222] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode
[  614.122308][T16230] C: left promiscuous mode
[  614.139838][T16230] C: left allmulticast mode
[  614.231959][T16230] team0: Port device C removed
[  617.413146][T16297] netlink: 'syz.0.3492': attribute type 1 has an invalid length.
[  617.422699][T16297] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.3492'.
[  617.440585][T16297] netlink: 'syz.0.3492': attribute type 10 has an invalid length.
[  617.449307][T16297] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3492'.
[  617.463654][T16297] caif0: entered promiscuous mode
[  617.469459][T16297] caif0: entered allmulticast mode
[  617.474927][T16297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  617.679166][T16304] sctp: [Deprecated]: syz.1.3494 (pid 16304) Use of int in max_burst socket option deprecated.
[  617.679166][T16304] Use struct sctp_assoc_value instead
[  617.843175][T16310] netlink: 'syz.2.3497': attribute type 6 has an invalid length.
[  617.852928][T16310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3497'.
[  618.276252][T16322] netlink: 'syz.2.3503': attribute type 10 has an invalid length.
[  618.302178][T16322] team0: Device ipvlan1 failed to register rx_handler
[  618.380422][T16322] syz.2.3503 (16322) used greatest stack depth: 17576 bytes left
[  619.269025][T16357] syzkaller0: entered promiscuous mode
[  619.288207][T16357] syzkaller0: entered allmulticast mode
[  619.644695][T16374] netlink: 'syz.1.3523': attribute type 10 has an invalid length.
[  619.653508][T16374] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3523'.
[  619.686136][T16375] netlink: 'syz.1.3523': attribute type 10 has an invalid length.
[  619.719770][T16375] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3523'.
[  620.069167][T16374] tun0: tun_chr_ioctl cmd 2147767520
[  620.410584][T16392] netlink: 'syz.1.3527': attribute type 10 has an invalid length.
[  620.466819][T16391] netlink: 'syz.0.3528': attribute type 16 has an invalid length.
[  620.535786][T16391] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3528'.
[  621.296155][T15931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  621.513239][T16405] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3533'.
[  621.550249][T16405] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  621.591711][T16405] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  621.644274][T16404] syzkaller0: entered promiscuous mode
[  621.650290][T16404] syzkaller0: entered allmulticast mode
[  621.694450][T16409] netlink: 'syz.1.3535': attribute type 27 has an invalid length.
[  621.722112][T16409] netlink: 'syz.1.3535': attribute type 4 has an invalid length.
[  621.763682][T16409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3535'.
[  624.004531][T16444] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3545'.
[  624.500879][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  624.507427][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  626.406577][ T2952] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  627.098179][T16461] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3551'.
[  627.180763][T16465] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3549'.
[  627.811336][T16488] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3559'.
[  628.182076][T16496] netlink: 'syz.3.3562': attribute type 10 has an invalid length.
[  628.195951][T16496] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3562'.
[  628.206345][T16496] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  628.288179][T16496] batman_adv: batadv0: Interface deactivated: vlan1
[  628.369698][T16503] FAULT_INJECTION: forcing a failure.
[  628.369698][T16503] name failslab, interval 1, probability 0, space 0, times 0
[  628.383502][T16503] CPU: 0 PID: 16503 Comm: syz.1.3564 Not tainted syzkaller #0
[  628.390997][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  628.401071][T16503] Call Trace:
[  628.404340][T16503]  <TASK>
[  628.407262][T16503]  dump_stack_lvl+0x18c/0x250
[  628.411929][T16503]  ? show_regs_print_info+0x20/0x20
[  628.417111][T16503]  ? load_image+0x420/0x420
[  628.421598][T16503]  ? __might_sleep+0xe0/0xe0
[  628.426175][T16503]  ? __lock_acquire+0x7d40/0x7d40
[  628.431185][T16503]  should_fail_ex+0x39d/0x4d0
[  628.435866][T16503]  should_failslab+0x9/0x20
[  628.440384][T16503]  slab_pre_alloc_hook+0x59/0x310
[  628.445424][T16503]  ? sk_prot_alloc+0xe7/0x210
[  628.450094][T16503]  ? sk_prot_alloc+0xe7/0x210
[  628.454756][T16503]  __kmem_cache_alloc_node+0x53/0x250
[  628.460119][T16503]  ? sk_prot_alloc+0xe7/0x210
[  628.464781][T16503]  __kmalloc+0xa4/0x230
[  628.468927][T16503]  sk_prot_alloc+0xe7/0x210
[  628.473413][T16503]  ? sk_alloc+0x24/0x360
[  628.477644][T16503]  sk_alloc+0x3a/0x360
[  628.481701][T16503]  ? bpf_ctx_init+0x163/0x1a0
[  628.486374][T16503]  ? bpf_prog_test_run_skb+0x279/0x18c0
[  628.491931][T16503]  bpf_prog_test_run_skb+0x3d1/0x18c0
[  628.497306][T16503]  ? __fget_files+0x28/0x4b0
[  628.501896][T16503]  ? __fget_files+0x43d/0x4b0
[  628.506614][T16503]  ? cpu_online+0x60/0x60
[  628.510937][T16503]  bpf_prog_test_run+0x321/0x390
[  628.515870][T16503]  __sys_bpf+0x49d/0x890
[  628.520110][T16503]  ? bpf_link_show_fdinfo+0x390/0x390
[  628.525484][T16503]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  628.531652][T16503]  __x64_sys_bpf+0x7c/0x90
[  628.536068][T16503]  do_syscall_64+0x55/0xb0
[  628.540477][T16503]  ? clear_bhb_loop+0x40/0x90
[  628.545143][T16503]  ? clear_bhb_loop+0x40/0x90
[  628.549811][T16503]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.555707][T16503] RIP: 0033:0x7f0a73b9ce59
[  628.560135][T16503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.579737][T16503] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  628.588148][T16503] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  628.596115][T16503] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  628.604105][T16503] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  628.612067][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.620034][T16503] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  628.628015][T16503]  </TASK>
[  629.036412][T16496] batman_adv: batadv0: Removing interface: vlan1
[  629.049132][T16496] batman_adv: batadv0: Removing interface: veth0_vlan
[  629.220224][T16517] netlink: 'syz.3.3570': attribute type 5 has an invalid length.
[  629.609786][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'.
[  629.839560][T16546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  629.999529][T16554] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  630.010370][T16554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  630.021893][T16554] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  630.031402][T16554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  630.127117][T16554] batadv0 (unregistering): left allmulticast mode
[  630.135298][T16554] batadv0 (unregistering): left promiscuous mode
[  630.145824][T16554] bridge0: port 4(batadv0) entered disabled state
[  632.450104][T16626] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3608'.
[  632.780200][T16636] syzkaller0: entered promiscuous mode
[  632.786083][T16636] syzkaller0: entered allmulticast mode
[  634.418248][T16638] mac80211_hwsim hwsim20 wlan0: left promiscuous mode
[  634.427353][T16638] mac80211_hwsim hwsim20 wlan0: left allmulticast mode
[  635.749327][T16668] FAULT_INJECTION: forcing a failure.
