last executing test programs:

2.271082873s ago: executing program 1 (id=2592):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$kcm(0xa, 0x3, 0x11)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000000)="79d2b887ba88a1edfd31c0e1f09f46159784bb6b4cbfca2ff44d1ee9f04aab3f0433b7710b9579f9fbb14b6f99941d2525518cc186ebec7a676e4515424d617ca2a5b761dfa78265e71aef3d528dbc1c9c888fe2a496312a46626a0798ba42b74e320ad42c726fd7138b05c9f7abb827c44b15c971d169a0", &(0x7f0000000700)=""/247, &(0x7f00000002c0)="44ad7d9e13efefd36fdd2db738cfcfbaf36e46ae1dd7c8f589a1c59ee28b537df4b3bbc3da499dca1bf5913250183cb5e2ff23ebf42fdaecf48e05912e2243738bd86f780ba8ea49155994f59ba79021dbd90f00979101", &(0x7f00000009c0)="4abbd15e8a2bf75dd98a4b77d60750a6bc7a24a69e4a2f9a9b375adf4a4532ec6fad9ac04b0944769e1c1cd52d858c19d9dfa962d72a4e6d6e5c2cd50fbaf17c6121cbf730dbdefd84ce760447509d4d4904cf5cf8ca8b711f4091987686f293996a8b7cd5ead8d4d6fb4d2636f15957271a43847d479b6ab1c5a6f4542bc102dcb8103c521638598736fab80953c1f0157a89bee7fae9f84abeaecf4ce1bddc2031f6e3ba35137e2c147846d7cf6dc9aa57bb7627b206ad6bde11061382eaee38ef10770aa6c4e22385283f82df13249a6e7a6d7d141e83385e073f24a21e4533de", 0x2, r0, 0x4}, 0x38)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r4 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)

2.239632117s ago: executing program 3 (id=2593):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x88fb, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.108325754s ago: executing program 0 (id=2594):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39ddbb1edb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a634b93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939db52812e07795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b59895e0309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a10100000000000000c9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670e31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301ae227b713a371414c98695e559f9cbf6b046184064a5f2424cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167a9f006685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63db66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce985a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90a6e865225f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853b8b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd0900a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09ac0090609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227d9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89732c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d1700000000000000f65d0eb4b7b077f1b4d3c5254753ddc9d5861fca4ec4205af1c89fa638b00342ff5f5994fc1f042d1b4a0000000000000070035394b646baa4ba26f70c2c2fe2bc501ecc19f538fdeb7485b73a72a3cba6c50721ce39a0dba3757fcfdb20f40fc9f7fb5d0b6100000000000000005bc7aff2c5b266f8276c6a6eebeae26b7410b7b506f7518ef70721f4315b04f1c35d5c5ab58d6d78682c21821d8e0648feddf5734daba6e219ddc4708f0de8032515fdd2825334e43786d58caeaaee3bdfcfc7e27d90f26de71d00417b23910b4f2c06d21313a73fdb069482241e09d49d37d91a43a08812df97700683e828735af95018960271e49d61fb985e088d079ee30b347952dc5ba725047cef9b0065fed61cf2a4336bd8b3dea27ab071fc2cea404b8d39b798aef5739327b0f02add98cb77ad6c6fc582798a8e5b0e7baf898efaff86d859932b903881253c3457a86fb5ff849bb51959d3d16cba8e59bc854be0509d12d800000000000000000000000000f317892775411b258f8065c160e82caabcc7b2dd9bd88d2974d465ca94431d92f2240fa8e11aec7ee5c726b2c32b749ca10490eab4194626c58ec84f9fe93551027e829eed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x8c, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba57", 0x5dc}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x90000, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x104)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a20084497bd8986217576793217bb2d187b6916bc347fc12d7c595ce5941de6971835349195f796e11ef003efbfa2a7d5e45518038deb1152484b8c2f6489525de09f367faabdd81843df053c16fdc"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d57c60adaae754151c", @ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x20)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x4}, 0x10)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

2.097613302s ago: executing program 2 (id=2595):
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x4048841)
recvmsg(r0, 0x0, 0x40008140)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1800, 0x0)
socket$kcm(0x29, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2.038897582s ago: executing program 3 (id=2596):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x2, &(0x7f0000000680)=@raw=[@jmp={0x5, 0x1, 0x6, 0x1, 0x8, 0x40, 0x4}, @exit], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xa2, &(0x7f00000008c0)=""/162, 0x83f00, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000980)=[{0xc, 0x2, 0xf, 0xc}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x3, 0xd, 0x7}, {0x5, 0x5, 0xa, 0x4}, {0x0, 0x2, 0x7, 0x8}, {0x2, 0x3, 0x2, 0xa}], 0x10, 0x1000}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@fwd={0x3}, @fwd={0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @fwd={0x4}, @restrict={0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x23, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000b00)=""/7, 0x80, 0x7, 0x1, 0x26}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x4, 0x9, 0xf08, 0x8010, r1, 0x667, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz0\x00', 0x200002, 0x0)
r9 = gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000580)="afade2b0a0f2f0096033b64d2cfd4c1863ae2e45bd0380433e6f8cf2d91f67e76c2613ea4fed2c608d8a0c0f7331f0debb3e3993cd7369f16417a41470b1fcbc85f63b1da916375521ab478fee79627513ea89514783969bde714258cb8c8cc4", 0x60}], 0x1, &(0x7f00000010c0)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r3, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff, r4, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [r7, r3, r4, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r4, r3, r3, r4, r3, r1]}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x138, 0x24000081}, 0x8000)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x3ff, <r12=>0x0}, 0x8)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000300008018420000fcfffffd0000000000000000950000000000000018010000202070250000000000c6d8207b1af8ff00000000bfa1000000000000ee000000f8ffffffb702000008000300b7030000ff00000085000000060000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, r11, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0xf, 0x8}, 0x10, r12, r11, 0x0, &(0x7f0000000700), 0x0, 0x10, 0xad8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r13, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000700), 0x0, 0xfffffffffffffe0b, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
r16 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r15}, &(0x7f0000000080), &(0x7f00000001c0)=r16}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r15, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1d, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000900000000000000ff7f000018110000", @ANYRES32=r11, @ANYBLOB="0004000000000000b70200007d2ffa8cb7031900000000008500000083000000bf0900000000000055090100000000009500000000000000186300000000000000000000faffffff851000", @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018420000080000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x5, 0x1000, &(0x7f0000002980)=""/4096, 0x41100, 0x0, '\x00', r14, 0x25, r10, 0x8, &(0x7f0000000d40)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, r15], 0x0, 0x10, 0xba1d}, 0x94)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1, 0x0, '\x00', r14, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r17, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r18 = socket$kcm(0x2, 0x1, 0x84)
recvmsg$kcm(r18, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)