[  635.749327][T16668] name failslab, interval 1, probability 0, space 0, times 0
[  635.762043][T16668] CPU: 0 PID: 16668 Comm: syz.1.3631 Not tainted syzkaller #0
[  635.769519][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  635.779591][T16668] Call Trace:
[  635.782885][T16668]  <TASK>
[  635.785833][T16668]  dump_stack_lvl+0x18c/0x250
[  635.790539][T16668]  ? show_regs_print_info+0x20/0x20
[  635.795760][T16668]  ? load_image+0x420/0x420
[  635.800277][T16668]  ? __kmem_cache_alloc_node+0x13a/0x250
[  635.805928][T16668]  ? netdev_core_pick_tx+0x340/0x340
[  635.811243][T16668]  should_fail_ex+0x39d/0x4d0
[  635.815948][T16668]  should_failslab+0x9/0x20
[  635.820476][T16668]  slab_pre_alloc_hook+0x59/0x310
[  635.825517][T16668]  kmem_cache_alloc+0x5a/0x2d0
[  635.830290][T16668]  ? skb_clone+0x1eb/0x370
[  635.834722][T16668]  skb_clone+0x1eb/0x370
[  635.838988][T16668]  bpf_clone_redirect+0x167/0x4a0
[  635.844043][T16668]  bpf_prog_c08ef512837047f4+0x61/0x66
[  635.849519][T16668]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  635.855511][T16668]  ? perf_trace_preemptirq_template+0xac/0x330
[  635.861687][T16668]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  635.867691][T16668]  ? lockdep_softirqs_on+0x580/0x580
[  635.873000][T16668]  ? lock_chain_count+0x20/0x20
[  635.877863][T16668]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  635.884128][T16668]  ? __local_bh_disable_ip+0x108/0x1a0
[  635.889598][T16668]  ? __cant_sleep+0x220/0x220
[  635.894272][T16668]  ? __local_bh_enable_ip+0x13a/0x1c0
[  635.899637][T16668]  ? _local_bh_enable+0xa0/0xa0
[  635.904482][T16668]  ? bpf_test_timer_continue+0x135/0x380
[  635.910113][T16668]  ? bpf_test_run+0x174/0x870
[  635.914784][T16668]  bpf_test_run+0x2df/0x870
[  635.919292][T16668]  ? bpf_test_run+0x174/0x870
[  635.923970][T16668]  ? dst_hold+0x70/0x70
[  635.928123][T16668]  ? eth_get_headlen+0x210/0x210
[  635.933147][T16668]  bpf_prog_test_run_skb+0xdc8/0x18c0
[  635.938528][T16668]  ? cpu_online+0x60/0x60
[  635.942861][T16668]  bpf_prog_test_run+0x321/0x390
[  635.947805][T16668]  __sys_bpf+0x49d/0x890
[  635.952045][T16668]  ? bpf_link_show_fdinfo+0x390/0x390
[  635.957422][T16668]  ? lock_chain_count+0x20/0x20
[  635.962551][T16668]  __x64_sys_bpf+0x7c/0x90
[  635.966962][T16668]  do_syscall_64+0x55/0xb0
[  635.971372][T16668]  ? clear_bhb_loop+0x40/0x90
[  635.976041][T16668]  ? clear_bhb_loop+0x40/0x90
[  635.980711][T16668]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  635.986600][T16668] RIP: 0033:0x7f0a73b9ce59
[  635.991007][T16668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.010626][T16668] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  636.019048][T16668] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  636.027014][T16668] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  636.035087][T16668] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  636.043071][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  636.051134][T16668] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  636.059204][T16668]  </TASK>
[  637.566851][T16692] netlink: 'syz.2.3630': attribute type 10 has an invalid length.
[  637.741147][T16692] team0 (unregistering): Port device team_slave_1 removed
[  637.803084][T16692] team0 (unregistering): Port device macvlan0 removed
[  637.904803][T16692] team0 (unregistering): Port device geneve1 removed
[  638.003077][T16698] netlink: 'syz.0.3632': attribute type 17 has an invalid length.
[  638.012085][T16698] netlink: 'syz.0.3632': attribute type 16 has an invalid length.
[  638.022681][T16698] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3632'.
[  638.208896][T16706] netlink: 'syz.3.3634': attribute type 21 has an invalid length.
[  638.222911][T16706] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3634'.
[  638.447174][T16715] netlink: 'syz.3.3635': attribute type 1 has an invalid length.
[  638.495169][T16715] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  638.586384][T16723] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3640'.
[  639.804188][T16736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'.
[  640.146176][T16742] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3646'.
[  640.261910][T16748] sctp: [Deprecated]: syz.2.3650 (pid 16748) Use of struct sctp_assoc_value in delayed_ack socket option.
[  640.261910][T16748] Use struct sctp_sack_info instead
[  640.370717][T16758] netlink: 'syz.1.3652': attribute type 1 has an invalid length.
[  640.436274][T16758] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  640.467227][T16758] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3652'.
[  640.556278][T16764] bridge0: port 4(batadv0) entered blocking state
[  640.578754][T16764] bridge0: port 4(batadv0) entered disabled state
[  640.586792][T16764] batadv0: entered allmulticast mode
[  640.600319][T16764] batadv0: entered promiscuous mode
[  640.610977][T16764] bridge0: port 4(batadv0) entered blocking state
[  640.619269][T16764] bridge0: port 4(batadv0) entered forwarding state
[  640.697560][T15926] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  640.706859][T15926] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  641.259734][T16784] FAULT_INJECTION: forcing a failure.
[  641.259734][T16784] name failslab, interval 1, probability 0, space 0, times 0
[  641.272436][T16784] CPU: 0 PID: 16784 Comm: syz.1.3662 Not tainted syzkaller #0
[  641.279898][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  641.289950][T16784] Call Trace:
[  641.293223][T16784]  <TASK>
[  641.296147][T16784]  dump_stack_lvl+0x18c/0x250
[  641.300836][T16784]  ? show_regs_print_info+0x20/0x20
[  641.306063][T16784]  ? load_image+0x420/0x420
[  641.310564][T16784]  ? perf_tp_event+0x13d7/0x1520
[  641.315521][T16784]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  641.321348][T16784]  should_fail_ex+0x39d/0x4d0
[  641.326040][T16784]  should_failslab+0x9/0x20
[  641.330546][T16784]  slab_pre_alloc_hook+0x59/0x310
[  641.335584][T16784]  kmem_cache_alloc+0x5a/0x2d0
[  641.340379][T16784]  ? skb_clone+0x1eb/0x370
[  641.344802][T16784]  skb_clone+0x1eb/0x370
[  641.349048][T16784]  bpf_clone_redirect+0x167/0x4a0
[  641.354085][T16784]  bpf_prog_c6f54bbad6dab1ee+0x5e/0x63
[  641.359547][T16784]  ? perf_output_sample+0x220/0x2130
[  641.364837][T16784]  ? perf_trace_preemptirq_template+0xac/0x330
[  641.370997][T16784]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  641.376988][T16784]  ? lockdep_softirqs_on+0x580/0x580
[  641.382273][T16784]  ? lock_chain_count+0x20/0x20
[  641.387118][T16784]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  641.393377][T16784]  ? __local_bh_disable_ip+0x108/0x1a0
[  641.398835][T16784]  ? __cant_sleep+0x220/0x220
[  641.403509][T16784]  ? __local_bh_enable_ip+0x13a/0x1c0
[  641.408875][T16784]  ? _local_bh_enable+0xa0/0xa0
[  641.413727][T16784]  ? bpf_test_timer_continue+0x135/0x380
[  641.419366][T16784]  ? bpf_test_run+0x174/0x870
[  641.424042][T16784]  bpf_test_run+0x2df/0x870
[  641.428562][T16784]  ? bpf_test_run+0x174/0x870
[  641.433238][T16784]  ? dst_hold+0x70/0x70
[  641.437397][T16784]  ? eth_get_headlen+0x210/0x210
[  641.442346][T16784]  bpf_prog_test_run_skb+0xdc8/0x18c0
[  641.447742][T16784]  ? cpu_online+0x60/0x60
[  641.452076][T16784]  bpf_prog_test_run+0x321/0x390
[  641.457013][T16784]  __sys_bpf+0x49d/0x890
[  641.461257][T16784]  ? bpf_link_show_fdinfo+0x390/0x390
[  641.466641][T16784]  ? lock_chain_count+0x20/0x20
[  641.471501][T16784]  __x64_sys_bpf+0x7c/0x90
[  641.475916][T16784]  do_syscall_64+0x55/0xb0
[  641.480330][T16784]  ? clear_bhb_loop+0x40/0x90
[  641.485007][T16784]  ? clear_bhb_loop+0x40/0x90
[  641.489696][T16784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.495590][T16784] RIP: 0033:0x7f0a73b9ce59
[  641.500033][T16784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.519635][T16784] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  641.528052][T16784] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  641.536019][T16784] RDX: 000000000000004d RSI: 0000200000000380 RDI: 000000000000000a
[  641.543997][T16784] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  641.551966][T16784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  641.559934][T16784] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  641.567944][T16784]  </TASK>
[  641.573188][T16782] FAULT_INJECTION: forcing a failure.