1.902428167s ago: executing program 1 (id=2597):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="020000009a2e40d347944a40f95763ead1bf3b00000000000000e6ffffff968e45b60000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r2}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6612}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311fe1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000010)
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000005080)=""/4087, 0xff7}, {&(0x7f00000011c0)=""/4089, 0xff9}, {&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000000040)=""/54, 0x36}], 0x5}, 0x40010000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x2a}, @jmp={0x5, 0x1, 0xc, 0x5, 0x4, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0x59}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x6d, &(0x7f0000000500)=""/109, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0xffffffcb, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a00)={@fallback=r8, 0x2f, 0x1, 0xfc7, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@cgroup, r10, 0x10, 0x13, r7, @void, @value=r7, @void, @void, r11}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
r12 = socket$kcm(0x10, 0x3, 0x10)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r13, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000000c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10)
sendmsg$kcm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0)

1.875652513s ago: executing program 2 (id=2598):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x0)

1.675014207s ago: executing program 0 (id=2599):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000003}, 0x2, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0xf, 0x5, 0x4, 0x0, 0x0, 0x8, 0x80, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9e}, 0x10000, 0xec0, 0x5, 0x2, 0x1e, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xb, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)

1.629766069s ago: executing program 2 (id=2600):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x30, 0x61, 0x5f, 0x2e]}}, 0x0, 0x2a, 0x0, 0x9, 0x6}, 0x28) (fail_nth: 14)

1.548684554s ago: executing program 3 (id=2601):
r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x1, 0xe, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000bf87ed100002008500000075000000850000005000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@llc={0x1a, 0x313, 0x9, 0x9, 0xa, 0x80}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="0039ae1e407a83198b92e29ed1f3d4e179853f408f936d4462665f4fc1880a889d55fbcf9089943e81806efb39ea1ec19e0a9800e4459df6325211efa7ca761b", 0x40}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xe6}}], 0xd8}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x15, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040500ec59acbc041309f848290000005e140602010000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80)

1.155224065s ago: executing program 2 (id=2602):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10000}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffdc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.154640114s ago: executing program 1 (id=2603):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40008140)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)='\"', 0x1}], 0x1}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.111707637s ago: executing program 0 (id=2604):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x84ac7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x40, 0x6, 0xfffffffe, 0x2, 0x0, 0xffff0000, 0x400, 0x0, 0x791, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc020660b, &(0x7f0000000080))

1.027798402s ago: executing program 2 (id=2605):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x32, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4)
sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="a6064b4c827a454a8b", 0x9}], 0x1, 0x0, 0x0, 0x4004051}, 0x20004011)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)

1.01506249s ago: executing program 3 (id=2606):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40)=0xffffffffffffffff, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8142c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2c, 0x3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

961.97826ms ago: executing program 0 (id=2607):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39ddbb1edb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a634b93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939db52812e07795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b59895e0309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a10100000000000000c9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670e31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301ae227b713a371414c98695e559f9cbf6b046184064a5f2424cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167a9f006685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63db66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce985a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90a6e865225f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853b8b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e000000000000000000000087b97a200609c77e0000000000000000d3a54ccd0900a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09ac0090609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227d9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89732c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b2647726795617a9d1700000000000000f65d0eb4b7b077f1b4d3c5254753ddc9d5861fca4ec4205af1c89fa638b00342ff5f5994fc1f042d1b4a0000000000000070035394b646baa4ba26f70c2c2fe2bc501ecc19f538fdeb7485b73a72a3cba6c50721ce39a0dba3757fcfdb20f40fc9f7fb5d0b6100000000000000005bc7aff2c5b266f8276c6a6eebeae26b7410b7b506f7518ef70721f4315b04f1c35d5c5ab58d6d78682c21821d8e0648feddf5734daba6e219ddc4708f0de8032515fdd2825334e43786d58caeaaee3bdfcfc7e27d90f26de71d00417b23910b4f2c06d21313a73fdb069482241e09d49d37d91a43a08812df97700683e828735af95018960271e49d61fb985e088d079ee30b347952dc5ba725047cef9b0065fed61cf2a4336bd8b3dea27ab071fc2cea404b8d39b798aef5739327b0f02add98cb77ad6c6fc582798a8e5b0e7baf898efaff86d859932b903881253c3457a86fb5ff849bb51959d3d16cba8e59bc854be0509d12d800000000000000000000000000f317892775411b258f8065c160e82caabcc7b2dd9bd88d2974d465ca94431d92f2240fa8e11aec7ee5c726b2c32b749ca10490eab4194626c58ec84f9fe93551027e829eed"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x8e, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da2", 0x5dc}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x90000, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x104)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000006"], 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a20084497bd8986217576793217bb2d187b6916bc347fc12d7c595ce5941de6971835349195f796e11ef003efbfa2a7d5e45518038deb1152484b8c2f6489525de09f367faabdd81843df053c16fdc"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e9"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d57c60adaae754151c", @ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], 0x20)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r7, 0xffffffffffffffff, 0x4}, 0x10)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

961.38753ms ago: executing program 1 (id=2608):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}, 0x0)

757.880614ms ago: executing program 1 (id=2609):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001900030002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x2, &(0x7f0000000680)=@raw=[@jmp={0x5, 0x1, 0x6, 0x1, 0x8, 0x40, 0x4}, @exit], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xa2, &(0x7f00000008c0)=""/162, 0x83f00, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000980)=[{0xc, 0x2, 0xf, 0xc}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x3, 0xd, 0x7}, {0x5, 0x5, 0xa, 0x4}, {0x0, 0x2, 0x7, 0x8}, {0x2, 0x3, 0x2, 0xa}], 0x10, 0x1000}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@fwd={0x3}, @fwd={0x4}, @float={0x9, 0x0, 0x0, 0x10, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @fwd={0x4}, @restrict={0x4}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x74, 0x0, 0x23, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000b00)=""/7, 0x80, 0x7, 0x1, 0x26}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x4, 0x9, 0xf08, 0x8010, r1, 0x667, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xc}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz0\x00', 0x200002, 0x0)
r9 = gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000580)="afade2b0a0f2f0096033b64d2cfd4c1863ae2e45bd0380433e6f8cf2d91f67e76c2613ea4fed2c608d8a0c0f7331f0debb3e3993cd7369f16417a41470b1fcbc85f63b1da916375521ab478fee79627513ea89514783969bde714258cb8c8cc4", 0x60}], 0x1, &(0x7f00000010c0)=[@rights={{0x24, 0x1, 0x1, [r2, r1, r3, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, r1, r3, 0xffffffffffffffff, r4, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [r7, r3, r4, r1, r8]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r4, r3, r3, r4, r3, r1]}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x138, 0x24000081}, 0x8000)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x3ff, <r12=>0x0}, 0x8)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000300008018420000fcfffffd0000000000000000950000000000000018010000202070250000000000c6d8207b1af8ff00000000bfa1000000000000ee000000f8ffffffb702000008000300b7030000ff00000085000000060000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, r11, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0xf, 0x8}, 0x10, r12, r11, 0x0, &(0x7f0000000700), 0x0, 0x10, 0xad8}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r13, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0, 0x18, &(0x7f0000000700), 0x0, 0xfffffffffffffe0b, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48)
r16 = socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r15}, &(0x7f0000000080), &(0x7f00000001c0)=r16}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r15, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1d, &(0x7f0000001340)=ANY=[@ANYBLOB="180000000900000000000000ff7f000018110000", @ANYRES32=r11, @ANYBLOB="0004000000000000b70200007d2ffa8cb7031900000000008500000083000000bf0900000000000055090100000000009500000000000000186300000000000000000000faffffff851000", @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018420000080000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x5, 0x1000, &(0x7f0000002980)=""/4096, 0x41100, 0x0, '\x00', r14, 0x25, r10, 0x8, &(0x7f0000000d40)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, r15], 0x0, 0x10, 0xba1d}, 0x94)
r17 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x14, 0x4, 0x8, 0x5, 0x0, 0x1, 0x0, '\x00', r14, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r17, &(0x7f0000000680), &(0x7f0000000600)=""/73}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r18 = socket$kcm(0x2, 0x1, 0x84)
recvmsg$kcm(r18, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)

650.489415ms ago: executing program 0 (id=2610):
r0 = socket$kcm(0x11, 0x3, 0x300)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x6, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200140000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x46, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0)
recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400"], 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000900)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)

418.994994ms ago: executing program 3 (id=2611):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x500, 0x0, 0x0, 0x0, 0x2}, 0x50)

359.227624ms ago: executing program 0 (id=2612):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x125, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x58, 0x0, 0x0, 0x0, 0x92a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x5, 0x0) (async)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4)
socket$kcm(0x21, 0x2, 0x2) (async)
socket$kcm(0x21, 0x2, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, r5, 0xfffffffffffffffc, r0, 0x9) (async)
perf_event_open(0x0, r5, 0xfffffffffffffffc, r0, 0x9)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x0)
socket$kcm(0x2c, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x100})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080))
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10) (async)
close(r10)

280.67177ms ago: executing program 1 (id=2613):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x10000}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x2, 0x7}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffdc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

881.59µs ago: executing program 3 (id=2614):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000004000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 2 (id=2615):
r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x28, 0x1, 0x1, 0xe, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000640), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000bf87ed100002008500000075000000850000005000000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f00000000c0)=@llc={0x1a, 0x313, 0x9, 0x9, 0xa, 0x80}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="0039ae1e407a83198b92e29ed1f3d4e179853f408f936d4462665f4fc1880a889d55fbcf9089943e81806efb39ea1ec19e0a9800e4459df6325211efa7ca761b", 0x40}], 0x1, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xe6}}], 0xd8}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0x15, 0x5, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040500ec59acbc041309f848290000005e140602010000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x80)

kernel console output (not intermixed with test programs):