[  641.573188][T16782] name failslab, interval 1, probability 0, space 0, times 0
[  641.599809][T16782] CPU: 0 PID: 16782 Comm: syz.3.3661 Not tainted syzkaller #0
[  641.607306][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  641.617358][T16782] Call Trace:
[  641.620631][T16782]  <TASK>
[  641.623562][T16782]  dump_stack_lvl+0x18c/0x250
[  641.628240][T16782]  ? show_regs_print_info+0x20/0x20
[  641.633429][T16782]  ? load_image+0x420/0x420
[  641.637947][T16782]  ? __might_sleep+0xe0/0xe0
[  641.642541][T16782]  ? __lock_acquire+0x7d40/0x7d40
[  641.647575][T16782]  ? prepend_path+0x4b/0x960
[  641.652176][T16782]  should_fail_ex+0x39d/0x4d0
[  641.656860][T16782]  should_failslab+0x9/0x20
[  641.661358][T16782]  slab_pre_alloc_hook+0x59/0x310
[  641.666375][T16782]  ? __asan_memcpy+0x40/0x70
[  641.670960][T16782]  ? tomoyo_encode+0x28b/0x540
[  641.675727][T16782]  ? tomoyo_encode+0x28b/0x540
[  641.680479][T16782]  __kmem_cache_alloc_node+0x53/0x250
[  641.685845][T16782]  ? prepend_path+0x4b/0x960
[  641.690429][T16782]  ? tomoyo_encode+0x28b/0x540
[  641.695354][T16782]  __kmalloc+0xa4/0x230
[  641.699522][T16782]  tomoyo_encode+0x28b/0x540
[  641.704139][T16782]  tomoyo_realpath_from_path+0x592/0x5d0
[  641.709782][T16782]  tomoyo_path_number_perm+0x248/0x620
[  641.715234][T16782]  ? tomoyo_path_number_perm+0x217/0x620
[  641.720858][T16782]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  641.726310][T16782]  ? ksys_write+0x1c4/0x260
[  641.730835][T16782]  ? __fget_files+0x28/0x4b0
[  641.735416][T16782]  ? __fget_files+0x28/0x4b0
[  641.740008][T16782]  security_file_ioctl+0x70/0xa0
[  641.744942][T16782]  __se_sys_ioctl+0x48/0x170
[  641.749530][T16782]  do_syscall_64+0x55/0xb0
[  641.753942][T16782]  ? clear_bhb_loop+0x40/0x90
[  641.758608][T16782]  ? clear_bhb_loop+0x40/0x90
[  641.763280][T16782]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  641.769169][T16782] RIP: 0033:0x7f3f8779ce59
[  641.773579][T16782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.793178][T16782] RSP: 002b:00007f3f859f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  641.801585][T16782] RAX: ffffffffffffffda RBX: 00007f3f87a16090 RCX: 00007f3f8779ce59
[  641.809552][T16782] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000005
[  641.817517][T16782] RBP: 00007f3f859f6090 R08: 0000000000000000 R09: 0000000000000000
[  641.825476][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.833441][T16782] R13: 00007f3f87a16128 R14: 00007f3f87a16090 R15: 00007ffcf0d6cb38
[  641.841439][T16782]  </TASK>
[  641.856714][T16782] ERROR: Out of memory at tomoyo_realpath_from_path.
[  641.915083][T16783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  642.027309][T16789] netlink: 'syz.1.3663': attribute type 29 has an invalid length.
[  642.039073][T16789] netlink: 'syz.1.3663': attribute type 29 has an invalid length.
[  642.066080][T16786] netlink: 'syz.1.3663': attribute type 29 has an invalid length.
[  642.170369][T16793] netlink: 'syz.2.3666': attribute type 33 has an invalid length.
[  642.203497][T16793] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3666'.
[  642.232271][T16793] `: renamed from syz_tun (while UP)
[  643.497177][T16813] netlink: 'syz.0.3673': attribute type 10 has an invalid length.
[  643.749386][T16823] netlink: 'syz.1.3677': attribute type 1 has an invalid length.
[  643.780443][T16823] netlink: 'syz.1.3677': attribute type 4 has an invalid length.
[  643.811544][T16823] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3677'.
[  644.471400][T16855] netlink: 'syz.0.3687': attribute type 1 has an invalid length.
[  644.675081][T16855] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  644.920224][T16858] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3687'.
[  645.748377][T16882] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3694'.
[  645.761800][T16882] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  646.412132][T16889] netlink: 'syz.1.3697': attribute type 29 has an invalid length.
[  646.443691][T16889] netlink: 'syz.1.3697': attribute type 29 has an invalid length.
[  646.454222][T16889] netlink: 'syz.1.3697': attribute type 29 has an invalid length.
[  646.483780][T16889] netlink: 'syz.1.3697': attribute type 29 has an invalid length.
[  646.696896][T16905] netlink: 'syz.2.3705': attribute type 6 has an invalid length.
[  646.783626][T16912] FAULT_INJECTION: forcing a failure.
[  646.783626][T16912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  646.806673][T16912] CPU: 0 PID: 16912 Comm: syz.1.3708 Not tainted syzkaller #0
[  646.814204][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  646.824383][T16912] Call Trace:
[  646.827678][T16912]  <TASK>
[  646.830612][T16912]  dump_stack_lvl+0x18c/0x250
[  646.835309][T16912]  ? show_regs_print_info+0x20/0x20
[  646.840528][T16912]  ? load_image+0x420/0x420
[  646.845062][T16912]  ? __lock_acquire+0x7d40/0x7d40
[  646.850124][T16912]  ? snprintf+0xe9/0x140
[  646.854400][T16912]  should_fail_ex+0x39d/0x4d0
[  646.859106][T16912]  _copy_to_user+0x2f/0xa0
[  646.863532][T16912]  simple_read_from_buffer+0xe7/0x150
[  646.868929][T16912]  proc_fail_nth_read+0x1e8/0x260
[  646.873965][T16912]  ? proc_fault_inject_write+0x360/0x360
[  646.879610][T16912]  ? fsnotify_perm+0x271/0x5e0
[  646.884398][T16912]  ? proc_fault_inject_write+0x360/0x360
[  646.890052][T16912]  vfs_read+0x28b/0x970
[  646.894234][T16912]  ? kernel_read+0x1e0/0x1e0
[  646.898844][T16912]  ? __fget_files+0x28/0x4b0
[  646.903445][T16912]  ? __fget_files+0x28/0x4b0
[  646.908045][T16912]  ? __fget_files+0x43d/0x4b0
[  646.912740][T16912]  ? __fdget_pos+0x2a3/0x330
[  646.917333][T16912]  ? ksys_read+0x75/0x260
[  646.921679][T16912]  ksys_read+0x150/0x260
[  646.925931][T16912]  ? vfs_write+0x990/0x990
[  646.930357][T16912]  ? lockdep_hardirqs_on+0x98/0x150
[  646.935571][T16912]  do_syscall_64+0x55/0xb0
[  646.939988][T16912]  ? clear_bhb_loop+0x40/0x90
[  646.944682][T16912]  ? clear_bhb_loop+0x40/0x90
[  646.949393][T16912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  646.955307][T16912] RIP: 0033:0x7f0a73b5d68e
[  646.959737][T16912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  646.979357][T16912] RSP: 002b:00007f0a71df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  646.987779][T16912] RAX: ffffffffffffffda RBX: 00007f0a71df66c0 RCX: 00007f0a73b5d68e
[  646.995750][T16912] RDX: 000000000000000f RSI: 00007f0a71df60a0 RDI: 0000000000000007
[  647.003723][T16912] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  647.011706][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.019695][T16912] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  647.027705][T16912]  </TASK>
[  647.037153][ T2952] wlan1: Trigger new scan to find an IBSS to join
[  647.665616][T16916] netlink: 'syz.3.3710': attribute type 7 has an invalid length.