k: 40 bytes leftover after parsing attributes in process `syz.0.1616'.
[  301.278677][T10341] netlink: 'syz.2.1619': attribute type 153 has an invalid length.
[  301.331848][T10341] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1619'.
[  302.122045][T10361] netlink: 'syz.0.1627': attribute type 10 has an invalid length.
[  302.130396][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1627'.
[  303.176258][T10374] netlink: 'syz.3.1631': attribute type 10 has an invalid length.
[  303.805044][T10386] netlink: 'syz.0.1636': attribute type 10 has an invalid length.
[  303.825832][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1636'.
[  304.137058][T10397] netlink: 'syz.0.1640': attribute type 29 has an invalid length.
[  304.156091][T10397] netlink: 'syz.0.1640': attribute type 29 has an invalid length.
[  304.190891][T10400] netlink: 'syz.0.1640': attribute type 29 has an invalid length.
[  304.234151][T10398] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1638'.
[  304.327660][T10398] netlink: 'syz.1.1638': attribute type 10 has an invalid length.
[  304.370114][T10402] netlink: 'syz.2.1641': attribute type 10 has an invalid length.
[  305.366447][T10425] validate_nla: 2 callbacks suppressed
[  305.366466][T10425] netlink: 'syz.2.1651': attribute type 10 has an invalid length.
[  305.425722][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1651'.
[  305.651308][T10431] netlink: 'syz.3.1652': attribute type 10 has an invalid length.
[  305.924153][T10433] syzkaller0: entered promiscuous mode
[  305.998072][T10433] syzkaller0: entered allmulticast mode
[  306.081104][T10439] netlink: 'syz.0.1656': attribute type 25 has an invalid length.
[  306.096067][T10439] netlink: 'syz.0.1656': attribute type 9 has an invalid length.
[  306.186406][T10444] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1657'.
[  306.427185][T10444] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1657'.
[  308.314951][T10449] netlink: 'syz.0.1659': attribute type 22 has an invalid length.
[  308.338460][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1659'.
[  308.477047][T10451] netlink: 'syz.0.1662': attribute type 10 has an invalid length.
[  308.485039][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1662'.
[  308.625272][T10454] syzkaller0: entered promiscuous mode
[  308.635873][T10454] syzkaller0: entered allmulticast mode
[  309.566842][T10476] netlink: 'syz.3.1670': attribute type 10 has an invalid length.
[  309.602234][T10474] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1669'.
[  311.008848][T10489] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1675'.
[  312.060427][T10510] netlink: 'syz.3.1682': attribute type 10 has an invalid length.
[  312.074457][T10506] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1680'.
[  312.441398][T10506] netlink: 'syz.1.1680': attribute type 3 has an invalid length.
[  312.452535][T10506] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1680'.
[  313.267992][T10526] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1686'.
[  314.050449][T10538] netlink: 'syz.1.1692': attribute type 10 has an invalid length.
[  314.110459][T10535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  314.118380][T10535] IPv6: NLM_F_CREATE should be set when creating new route
[  314.126046][T10535] IPv6: NLM_F_CREATE should be set when creating new route
[  314.133549][T10535] IPv6: NLM_F_CREATE should be set when creating new route
[  315.057086][T10561] netlink: 'syz.1.1702': attribute type 10 has an invalid length.
[  315.435521][T10568] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1705'.
[  316.777634][T10590] syzkaller0: entered promiscuous mode
[  316.803449][T10590] syzkaller0: entered allmulticast mode
[  317.391416][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  317.398010][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  318.581509][   T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  319.876759][T10608] netlink: 'syz.0.1719': attribute type 10 has an invalid length.
[  320.975153][T10628] netlink: 152896 bytes leftover after parsing attributes in process `syz.2.1729'.
[  321.146134][T10634] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1730'.
[  321.159822][T10634] netlink: 'syz.0.1730': attribute type 10 has an invalid length.
[  321.959349][T10656] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  321.972818][T10656] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  322.002937][T10656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1740'.
[  322.020343][T10656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1740'.
[  322.034993][T10656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1740'.
[  322.323922][T10663] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1743'.
[  322.499346][T10663] netlink: 'syz.0.1743': attribute type 10 has an invalid length.
[  323.583639][T10691] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1755'.
[  323.670792][T10691] netlink: 'syz.0.1755': attribute type 10 has an invalid length.
[  323.908333][T10700] netlink: 'syz.1.1759': attribute type 10 has an invalid length.
[  323.929796][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1759'.
[  325.199463][T10720] netlink: 'syz.0.1768': attribute type 25 has an invalid length.
[  325.235370][T10720] netlink: 'syz.0.1768': attribute type 9 has an invalid length.
[  325.426519][ T7392] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  325.434393][ T7392] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  325.454197][T10725] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  325.469404][T10725] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  325.494602][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'.
[  325.512722][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1770'.
[  325.522868][T10728] netlink: 'syz.0.1771': attribute type 10 has an invalid length.
[  325.960379][T10738] netlink: 'syz.3.1775': attribute type 10 has an invalid length.
[  326.550831][T10756] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  326.597261][T10756] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  326.601081][T10758] __nla_validate_parse: 3 callbacks suppressed
[  326.601096][T10758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1782'.
[  326.610489][T10745] netlink: 'syz.2.1778': attribute type 10 has an invalid length.
[  326.643592][T10745] netlink: 'syz.2.1778': attribute type 10 has an invalid length.
[  326.664907][T10758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1782'.
[  326.687976][T10756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1782'.
[  326.707231][T10761] netlink: 'syz.1.1784': attribute type 10 has an invalid length.
[  326.716030][T10761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1784'.
[  326.937791][T10767] netlink: 'syz.1.1793': attribute type 10 has an invalid length.
[  326.954233][T10767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1793'.
[  327.504670][T10780] netlink: 'syz.0.1791': attribute type 10 has an invalid length.
[  327.648491][T10786] netlink: 'syz.3.1792': attribute type 25 has an invalid length.
[  327.865612][ T5083] Bluetooth: hci2: Malformed Event: 0x13
[  327.893930][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1797'.
[  328.379371][T10812] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1804'.
[  328.571216][T10818] IPv6: Can't replace route, no match found
[  328.725014][T10826] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1808'.
[  329.530770][T10854] netlink: set zone limit has 8 unknown bytes
[  329.711517][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1822'.
[  329.728434][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1822'.
[  330.740795][T10889] validate_nla: 5 callbacks suppressed
[  330.740813][T10889] netlink: 'syz.2.1836': attribute type 10 has an invalid length.
[  331.651314][T10908] netlink: 'syz.1.1847': attribute type 10 has an invalid length.
[  331.661072][T10912] FAULT_INJECTION: forcing a failure.
[  331.661072][T10912] name failslab, interval 1, probability 0, space 0, times 0
[  331.674249][T10912] CPU: 0 PID: 10912 Comm: syz.3.1846 Not tainted syzkaller #0
[  331.681729][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  331.691985][T10912] Call Trace:
[  331.695281][T10912]  <TASK>
[  331.698231][T10912]  dump_stack_lvl+0x18c/0x250
[  331.702942][T10912]  ? show_regs_print_info+0x20/0x20
[  331.708164][T10912]  ? load_image+0x400/0x400
[  331.712686][T10912]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  331.718691][T10912]  ? __asan_memset+0x22/0x40
[  331.723303][T10912]  should_fail_ex+0x39d/0x4d0
[  331.728009][T10912]  should_failslab+0x9/0x20
[  331.732540][T10912]  slab_pre_alloc_hook+0x59/0x310
[  331.737586][T10912]  ? __debug_object_init+0xec/0x450
[  331.742813][T10912]  kmem_cache_alloc+0x5a/0x2d0
[  331.747594][T10912]  ? slab_build_skb+0x2b/0x3f0
[  331.752383][T10912]  slab_build_skb+0x2b/0x3f0
[  331.756996][T10912]  bpf_prog_test_run_skb+0x3c8/0x12b0
[  331.762385][T10912]  ? __fget_files+0x28/0x4b0
[  331.766995][T10912]  ? __fget_files+0x28/0x4b0
[  331.771603][T10912]  ? __fget_files+0x43d/0x4b0
[  331.776312][T10912]  ? cpu_online+0x60/0x60
[  331.780672][T10912]  bpf_prog_test_run+0x321/0x390
[  331.785633][T10912]  __sys_bpf+0x49d/0x890
[  331.789901][T10912]  ? bpf_link_show_fdinfo+0x390/0x390
[  331.795308][T10912]  ? lock_chain_count+0x20/0x20
[  331.800190][T10912]  __x64_sys_bpf+0x7c/0x90
[  331.804633][T10912]  do_syscall_64+0x55/0xa0
[  331.809072][T10912]  ? clear_bhb_loop+0x40/0x90
[  331.813768][T10912]  ? clear_bhb_loop+0x40/0x90
[  331.818475][T10912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  331.824389][T10912] RIP: 0033:0x7f92e3b9c799
[  331.828820][T10912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.848450][T10912] RSP: 002b:00007f92e4a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  331.856890][T10912] RAX: ffffffffffffffda RBX: 00007f92e3e15fa0 RCX: 00007f92e3b9c799
[  331.864888][T10912] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  331.872881][T10912] RBP: 00007f92e4a23090 R08: 0000000000000000 R09: 0000000000000000
[  331.880880][T10912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.888871][T10912] R13: 00007f92e3e16038 R14: 00007f92e3e15fa0 R15: 00007ffeed6d9108
[  331.896878][T10912]  </TASK>
[  332.755222][T10939] __nla_validate_parse: 4 callbacks suppressed
[  332.755243][T10939] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1858'.
[  332.814395][T10939] netlink: 'syz.0.1858': attribute type 10 has an invalid length.
[  333.008348][T10941] netlink: 'syz.3.1859': attribute type 10 has an invalid length.
[  333.432122][T10949] FAULT_INJECTION: forcing a failure.
[  333.432122][T10949] name failslab, interval 1, probability 0, space 0, times 0
[  333.465758][T10949] CPU: 1 PID: 10949 Comm: syz.1.1863 Not tainted syzkaller #0
[  333.473274][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  333.483352][T10949] Call Trace:
[  333.486650][T10949]  <TASK>
[  333.489594][T10949]  dump_stack_lvl+0x18c/0x250
[  333.494301][T10949]  ? verify_lock_unused+0x140/0x140
[  333.499518][T10949]  ? show_regs_print_info+0x20/0x20
[  333.504760][T10949]  ? load_image+0x400/0x400
[  333.509298][T10949]  ? crng_make_state+0x350/0x700
[  333.514268][T10949]  ? lockdep_hardirqs_on+0x98/0x150
[  333.519495][T10949]  should_fail_ex+0x39d/0x4d0
[  333.524217][T10949]  should_failslab+0x9/0x20
[  333.528741][T10949]  slab_pre_alloc_hook+0x59/0x310
[  333.533806][T10949]  ? sctp_add_bind_addr+0x8c/0x360
[  333.539089][T10949]  __kmem_cache_alloc_node+0x53/0x250
[  333.544468][T10949]  ? sctp_add_bind_addr+0x8c/0x360
[  333.549578][T10949]  kmalloc_trace+0x2a/0xe0
[  333.554009][T10949]  sctp_add_bind_addr+0x8c/0x360
[  333.558951][T10949]  sctp_copy_local_addr_list+0x315/0x4f0
[  333.564583][T10949]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  333.570301][T10949]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  333.576460][T10949]  ? sctp_copy_one_addr+0x8c/0x350
[  333.581577][T10949]  sctp_bind_addr_copy+0xb3/0x3c0
[  333.586598][T10949]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  333.592923][T10949]  sctp_connect_new_asoc+0x2f9/0x6a0
[  333.598203][T10949]  ? __sctp_connect+0xd80/0xd80
[  333.603052][T10949]  ? __local_bh_enable_ip+0x13a/0x1c0
[  333.608419][T10949]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  333.613965][T10949]  ? security_sctp_bind_connect+0x89/0xb0
[  333.619682][T10949]  sctp_sendmsg+0x1575/0x28c0
[  333.624369][T10949]  ? sctp_getsockopt+0xb60/0xb60
[  333.629302][T10949]  ? aa_sk_perm+0x83c/0x970
[  333.633807][T10949]  ? aa_af_perm+0x330/0x330
[  333.638307][T10949]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  333.644716][T10949]  ? sock_rps_record_flow+0x19/0x3f0
[  333.649996][T10949]  ? inet_sendmsg+0xe9/0x2f0
[  333.654608][T10949]  ? inet_send_prepare+0x260/0x260
[  333.659720][T10949]  ____sys_sendmsg+0x5ba/0x960
[  333.664476][T10949]  ? __lock_acquire+0x7d40/0x7d40
[  333.669499][T10949]  ? __asan_memset+0x22/0x40
[  333.674084][T10949]  ? __sys_sendmsg_sock+0x30/0x30
[  333.679099][T10949]  ? __import_iovec+0x5f2/0x850
[  333.683954][T10949]  ? import_iovec+0x73/0xa0
[  333.688452][T10949]  ___sys_sendmsg+0x2a6/0x360
[  333.693125][T10949]  ? __sys_sendmsg+0x2a0/0x2a0
[  333.697916][T10949]  __se_sys_sendmsg+0x1c2/0x2b0
[  333.702761][T10949]  ? __x64_sys_sendmsg+0x80/0x80
[  333.707701][T10949]  ? syscall_enter_from_user_mode+0x2e/0x80
[  333.713596][T10949]  do_syscall_64+0x55/0xa0
[  333.718010][T10949]  ? clear_bhb_loop+0x40/0x90
[  333.722678][T10949]  ? clear_bhb_loop+0x40/0x90