[  650.311807][T16944] netlink: 'syz.2.3714': attribute type 21 has an invalid length.
[  650.326864][T16944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3714'.
[  650.391072][T16943] netlink: 'syz.1.3712': attribute type 10 has an invalid length.
[  650.807435][T16955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.902578][   T51] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  650.963857][T16960] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3718'.
[  650.988316][T16960] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  651.002076][T16960] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  651.112978][T16960] syz.0.3718: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  651.140078][T16960] CPU: 1 PID: 16960 Comm: syz.0.3718 Not tainted syzkaller #0
[  651.147596][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  651.157680][T16960] Call Trace:
[  651.160981][T16960]  <TASK>
[  651.163933][T16960]  dump_stack_lvl+0x18c/0x250
[  651.168652][T16960]  ? show_regs_print_info+0x20/0x20
[  651.173888][T16960]  ? load_image+0x420/0x420
[  651.178429][T16960]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  651.184881][T16960]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  651.191418][T16960]  warn_alloc+0x246/0x340
[  651.195785][T16960]  ? stack_trace_save+0xaa/0x100
[  651.200768][T16960]  ? zone_watermark_ok_safe+0x230/0x230
[  651.206360][T16960]  ? kasan_set_track+0x5f/0x70
[  651.211150][T16960]  ? kasan_set_track+0x4e/0x70
[  651.215937][T16960]  ? __kasan_kmalloc+0x8f/0xa0
[  651.220724][T16960]  ? xsk_init_queue+0xad/0x100
[  651.225512][T16960]  ? xsk_setsockopt+0x4e5/0x760
[  651.230384][T16960]  ? do_sock_setsockopt+0x175/0x1a0
[  651.235609][T16960]  ? __x64_sys_setsockopt+0x182/0x200
[  651.241009][T16960]  __vmalloc_node_range+0x126/0x1330
[  651.246332][T16960]  ? free_vm_area+0x50/0x50
[  651.250877][T16960]  vmalloc_user+0x74/0x80
[  651.255233][T16960]  ? xskq_create+0xbf/0x170
[  651.259738][T16960]  xskq_create+0xbf/0x170
[  651.264082][T16960]  xsk_init_queue+0xad/0x100
[  651.268670][T16960]  xsk_setsockopt+0x4e5/0x760
[  651.273343][T16960]  ? xsk_poll+0x680/0x680
[  651.277677][T16960]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  651.283836][T16960]  ? lockdep_hardirqs_on+0x98/0x150
[  651.289041][T16960]  ? aa_sock_opt_perm+0x74/0x100
[  651.293978][T16960]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  651.299520][T16960]  ? security_socket_setsockopt+0x7e/0xa0
[  651.305248][T16960]  ? xsk_poll+0x680/0x680
[  651.309628][T16960]  do_sock_setsockopt+0x175/0x1a0
[  651.314667][T16960]  __x64_sys_setsockopt+0x182/0x200
[  651.319887][T16960]  do_syscall_64+0x55/0xb0
[  651.324333][T16960]  ? clear_bhb_loop+0x40/0x90
[  651.329028][T16960]  ? clear_bhb_loop+0x40/0x90
[  651.333705][T16960]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  651.339598][T16960] RIP: 0033:0x7f6e4dd9ce59
[  651.344007][T16960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.363610][T16960] RSP: 002b:00007f6e4bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  651.372022][T16960] RAX: ffffffffffffffda RBX: 00007f6e4e015fa0 RCX: 00007f6e4dd9ce59
[  651.379990][T16960] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  651.387983][T16960] RBP: 00007f6e4de32e6f R08: 0000000000000004 R09: 0000000000000000
[  651.395963][T16960] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  651.403947][T16960] R13: 00007f6e4e016038 R14: 00007f6e4e015fa0 R15: 00007ffe0c28c5c8
[  651.411934][T16960]  </TASK>
[  651.430085][T16960] Mem-Info:
[  651.434398][T16960] active_anon:7043 inactive_anon:0 isolated_anon:0
[  651.434398][T16960]  active_file:18049 inactive_file:40178 isolated_file:0
[  651.434398][T16960]  unevictable:768 dirty:436 writeback:0
[  651.434398][T16960]  slab_reclaimable:10150 slab_unreclaimable:97380
[  651.434398][T16960]  mapped:24905 shmem:1361 pagetables:571
[  651.434398][T16960]  sec_pagetables:0 bounce:0
[  651.434398][T16960]  kernel_misc_reclaimable:0
[  651.434398][T16960]  free:1339268 free_pcp:5335 free_cma:0
[  651.485792][T16960] Node 0 active_anon:28172kB inactive_anon:0kB active_file:72196kB inactive_file:160516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99620kB dirty:1744kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10560kB pagetables:2284kB sec_pagetables:0kB all_unreclaimable? no
[  651.526682][T16960] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  651.563783][T16960] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  651.593944][T16960] lowmem_reserve[]: 0 2521 2522 2522 2522
[  651.604321][T16960] Node 0 DMA32 free:1434416kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27928kB inactive_anon:0kB active_file:72196kB inactive_file:159696kB unevictable:1536kB writepending:1744kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:14032kB local_pcp:2956kB free_cma:0kB
[  651.660824][T16960] lowmem_reserve[]: 0 0 0 0 0
[  651.672814][T16960] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  651.706145][T16975] netlink: 'syz.3.3724': attribute type 21 has an invalid length.
[  651.726186][T16960] lowmem_reserve[]: 0 0 0 0 0
[  651.731583][T16960] Node 1 Normal free:3907296kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9280kB local_pcp:4480kB free_cma:0kB
[  651.794159][T16975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3724'.