[  333.727351][T10949]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  333.733239][T10949] RIP: 0033:0x7f6fb8f9c799
[  333.737648][T10949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  333.757247][T10949] RSP: 002b:00007f6fb9ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  333.765658][T10949] RAX: ffffffffffffffda RBX: 00007f6fb9215fa0 RCX: 00007f6fb8f9c799
[  333.773622][T10949] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000014
[  333.781589][T10949] RBP: 00007f6fb9ee6090 R08: 0000000000000000 R09: 0000000000000000
[  333.789558][T10949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  333.797520][T10949] R13: 00007f6fb9216038 R14: 00007f6fb9215fa0 R15: 00007ffec8f13188
[  333.805500][T10949]  </TASK>
[  334.389339][T10968] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1869'.
[  334.418324][T10967] netlink: 'syz.0.1870': attribute type 10 has an invalid length.
[  334.426839][T10968] netlink: 'syz.3.1869': attribute type 10 has an invalid length.
[  334.725019][T10981] netlink: 'syz.2.1877': attribute type 21 has an invalid length.
[  334.747343][T10981] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1877'.
[  334.782703][T10978] netlink: 'syz.3.1876': attribute type 25 has an invalid length.
[  334.803490][T10978] netlink: 'syz.3.1876': attribute type 9 has an invalid length.
[  335.128625][T10991] netlink: 'syz.2.1883': attribute type 10 has an invalid length.
[  335.319597][T10996] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1885'.
[  335.803175][T11014] validate_nla: 1 callbacks suppressed
[  335.803190][T11014] netlink: 'syz.0.1893': attribute type 10 has an invalid length.
[  336.173941][T11027] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1898'.
[  336.212932][T11027] netlink: 'syz.0.1898': attribute type 10 has an invalid length.
[  339.309903][T11049] netlink: 'syz.3.1904': attribute type 10 has an invalid length.
[  339.564404][T11057] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1908'.
[  339.618059][T11057] netlink: 'syz.0.1908': attribute type 10 has an invalid length.
[  340.249602][T11075] FAULT_INJECTION: forcing a failure.
[  340.249602][T11075] name failslab, interval 1, probability 0, space 0, times 0
[  340.284761][T11075] CPU: 0 PID: 11075 Comm: syz.1.1916 Not tainted syzkaller #0
[  340.292381][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  340.302565][T11075] Call Trace:
[  340.305952][T11075]  <TASK>
[  340.309007][T11075]  dump_stack_lvl+0x18c/0x250
[  340.313845][T11075]  ? show_regs_print_info+0x20/0x20
[  340.319189][T11075]  ? load_image+0x400/0x400
[  340.323878][T11075]  ? verify_lock_unused+0x140/0x140
[  340.329202][T11075]  ? perf_trace_lock_acquire+0x34f/0x410
[  340.335028][T11075]  should_fail_ex+0x39d/0x4d0
[  340.339915][T11075]  should_failslab+0x9/0x20
[  340.344532][T11075]  slab_pre_alloc_hook+0x59/0x310
[  340.349718][T11075]  kmem_cache_alloc+0x5a/0x2d0
[  340.354585][T11075]  ? skb_clone+0x1eb/0x370
[  340.359178][T11075]  skb_clone+0x1eb/0x370
[  340.363592][T11075]  __netlink_deliver_tap+0x41c/0x830
[  340.369110][T11075]  ? netlink_deliver_tap+0x2e/0x1b0
[  340.374455][T11075]  netlink_deliver_tap+0x19c/0x1b0
[  340.379720][T11075]  netlink_unicast+0x72c/0x8d0
[  340.384706][T11075]  netlink_sendmsg+0x8d0/0xbf0
[  340.389695][T11075]  ? netlink_getsockopt+0x590/0x590
[  340.395060][T11075]  ? aa_sock_msg_perm+0x94/0x150
[  340.400144][T11075]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  340.405531][T11075]  ? security_socket_sendmsg+0x80/0xa0
[  340.411100][T11075]  ? netlink_getsockopt+0x590/0x590
[  340.416453][T11075]  ____sys_sendmsg+0x5ba/0x960
[  340.421414][T11075]  ? __asan_memset+0x22/0x40
[  340.426123][T11075]  ? __sys_sendmsg_sock+0x30/0x30
[  340.431248][T11075]  ? __import_iovec+0x3fa/0x850
[  340.436303][T11075]  ? import_iovec+0x73/0xa0
[  340.440971][T11075]  ___sys_sendmsg+0x2a6/0x360
[  340.445758][T11075]  ? get_pid_task+0x20/0x1e0
[  340.450506][T11075]  ? __sys_sendmsg+0x2a0/0x2a0
[  340.455597][T11075]  ? __lock_acquire+0x7d40/0x7d40
[  340.460992][T11075]  __se_sys_sendmsg+0x1c2/0x2b0
[  340.465981][T11075]  ? __x64_sys_sendmsg+0x80/0x80
[  340.471201][T11075]  ? lockdep_hardirqs_on+0x98/0x150
[  340.476547][T11075]  do_syscall_64+0x55/0xa0
[  340.481082][T11075]  ? clear_bhb_loop+0x40/0x90
[  340.485862][T11075]  ? clear_bhb_loop+0x40/0x90
[  340.490683][T11075]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  340.496689][T11075] RIP: 0033:0x7f6fb8f9c799
[  340.501219][T11075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.520944][T11075] RSP: 002b:00007f6fb9ee6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  340.529499][T11075] RAX: ffffffffffffffda RBX: 00007f6fb9215fa0 RCX: 00007f6fb8f9c799
[  340.537586][T11075] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  340.545681][T11075] RBP: 00007f6fb9ee6090 R08: 0000000000000000 R09: 0000000000000000
[  340.553846][T11075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.561937][T11075] R13: 00007f6fb9216038 R14: 00007f6fb9215fa0 R15: 00007ffec8f13188
[  340.570184][T11075]  </TASK>
[  341.037231][T11095] syzkaller1: tun_chr_ioctl cmd 2148553947
[  341.320000][T11103] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  341.340472][T11103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1927'.
[  341.547271][T11109] netlink: 'syz.1.1929': attribute type 10 has an invalid length.
[  342.587604][T11132] netlink: 'syz.0.1940': attribute type 10 has an invalid length.
[  342.627138][T11132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1940'.
[  342.699758][T11138] netlink: 'syz.2.1941': attribute type 10 has an invalid length.
[  342.928733][T11144] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1944'.
[  343.008876][T11151] netlink: 'syz.3.1943': attribute type 21 has an invalid length.
[  343.499837][T11168] netlink: 'syz.0.1950': attribute type 10 has an invalid length.
[  343.796083][T11175] netlink: 'syz.1.1954': attribute type 10 has an invalid length.
[  343.872783][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1954'.
[  344.489320][T11188] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1960'.
[  344.565284][T11188] netlink: 'syz.1.1960': attribute type 10 has an invalid length.
[  344.589492][T11190] FAULT_INJECTION: forcing a failure.
[  344.589492][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.629922][T11190] CPU: 1 PID: 11190 Comm: syz.0.1959 Not tainted syzkaller #0
[  344.637469][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  344.647546][T11190] Call Trace:
[  344.650839][T11190]  <TASK>
[  344.653782][T11190]  dump_stack_lvl+0x18c/0x250
[  344.658486][T11190]  ? show_regs_print_info+0x20/0x20
[  344.663703][T11190]  ? load_image+0x400/0x400
[  344.668234][T11190]  ? __lock_acquire+0x7d40/0x7d40
[  344.673287][T11190]  ? snprintf+0xe9/0x140
[  344.677553][T11190]  should_fail_ex+0x39d/0x4d0
[  344.682262][T11190]  _copy_to_user+0x2f/0xa0
[  344.686701][T11190]  simple_read_from_buffer+0xe7/0x150
[  344.692092][T11190]  proc_fail_nth_read+0x1e8/0x260
[  344.697121][T11190]  ? proc_fault_inject_write+0x360/0x360
[  344.702753][T11190]  ? fsnotify_perm+0x271/0x5e0
[  344.707518][T11190]  ? proc_fault_inject_write+0x360/0x360
[  344.713164][T11190]  vfs_read+0x28b/0x970
[  344.717322][T11190]  ? kernel_read+0x1e0/0x1e0
[  344.721904][T11190]  ? __fget_files+0x28/0x4b0
[  344.726494][T11190]  ? __fget_files+0x28/0x4b0
[  344.731077][T11190]  ? __fget_files+0x43d/0x4b0
[  344.735761][T11190]  ? __fdget_pos+0x2a3/0x330
[  344.740351][T11190]  ? ksys_read+0x75/0x260
[  344.744674][T11190]  ksys_read+0x150/0x260
[  344.748913][T11190]  ? vfs_write+0x990/0x990
[  344.753326][T11190]  ? lockdep_hardirqs_on+0x98/0x150
[  344.758535][T11190]  do_syscall_64+0x55/0xa0
[  344.762947][T11190]  ? clear_bhb_loop+0x40/0x90
[  344.767617][T11190]  ? clear_bhb_loop+0x40/0x90
[  344.772286][T11190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  344.778171][T11190] RIP: 0033:0x7fd85655cfce
[  344.782579][T11190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  344.802184][T11190] RSP: 002b:00007fd857391fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  344.810589][T11190] RAX: ffffffffffffffda RBX: 00007fd8573926c0 RCX: 00007fd85655cfce
[  344.818557][T11190] RDX: 000000000000000f RSI: 00007fd8573920a0 RDI: 0000000000000006
[  344.826522][T11190] RBP: 00007fd857392090 R08: 0000000000000000 R09: 0000000000000000
[  344.834484][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.842447][T11190] R13: 00007fd856816038 R14: 00007fd856815fa0 R15: 00007ffc89e3eca8
[  344.850425][T11190]  </TASK>
[  344.885337][T11194] netlink: 'syz.3.1961': attribute type 10 has an invalid length.
[  345.074183][T11200] netlink: 'syz.0.1964': attribute type 10 has an invalid length.
[  345.087322][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1964'.
[  345.982191][T11215] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1971'.
[  346.080239][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1975'.
[  346.560873][T11241] validate_nla: 3 callbacks suppressed
[  346.560890][T11241] netlink: 'syz.2.1982': attribute type 10 has an invalid length.
[  347.085939][T11249] netlink: 'syz.0.1986': attribute type 10 has an invalid length.
[  347.100862][T11249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1986'.
[  347.436572][T11255] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1987'.
[  347.572216][T11260] netlink: 'syz.3.1987': attribute type 10 has an invalid length.
[  347.772064][T11266] netlink: 'syz.0.1992': attribute type 10 has an invalid length.
[  347.934652][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1994'.
[  348.294235][T11279] netlink: 'syz.1.1999': attribute type 25 has an invalid length.
[  348.316277][T11279] netlink: 'syz.1.1999': attribute type 9 has an invalid length.
[  348.558123][T11289] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2003'.
[  348.637372][T11289] netlink: 'syz.1.2003': attribute type 10 has an invalid length.
[  349.062879][T11298] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2005'.
[  350.728117][T11318] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2013'.
[  350.764547][T11318] netlink: 'syz.2.2013': attribute type 10 has an invalid length.
[  352.915665][T11323] netlink: 'syz.3.2015': attribute type 10 has an invalid length.
[  352.946759][T11323] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.959550][T11323] bridge_slave_1: left allmulticast mode
[  352.965244][T11323] bridge_slave_1: left promiscuous mode
[  352.987069][T11323] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.010690][T11328] netlink: 'syz.3.2015': attribute type 1 has an invalid length.
[  353.040143][T11323] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  353.080961][T11328] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2015'.
[  353.119982][T11328] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2015'.
[  353.356035][T11323] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.2015'.
[  353.979066][T11342] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2024'.
[  354.019649][T11342] netlink: 'syz.2.2024': attribute type 10 has an invalid length.
[  354.121041][T11346] netlink: 'syz.1.2025': attribute type 10 has an invalid length.
[  354.815205][T11371] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2036'.
[  354.852094][T11371] netlink: 'syz.2.2036': attribute type 10 has an invalid length.
[  354.872597][T11373] netlink: 'syz.1.2037': attribute type 10 has an invalid length.
[  355.248058][T11382] netlink: 'syz.0.2041': attribute type 25 has an invalid length.
[  355.268088][T11382] netlink: 'syz.0.2041': attribute type 9 has an invalid length.
[  355.764258][T11394] netlink: 'syz.0.2053': attribute type 25 has an invalid length.
[  355.814284][T11394] netlink: 'syz.0.2053': attribute type 9 has an invalid length.
[  356.552475][T11410] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2049'.
[  357.709133][T11429] 
: port 1(macsec0) entered blocking state
[  357.721318][T11429] 
: port 1(macsec0) entered disabled state
[  357.742081][T11429] macsec0: entered allmulticast mode
[  357.808291][T11429] veth1_macvtap: entered allmulticast mode
[  357.866199][T11429] macsec0: entered promiscuous mode
[  358.048869][T11440] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2063'.
[  358.139609][T11440] validate_nla: 2 callbacks suppressed
[  358.139629][T11440] netlink: 'syz.0.2063': attribute type 10 has an invalid length.
[  358.616485][T11449] netlink: 'syz.0.2065': attribute type 25 has an invalid length.
[  358.640116][T11449] netlink: 'syz.0.2065': attribute type 9 has an invalid length.
[  358.666368][T11451] netlink: 'syz.1.2064': attribute type 4 has an invalid length.
[  358.677512][T11451] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2064'.
[  358.771367][T11451] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  360.378472][T11473] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2073'.
[  360.412971][T11473] netlink: 'syz.2.2073': attribute type 10 has an invalid length.
[  360.526055][T11479] netlink: 'syz.0.2076': attribute type 25 has an invalid length.
[  360.545809][T11479] netlink: 'syz.0.2076': attribute type 9 has an invalid length.
[  361.380687][T11503] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2086'.
[  361.410876][T11503] netlink: 'syz.3.2086': attribute type 10 has an invalid length.
[  361.429557][T11506] netlink: 'syz.1.2087': attribute type 10 has an invalid length.
[  361.471954][T11506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2087'.