[  651.885282][T16960] lowmem_reserve[]: 0 0 0 0 0
[  651.890905][T16960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  651.905842][T16960] Node 0 DMA32: 2004*4kB (UME) 1880*8kB (UME) 1429*16kB (UME) 3761*32kB (UME) 1413*64kB (UME) 297*128kB (UME) 96*256kB (UME) 50*512kB (UM) 15*1024kB (UME) 10*2048kB (M) 254*4096kB (M) = 1421120kB
[  651.972444][T16960] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  652.023572][   T42] wlan1: Trigger new scan to find an IBSS to join
[  652.065735][T16960] Node 1 Normal: 222*4kB (UE) 53*8kB (UE) 46*16kB (UE) 191*32kB (UE) 50*64kB (UME) 15*128kB (UME) 1*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3907296kB
[  652.148842][T16960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  652.177150][T16960] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  652.240023][T16960] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  652.265656][T16960] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  652.290570][T16960] 59594 total pagecache pages
[  652.304045][T16960] 0 pages in swap cache
[  652.320065][T16960] Free swap  = 124996kB
[  652.343042][T16960] Total swap = 124996kB
[  652.362748][T16960] 2097051 pages RAM
[  652.379616][T16960] 0 pages HighMem/MovableOnly
[  652.394094][T16960] 416933 pages reserved
[  652.429464][T16960] 0 pages cma reserved
[  653.041798][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  653.291201][T15928] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  653.639036][   T42] wlan1: Creating new IBSS network, BSSID ea:6e:d2:7b:a0:a1
[  653.788294][T17002] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3733'.
[  653.803510][T17001] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3733'.
[  653.901505][T17007] netlink: 'syz.3.3735': attribute type 10 has an invalid length.
[  653.977291][T17010] FAULT_INJECTION: forcing a failure.
[  653.977291][T17010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  654.007663][T17007] netlink: set zone limit has 8 unknown bytes
[  654.043741][T17010] CPU: 1 PID: 17010 Comm: syz.1.3736 Not tainted syzkaller #0
[  654.051274][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  654.061532][T17010] Call Trace:
[  654.064832][T17010]  <TASK>
[  654.067783][T17010]  dump_stack_lvl+0x18c/0x250
[  654.072490][T17010]  ? show_regs_print_info+0x20/0x20
[  654.077714][T17010]  ? load_image+0x420/0x420
[  654.082242][T17010]  ? __might_fault+0xaa/0x120
[  654.086941][T17010]  ? __lock_acquire+0x7d40/0x7d40
[  654.091987][T17010]  should_fail_ex+0x39d/0x4d0
[  654.096693][T17010]  _copy_from_user+0x2f/0xe0
[  654.101310][T17010]  generic_map_update_batch+0x59a/0x810
[  654.106887][T17010]  ? rcu_read_unlock+0xa0/0xa0
[  654.111679][T17010]  ? rcu_read_unlock+0xa0/0xa0
[  654.116463][T17010]  bpf_map_do_batch+0x3d7/0x610
[  654.121343][T17010]  __sys_bpf+0x381/0x890
[  654.125618][T17010]  ? bpf_link_show_fdinfo+0x390/0x390
[  654.131031][T17010]  ? lock_chain_count+0x20/0x20
[  654.135923][T17010]  __x64_sys_bpf+0x7c/0x90
[  654.140367][T17010]  do_syscall_64+0x55/0xb0
[  654.144807][T17010]  ? clear_bhb_loop+0x40/0x90
[  654.149502][T17010]  ? clear_bhb_loop+0x40/0x90
[  654.154201][T17010]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  654.160120][T17010] RIP: 0033:0x7f0a73b9ce59
[  654.164551][T17010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.184188][T17010] RSP: 002b:00007f0a71df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  654.192602][T17010] RAX: ffffffffffffffda RBX: 00007f0a73e15fa0 RCX: 00007f0a73b9ce59
[  654.200598][T17010] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a
[  654.208595][T17010] RBP: 00007f0a71df6090 R08: 0000000000000000 R09: 0000000000000000
[  654.216587][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  654.224576][T17010] R13: 00007f0a73e16038 R14: 00007f0a73e15fa0 R15: 00007ffc46410528
[  654.232826][T17010]  </TASK>
[  654.934958][T17026] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3743'.
[  654.952452][T17028] FAULT_INJECTION: forcing a failure.
[  654.952452][T17028] name failslab, interval 1, probability 0, space 0, times 0
[  654.965180][T17028] CPU: 1 PID: 17028 Comm: syz.2.3745 Not tainted syzkaller #0
[  654.972666][T17028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  654.982744][T17028] Call Trace:
[  654.986042][T17028]  <TASK>
[  654.988995][T17028]  dump_stack_lvl+0x18c/0x250
[  654.993712][T17028]  ? lock_chain_count+0x20/0x20
[  654.998605][T17028]  ? show_regs_print_info+0x20/0x20
[  655.003841][T17028]  ? load_image+0x420/0x420
[  655.008378][T17028]  ? finish_task_switch+0x326/0x8f0
[  655.013620][T17028]  should_fail_ex+0x39d/0x4d0
[  655.018325][T17028]  should_failslab+0x9/0x20
[  655.022838][T17028]  slab_pre_alloc_hook+0x59/0x310
[  655.027879][T17028]  kmem_cache_alloc+0x5a/0x2d0
[  655.032671][T17028]  ? skb_clone+0x1eb/0x370
[  655.037119][T17028]  skb_clone+0x1eb/0x370
[  655.041383][T17028]  bpf_clone_redirect+0x167/0x4a0
[  655.046418][T17028]  bpf_prog_bf17f61a12bc632f+0x5e/0x63
[  655.051964][T17028]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  655.057938][T17028]  ? preempt_schedule+0xc0/0xd0
[  655.062779][T17028]  ? bpf_test_run+0x174/0x870
[  655.067460][T17028]  ? preempt_schedule_common+0x82/0xc0
[  655.072914][T17028]  ? schedule_preempt_disabled+0x20/0x20
[  655.078536][T17028]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  655.084512][T17028]  ? lockdep_softirqs_on+0x580/0x580
[  655.089790][T17028]  ? lock_chain_count+0x20/0x20
[  655.094634][T17028]  ? preempt_schedule_thunk+0x1a/0x30
[  655.100047][T17028]  ? __local_bh_disable_ip+0x108/0x1a0
[  655.105496][T17028]  ? __cant_sleep+0x220/0x220
[  655.110175][T17028]  ? __local_bh_enable_ip+0x14b/0x1c0
[  655.115546][T17028]  ? _local_bh_enable+0xa0/0xa0
[  655.120419][T17028]  ? bpf_test_timer_continue+0x135/0x380
[  655.126069][T17028]  ? bpf_test_run+0x174/0x870
[  655.130752][T17028]  bpf_test_run+0x2df/0x870
[  655.135263][T17028]  ? bpf_test_run+0x174/0x870
[  655.139938][T17028]  ? dst_hold+0x70/0x70
[  655.144096][T17028]  ? eth_get_headlen+0x210/0x210
[  655.149035][T17028]  bpf_prog_test_run_skb+0xdc8/0x18c0
[  655.154415][T17028]  ? cpu_online+0x60/0x60
[  655.158740][T17028]  bpf_prog_test_run+0x321/0x390
[  655.163673][T17028]  __sys_bpf+0x49d/0x890
[  655.167910][T17028]  ? bpf_link_show_fdinfo+0x390/0x390
[  655.173284][T17028]  ? lock_chain_count+0x20/0x20
[  655.178137][T17028]  __x64_sys_bpf+0x7c/0x90
[  655.182553][T17028]  do_syscall_64+0x55/0xb0
[  655.186964][T17028]  ? clear_bhb_loop+0x40/0x90
[  655.191631][T17028]  ? clear_bhb_loop+0x40/0x90
[  655.196300][T17028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  655.202192][T17028] RIP: 0033:0x7f057279ce59
[  655.206609][T17028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  655.226237][T17028] RSP: 002b:00007f0573572028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  655.235193][T17028] RAX: ffffffffffffffda RBX: 00007f0572a15fa0 RCX: 00007f057279ce59
[  655.243172][T17028] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  655.251141][T17028] RBP: 00007f0573572090 R08: 0000000000000000 R09: 0000000000000000
[  655.259104][T17028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  655.267067][T17028] R13: 00007f0572a16038 R14: 00007f0572a15fa0 R15: 00007ffcea54c1e8
[  655.275050][T17028]  </TASK>
[  655.570404][T17035] netlink: 'syz.3.3747': attribute type 25 has an invalid length.
[  655.585297][T17035] netlink: 'syz.3.3747': attribute type 29 has an invalid length.
[  655.668999][T17048] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3752'.
[  655.694370][T17046] netlink: 11262 bytes leftover after parsing attributes in process `syz.2.3750'.
[  656.032076][T17061] netlink: 'syz.3.3757': attribute type 33 has an invalid length.
[  656.044032][T17061] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3757'.
[  656.061851][T17064] FAULT_INJECTION: forcing a failure.
[  656.061851][T17064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  656.089951][T17064] CPU: 0 PID: 17064 Comm: syz.2.3758 Not tainted syzkaller #0
[  656.097502][T17064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  656.107611][T17064] Call Trace:
[  656.110922][T17064]  <TASK>
[  656.113891][T17064]  dump_stack_lvl+0x18c/0x250
[  656.118628][T17064]  ? show_regs_print_info+0x20/0x20
[  656.123869][T17064]  ? load_image+0x420/0x420
[  656.128429][T17064]  ? __might_fault+0xaa/0x120
[  656.133168][T17064]  should_fail_ex+0x39d/0x4d0
[  656.137911][T17064]  copyin+0x1a/0x90
[  656.141768][T17064]  _copy_from_iter+0x404/0x12e0
[  656.146676][T17064]  ? slab_post_alloc_hook+0x8a/0x4b0
[  656.152000][T17064]  ? __virt_addr_valid+0x18c/0x540
[  656.157172][T17064]  ? __lock_acquire+0x7d40/0x7d40
[  656.162272][T17064]  ? copyout_mc+0x70/0x70
[  656.166660][T17064]  ? __virt_addr_valid+0x18c/0x540
[  656.171821][T17064]  ? __virt_addr_valid+0x18c/0x540
[  656.176974][T17064]  ? __virt_addr_valid+0x469/0x540
[  656.182146][T17064]  ? __check_object_size+0x506/0xa20
[  656.187492][T17064]  netlink_sendmsg+0x76b/0xbf0
[  656.192299][T17064]  ? perf_trace_lock+0x304/0x3b0
[  656.197304][T17064]  ? netlink_getsockopt+0x590/0x590
[  656.202559][T17064]  ? aa_sock_msg_perm+0x94/0x150
[  656.207551][T17064]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  656.212874][T17064]  ? security_socket_sendmsg+0x80/0xa0
[  656.218385][T17064]  ? netlink_getsockopt+0x590/0x590
[  656.223636][T17064]  ____sys_sendmsg+0x5ba/0x960
[  656.228478][T17064]  ? __asan_memset+0x22/0x40
[  656.233127][T17064]  ? __sys_sendmsg_sock+0x30/0x30
[  656.238198][T17064]  ? __import_iovec+0x3fa/0x850
[  656.243130][T17064]  ? import_iovec+0x73/0xa0
[  656.247706][T17064]  ___sys_sendmsg+0x2a6/0x360
[  656.252472][T17064]  ? __sys_sendmsg+0x2a0/0x2a0
[  656.257370][T17064]  ? __lock_acquire+0x7d40/0x7d40
[  656.262525][T17064]  __se_sys_sendmsg+0x1c2/0x2b0
[  656.267432][T17064]  ? __x64_sys_sendmsg+0x80/0x80
[  656.272462][T17064]  ? lockdep_hardirqs_on+0x98/0x150
[  656.277719][T17064]  do_syscall_64+0x55/0xb0
[  656.282171][T17064]  ? clear_bhb_loop+0x40/0x90
[  656.286882][T17064]  ? clear_bhb_loop+0x40/0x90
[  656.291603][T17064]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  656.297541][T17064] RIP: 0033:0x7f057279ce59
[  656.302001][T17064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.321657][T17064] RSP: 002b:00007f0573572028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  656.330229][T17064] RAX: ffffffffffffffda RBX: 00007f0572a15fa0 RCX: 00007f057279ce59
[  656.338240][T17064] RDX: 0000000000004804 RSI: 0000200000000940 RDI: 0000000000000007
[  656.346252][T17064] RBP: 00007f0573572090 R08: 0000000000000000 R09: 0000000000000000
[  656.354267][T17064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.362277][T17064] R13: 00007f0572a16038 R14: 00007f0572a15fa0 R15: 00007ffcea54c1e8
[  656.370338][T17064]  </TASK>
[  656.641965][T17073] netlink: 'syz.2.3761': attribute type 3 has an invalid length.
[  656.666004][T17073] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.3761'.
[  656.698431][T17073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3761'.
[  656.730389][T17073] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3761'.
[  656.940645][T17088] netlink: 'syz.2.3764': attribute type 5 has an invalid length.
[  656.967427][T17088] bridge0: port 4(batadv0) entered disabled state
[  656.974275][T17088] bridge0: port 3(`) entered disabled state
[  656.980768][T17088] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.988659][T17088] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.453316][T17112] netlink: 170240 bytes leftover after parsing attributes in process `syz.1.3774'.
[  657.627014][T17121] FAULT_INJECTION: forcing a failure.
[  657.627014][T17121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.665661][T17121] CPU: 1 PID: 17121 Comm: syz.2.3776 Not tainted syzkaller #0
[  657.673187][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  657.683269][T17121] Call Trace:
[  657.686566][T17121]  <TASK>
[  657.689512][T17121]  dump_stack_lvl+0x18c/0x250
[  657.694220][T17121]  ? show_regs_print_info+0x20/0x20
[  657.699445][T17121]  ? load_image+0x420/0x420
[  657.703978][T17121]  ? __lock_acquire+0x7d40/0x7d40
[  657.709029][T17121]  ? snprintf+0xe9/0x140
[  657.713304][T17121]  should_fail_ex+0x39d/0x4d0
[  657.718009][T17121]  _copy_to_user+0x2f/0xa0
[  657.722448][T17121]  simple_read_from_buffer+0xe7/0x150
[  657.727848][T17121]  proc_fail_nth_read+0x1e8/0x260
[  657.732898][T17121]  ? proc_fault_inject_write+0x360/0x360
[  657.738567][T17121]  ? fsnotify_perm+0x271/0x5e0
[  657.743357][T17121]  ? proc_fault_inject_write+0x360/0x360
[  657.749024][T17121]  vfs_read+0x28b/0x970
[  657.753207][T17121]  ? kernel_read+0x1e0/0x1e0
[  657.757816][T17121]  ? __fget_files+0x28/0x4b0
[  657.762427][T17121]  ? __fget_files+0x28/0x4b0
[  657.767042][T17121]  ? __fget_files+0x43d/0x4b0
[  657.771753][T17121]  ? __fdget_pos+0x2a3/0x330
[  657.776366][T17121]  ? ksys_read+0x75/0x260
[  657.780728][T17121]  ksys_read+0x150/0x260
[  657.784998][T17121]  ? vfs_write+0x990/0x990
[  657.789443][T17121]  ? lockdep_hardirqs_on+0x98/0x150
[  657.794674][T17121]  do_syscall_64+0x55/0xb0
[  657.799116][T17121]  ? clear_bhb_loop+0x40/0x90
[  657.803908][T17121]  ? clear_bhb_loop+0x40/0x90
[  657.808617][T17121]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.814538][T17121] RIP: 0033:0x7f057275d68e
[  657.818977][T17121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  657.838607][T17121] RSP: 002b:00007f0573571fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  657.847051][T17121] RAX: ffffffffffffffda RBX: 00007f05735726c0 RCX: 00007f057275d68e
[  657.855047][T17121] RDX: 000000000000000f RSI: 00007f05735720a0 RDI: 0000000000000004
[  657.863039][T17121] RBP: 00007f0573572090 R08: 0000000000000000 R09: 0000000000000000
[  657.871021][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.878994][T17121] R13: 00007f0572a16038 R14: 00007f0572a15fa0 R15: 00007ffcea54c1e8
[  657.886980][T17121]  </TASK>
[  658.052069][T17132] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  658.111051][T17132] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3779'.
[  658.333425][T17146] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3785'.
[  658.774342][T17158] tap0: tun_chr_ioctl cmd 1074025694
[  658.955472][T17165] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3791'.
[  659.015233][T17165] netlink: 'syz.1.3791': attribute type 27 has an invalid length.
[  659.045107][T17165] netlink: 'syz.1.3791': attribute type 25 has an invalid length.
[  659.362535][T17173] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  659.639168][   T51] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1
[  659.640784][T14552] Bluetooth: hci4: hardware error 0x00
[  659.829996][T17186] netlink: 'syz.2.3798': attribute type 10 has an invalid length.
[  659.875761][T17186] geneve0: entered promiscuous mode
[  659.919652][T17185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  660.073392][T17196] syz_tun: left allmulticast mode
[  660.096305][T17196] syz_tun: left promiscuous mode
[  660.123293][T17196] bridge0: port 3(syz_tun) entered disabled state
[  660.167847][T17196] bridge_slave_1: left allmulticast mode
[  660.189737][T17196] bridge_slave_1: left promiscuous mode
[  660.211483][T17196] bridge0: port 2(bridge_slave_1) entered disabled state
[  660.240948][T17196] bridge_slave_0: left allmulticast mode
[  660.257866][T17196] bridge_slave_0: left promiscuous mode
[  660.264275][T17196] bridge0: port 1(bridge_slave_0) entered disabled state
[  660.994387][T17216] __nla_validate_parse: 5 callbacks suppressed
[  660.994425][T17216] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3806'.
[  661.768331][T14552] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  661.777562][T17213] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  661.835694][T17218] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3805'.
[  662.006059][T15931] wlan1: Trigger new scan to find an IBSS to join
[  662.049579][T17223] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3809'.
[  662.164904][T17223] netlink: 'syz.3.3809': attribute type 10 has an invalid length.
[  662.194678][T17223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3809'.
[  662.746731][T17250] netlink: 'syz.3.3815': attribute type 29 has an invalid length.
[  662.783768][T17250] netlink: 'syz.3.3815': attribute type 29 has an invalid length.
[  663.355121][T17267] netlink: 'syz.3.3819': attribute type 21 has an invalid length.
[  663.387272][T17267] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3819'.
[  663.420754][T17267] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3819'.
[  663.560984][T17275] netlink: 'syz.1.3823': attribute type 1 has an invalid length.
[  663.573101][T17275] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3823'.
[  664.013083][   T42] wlan1: Trigger new scan to find an IBSS to join
[  664.258881][T17302] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3831'.
[  664.278899][T17303] netlink: 'syz.1.3831': attribute type 10 has an invalid length.
[  664.294345][T17303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3831'.
[  664.315079][T17303] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  664.499594][    C0] 
[  664.499604][    C0] ================================
[  664.499610][    C0] WARNING: inconsistent lock state
[  664.499632][    C0] syzkaller #0 Not tainted
[  664.499641][    C0] --------------------------------
[  664.499646][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  664.499653][    C0] syz.3.3834/17307 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  664.499671][    C0] ffffffff8d297c78 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x89/0xbb0
[  664.499720][    C0] {INITIAL USE} state was registered at:
[  664.499727][    C0]   lock_acquire+0x19e/0x420
[  664.499745][    C0]   _raw_write_lock_irq+0xaf/0xf0
[  664.499767][    C0]   kernfs_rename_ns+0x5d0/0x810
[  664.499786][    C0]   sysfs_rename_link_ns+0x175/0x1b0
[  664.499801][    C0]   device_rename+0x110/0x1e0
[  664.499858][    C0]   dev_change_name+0x307/0x8c0
[  664.499877][    C0]   do_setlink+0x9fc/0x4130
[  664.499894][    C0]   rtnl_newlink+0x17da/0x20a0
[  664.499910][    C0]   rtnetlink_rcv_msg+0x869/0xfa0
[  664.499927][    C0]   netlink_rcv_skb+0x241/0x4d0
[  664.499942][    C0]   netlink_unicast+0x751/0x8d0
[  664.499956][    C0]   netlink_sendmsg+0x8d0/0xbf0
[  664.499971][    C0]   __sys_sendto+0x4a9/0x6b0
[  664.499985][    C0]   __x64_sys_sendto+0xde/0xf0
[  664.500000][    C0]   do_syscall_64+0x55/0xb0
[  664.500016][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  664.500037][    C0] irq event stamp: 658
[  664.500043][    C0] hardirqs last  enabled at (657): [<ffffffff8a8813e1>] do_syscall_64+0x61/0xb0
[  664.500064][    C0] hardirqs last disabled at (658): [<ffffffff8a882abd>] noist_exc_debug+0x4d/0x120
[  664.500086][    C0] softirqs last  enabled at (318): [<ffffffff81966ca6>] bpf_prog_load+0x1266/0x1670
[  664.500107][    C0] softirqs last disabled at (316): [<ffffffff8194750d>] bpf_ksym_add+0x2d/0x340
[  664.500127][    C0] 
[  664.500127][    C0] other info that might help us debug this:
[  664.500133][    C0]  Possible unsafe locking scenario:
[  664.500133][    C0] 
[  664.500137][    C0]        CPU0
[  664.500140][    C0]        ----
[  664.500143][    C0]   lock(kernfs_rename_lock);
[  664.500155][    C0]   <Interrupt>
[  664.500158][    C0]     lock(kernfs_rename_lock);
[  664.500168][    C0] 
[  664.500168][    C0]  *** DEADLOCK ***
[  664.500168][    C0] 
[  664.500171][    C0] 2 locks held by syz.3.3834/17307:
[  664.500180][    C0]  #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: atomic_notifier_call_chain+0x26/0x180
[  664.500221][    C0]  #1: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xb9/0x3e0
[  664.500259][    C0] 
[  664.500259][    C0] stack backtrace:
[  664.500264][    C0] CPU: 0 PID: 17307 Comm: syz.3.3834 Not tainted syzkaller #0
[  664.500280][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  664.500289][    C0] Call Trace:
[  664.500296][    C0]  <#DB>
[  664.500358][    C0]  dump_stack_lvl+0x18c/0x250
[  664.500380][    C0]  ? show_regs_print_info+0x20/0x20
[  664.500401][    C0]  ? print_usage_bug+0x475/0x690
[  664.500418][    C0]  ? verify_lock_unused+0x18/0x140
[  664.500438][    C0]  lock_acquire+0x2c2/0x420
[  664.500456][    C0]  ? kernfs_path_from_node+0x89/0xbb0
[  664.500476][    C0]  ? read_lock_is_recursive+0x20/0x20
[  664.500492][    C0]  ? cmp_ex_search+0x1e/0x80
[  664.500512][    C0]  ? bsearch+0x8e/0xb0
[  664.500530][    C0]  _raw_read_lock_irqsave+0xbc/0x100
[  664.500551][    C0]  ? kernfs_path_from_node+0x89/0xbb0
[  664.500572][    C0]  ? _raw_read_lock+0x50/0x50
[  664.500591][    C0]  ? rcu_is_watching+0x15/0xb0
[  664.500611][    C0]  ? lock_release+0xb5/0x8c0
[  664.500628][    C0]  ? percpu_ref_tryget+0x15/0x180
[  664.500649][    C0]  kernfs_path_from_node+0x89/0xbb0
[  664.500670][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  664.500689][    C0]  ? lock_release+0xb5/0x8c0
[  664.500706][    C0]  ? kernfs_name+0x140/0x140
[  664.500726][    C0]  ? get_mem_cgroup_from_mm+0x38/0x290
[  664.500743][    C0]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  664.500760][    C0]  get_mm_memcg_path+0xb9/0x360
[  664.500784][    C0]  __mmap_lock_do_trace_acquire_returned+0xea/0x300
[  664.500806][    C0]  ? internal_get_user_pages_fast+0xaa8/0x2760
[  664.500834][    C0]  ? get_mm_memcg_path+0x360/0x360
[  664.500865][    C0]  ? __init_rwsem+0x160/0x160
[  664.500882][    C0]  ? _raw_spin_unlock+0x28/0x40
[  664.500904][    C0]  stack_map_get_build_id_offset+0x5f2/0x720
[  664.500927][    C0]  ? pcpu_freelist_pop+0x12a/0x190
[  664.500957][    C0]  ? __bpf_get_stackid+0x900/0x900
[  664.500975][    C0]  ? perf_prepare_sample+0x156d/0x1df0
[  664.500995][    C0]  __bpf_get_stackid+0x55c/0x900
[  664.501018][    C0]  bpf_prog_12712c88fd19bd5b+0x29/0x2d
[  664.501036][    C0]  bpf_overflow_handler+0x1fc/0x510
[  664.501059][    C0]  ? __perf_event_overflow+0x4f8/0x630
[  664.501075][    C0]  ? bpf_overflow_handler+0xde/0x510
[  664.501096][    C0]  ? tp_perf_event_destroy+0x20/0x20
[  664.501120][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  664.501140][    C0]  __perf_event_overflow+0x447/0x630
[  664.501161][    C0]  perf_swevent_event+0x319/0x570
[  664.501180][    C0]  ? perf_tp_event+0x1520/0x1520
[  664.501196][    C0]  ? trace_call_bpf+0x5e9/0x6c0
[  664.501218][    C0]  ? trace_call_bpf+0xc3/0x6c0
[  664.501244][    C0]  perf_bp_event+0x319/0x430
[  664.501264][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  664.501282][    C0]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  664.501313][    C0]  ? lock_acquire+0x2c2/0x420
[  664.501333][    C0]  hw_breakpoint_exceptions_notify+0x2fb/0x670
[  664.501355][    C0]  notifier_call_chain+0x197/0x380
[  664.501376][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  664.501396][    C0]  atomic_notifier_call_chain+0xda/0x180
[  664.501417][    C0]  notify_die+0x145/0x1a0
[  664.501436][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  664.501461][    C0]  notify_debug+0x2e/0x50
[  664.501485][    C0]  exc_debug+0xde/0x140
[  664.501505][    C0]  asm_exc_debug+0x1e/0x40
[  664.501525][    C0] RIP: 0010:__get_user_nocheck_8+0xd/0x20
[  664.501546][    C0] Code: fa 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 ca
[  664.501560][    C0] RSP: 0000:ffffc90003367558 EFLAGS: 00040802
[  664.501574][    C0] RAX: 0000200000000300 RBX: 00000000ffffffff RCX: 1ffff9200066ceca
[  664.501586][    C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 0000000000000000
[  664.501597][    C0] RBP: 0000200000000300 R08: 000000000000007f R09: 0000000000000000
[  664.501607][    C0] R10: dffffc0000000000 R11: fffffbfff2239aa1 R12: 0000000000000001
[  664.501618][    C0] R13: 1ffff9200066cec8 R14: 000000000000007f R15: dffffc0000000000
[  664.501638][    C0]  </#DB>
[  664.501643][    C0]  <TASK>
[  664.501648][    C0]  perf_callchain_user+0xbe4/0x15c0
[  664.501677][    C0]  get_perf_callchain+0x394/0x510
[  664.501696][    C0]  ? put_callchain_entry+0xb0/0xb0
[  664.501715][    C0]  ? __perf_event_header__init_id+0x3be/0x480
[  664.501734][    C0]  perf_prepare_sample+0x3c7/0x1df0
[  664.501754][    C0]  ? read_lock_is_recursive+0x20/0x20
[  664.501772][    C0]  ? perf_callchain+0x220/0x220
[  664.501793][    C0]  perf_event_output_forward+0x187/0x3e0
[  664.501811][    C0]  ? perf_event_output_forward+0xb9/0x3e0
[  664.501833][    C0]  ? perf_prepare_header+0x1e0/0x1e0
[  664.501850][    C0]  ? finish_task_switch+0x265/0x8f0
[  664.501866][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  664.501887][    C0]  ? finish_task_switch+0x265/0x8f0
[  664.501905][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  664.501924][    C0]  __perf_event_overflow+0x447/0x630
[  664.501945][    C0]  perf_swevent_overflow+0x268/0x340
[  664.501967][    C0]  ? perf_event_switch_output+0x790/0x790
[  664.501989][    C0]  perf_swevent_event+0x45c/0x570
[  664.502004][    C0]  ? perf_tp_event+0x1520/0x1520
[  664.502018][    C0]  ? plist_add+0x3d8/0x490
[  664.502038][    C0]  perf_bp_event+0x319/0x430
[  664.502054][    C0]  ? futex_wait_queue+0x27/0x1b0
[  664.502073][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  664.502089][    C0]  ? futex_wait+0x4cc/0x5e0
[  664.502103][    C0]  ? verify_lock_unused+0x140/0x140
[  664.502131][    C0]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  664.502150][    C0]  notifier_call_chain+0x197/0x380
[  664.502170][    C0]  ? atomic_notifier_call_chain+0x26/0x180
[  664.502188][    C0]  atomic_notifier_call_chain+0xda/0x180
[  664.502208][    C0]  notify_die+0x145/0x1a0
[  664.502227][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  664.502249][    C0]  notify_debug+0x2e/0x50
[  664.502280][    C0]  noist_exc_debug+0x77/0x120
[  664.502297][    C0]  ? clear_bhb_loop+0x40/0x90
[  664.502312][    C0]  asm_exc_debug+0x33/0x40
[  664.502330][    C0] RIP: 0033:0x7f3f8777bbfd
[  664.502340][    C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f <c5> fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc
[  664.502352][    C0] RSP: 002b:00007f3f885718a8 EFLAGS: 00000283
[  664.502364][    C0] RAX: 0000000000000300 RBX: 00007f3f88571de0 RCX: 2f666c65732f636f
[  664.502376][    C0] RDX: 0000200000000300 RSI: 00007f3f8785d260 RDI: 0000200000000300
[  664.502387][    C0] RBP: 0000200000000300 R08: 00007f3f88572010 R09: 00000000ffffffff
[  664.502398][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  664.502407][    C0] R13: 0000000000000073 R14: 00007f3f878321dd R15: 00007f3f88571ea0
[  664.502425][    C0]  </TASK>
[  665.388888][ T2952] wlan1: Trigger new scan to find an IBSS to join
[  665.481331][T17310] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3835'.
[  666.345804][T15931] wlan1: Creating new IBSS network, BSSID 7a:8c:36:01:d0:94
[  668.005978][T15927] wlan1: Trigger new scan to find an IBSS to join
[  668.915753][ T2952] wlan1: Creating new IBSS network, BSSID a6:e1:c7:9c:97:00