[  361.802709][T11510] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2089'.
[  362.549109][T11523] FAULT_INJECTION: forcing a failure.
[  362.549109][T11523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.609154][T11523] CPU: 0 PID: 11523 Comm: syz.2.2093 Not tainted syzkaller #0
[  362.616674][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  362.626752][T11523] Call Trace:
[  362.630048][T11523]  <TASK>
[  362.632996][T11523]  dump_stack_lvl+0x18c/0x250
[  362.637702][T11523]  ? show_regs_print_info+0x20/0x20
[  362.642928][T11523]  ? load_image+0x400/0x400
[  362.647457][T11523]  ? __might_fault+0xaa/0x120
[  362.652151][T11523]  ? __lock_acquire+0x7d40/0x7d40
[  362.657199][T11523]  should_fail_ex+0x39d/0x4d0
[  362.661909][T11523]  _copy_from_user+0x2f/0xe0
[  362.666521][T11523]  kcm_ioctl+0x352/0x1090
[  362.670872][T11523]  ? __kmem_cache_free+0xba/0x1e0
[  362.675924][T11523]  ? kcm_release+0x5b0/0x5b0
[  362.680536][T11523]  ? tomoyo_path_number_perm+0x5b4/0x620
[  362.686186][T11523]  ? tomoyo_path_number_perm+0x217/0x620
[  362.691818][T11523]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  362.697275][T11523]  sock_do_ioctl+0xfc/0x310
[  362.701789][T11523]  ? sock_show_fdinfo+0xb0/0xb0
[  362.706644][T11523]  sock_ioctl+0x5ba/0x7e0
[  362.710965][T11523]  ? sock_poll+0x3e0/0x3e0
[  362.715377][T11523]  ? bpf_lsm_file_ioctl+0x9/0x10
[  362.720305][T11523]  ? security_file_ioctl+0x80/0xa0
[  362.725417][T11523]  ? sock_poll+0x3e0/0x3e0
[  362.729823][T11523]  __se_sys_ioctl+0xfd/0x170
[  362.734406][T11523]  do_syscall_64+0x55/0xa0
[  362.738815][T11523]  ? clear_bhb_loop+0x40/0x90
[  362.743481][T11523]  ? clear_bhb_loop+0x40/0x90
[  362.748147][T11523]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  362.754029][T11523] RIP: 0033:0x7f22c459c799
[  362.758448][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.778060][T11523] RSP: 002b:00007f22c554c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  362.786480][T11523] RAX: ffffffffffffffda RBX: 00007f22c4815fa0 RCX: 00007f22c459c799
[  362.794474][T11523] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000005
[  362.802446][T11523] RBP: 00007f22c554c090 R08: 0000000000000000 R09: 0000000000000000
[  362.810411][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.818384][T11523] R13: 00007f22c4816038 R14: 00007f22c4815fa0 R15: 00007ffe1be88ae8
[  362.826360][T11523]  </TASK>
[  363.440514][T11531] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2104'.
[  363.498868][T11531] netlink: 'syz.3.2104': attribute type 10 has an invalid length.
[  363.973542][T11541] netlink: 'syz.3.2100': attribute type 25 has an invalid length.
[  364.022551][T11541] netlink: 'syz.3.2100': attribute type 9 has an invalid length.
[  364.710294][T11557] netlink: 'syz.2.2108': attribute type 10 has an invalid length.
[  364.730409][T11557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2108'.
[  364.927879][T11560] netlink: 'syz.0.2110': attribute type 10 has an invalid length.
[  365.137918][T11565] netlink: 'syz.3.2111': attribute type 1 has an invalid length.
[  365.175942][T11565] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2111'.
[  365.739047][T11574] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2115'.
[  365.790845][T11569] netlink: 'syz.3.2114': attribute type 25 has an invalid length.
[  365.836575][T11569] netlink: 'syz.3.2114': attribute type 9 has an invalid length.
[  366.075097][T11576] netlink: 'syz.0.2116': attribute type 33 has an invalid length.
[  366.107449][T11576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2116'.
[  366.227675][T11585] FAULT_INJECTION: forcing a failure.
[  366.227675][T11585] name failslab, interval 1, probability 0, space 0, times 0
[  366.240828][T11585] CPU: 1 PID: 11585 Comm: syz.3.2118 Not tainted syzkaller #0
[  366.248312][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  366.258389][T11585] Call Trace:
[  366.261679][T11585]  <TASK>
[  366.264619][T11585]  dump_stack_lvl+0x18c/0x250
[  366.269319][T11585]  ? show_regs_print_info+0x20/0x20
[  366.274528][T11585]  ? load_image+0x400/0x400
[  366.279066][T11585]  should_fail_ex+0x39d/0x4d0
[  366.283770][T11585]  should_failslab+0x9/0x20
[  366.288286][T11585]  slab_pre_alloc_hook+0x59/0x310
[  366.293337][T11585]  ? tcp_get_metrics+0x3bd/0x9f0
[  366.298291][T11585]  __kmem_cache_alloc_node+0x53/0x250
[  366.303677][T11585]  ? __rwlock_init+0x150/0x150
[  366.308461][T11585]  ? tcp_get_metrics+0x3bd/0x9f0
[  366.313407][T11585]  kmalloc_trace+0x2a/0xe0
[  366.317837][T11585]  tcp_get_metrics+0x3bd/0x9f0
[  366.322614][T11585]  ? tcp_fastopen_cache_set+0xe8/0x670
[  366.328081][T11585]  tcp_fastopen_cache_set+0x1aa/0x670
[  366.333466][T11585]  tcp_rcv_fastopen_synack+0x2a4/0x880
[  366.338936][T11585]  ? tcp_finish_connect+0x30b/0x5c0
[  366.344143][T11585]  tcp_rcv_state_process+0x1e53/0x4210
[  366.349622][T11585]  ? tcp_finish_connect+0x5c0/0x5c0
[  366.354828][T11585]  ? __local_bh_enable_ip+0x13a/0x1c0
[  366.360207][T11585]  ? lockdep_hardirqs_on+0x98/0x150
[  366.365425][T11585]  ? __local_bh_enable_ip+0x13a/0x1c0
[  366.370807][T11585]  tcp_v4_do_rcv+0x7b3/0xb80
[  366.375405][T11585]  ? do_raw_spin_unlock+0x121/0x230
[  366.380625][T11585]  __release_sock+0x1e5/0x460
[  366.385328][T11585]  release_sock+0x5f/0x1c0
[  366.389754][T11585]  tcp_sendmsg+0x39/0x50
[  366.394002][T11585]  ? inet_send_prepare+0x260/0x260
[  366.399115][T11585]  ____sys_sendmsg+0x5ba/0x960
[  366.403882][T11585]  ? __lock_acquire+0x7d40/0x7d40
[  366.408916][T11585]  ? __asan_memset+0x22/0x40
[  366.413516][T11585]  ? __sys_sendmsg_sock+0x30/0x30
[  366.418544][T11585]  ? __import_iovec+0x3fa/0x850
[  366.423510][T11585]  ? import_iovec+0x73/0xa0
[  366.428031][T11585]  ___sys_sendmsg+0x2a6/0x360
[  366.432723][T11585]  ? __sys_sendmsg+0x2a0/0x2a0
[  366.437518][T11585]  ? trace_call_bpf+0xc3/0x6c0
[  366.442326][T11585]  __se_sys_sendmsg+0x1c2/0x2b0
[  366.447188][T11585]  ? __x64_sys_sendmsg+0x80/0x80
[  366.452156][T11585]  ? lockdep_hardirqs_on+0x98/0x150
[  366.457363][T11585]  do_syscall_64+0x55/0xa0
[  366.461789][T11585]  ? clear_bhb_loop+0x40/0x90
[  366.466467][T11585]  ? clear_bhb_loop+0x40/0x90
[  366.471148][T11585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  366.477043][T11585] RIP: 0033:0x7f92e3b9c799
[  366.481467][T11585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  366.501077][T11585] RSP: 002b:00007f92e4a23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  366.509496][T11585] RAX: ffffffffffffffda RBX: 00007f92e3e15fa0 RCX: 00007f92e3b9c799
[  366.517471][T11585] RDX: 00000000200088d0 RSI: 0000200000000080 RDI: 0000000000000003
[  366.525444][T11585] RBP: 00007f92e4a23090 R08: 0000000000000000 R09: 0000000000000000
[  366.533416][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  366.541386][T11585] R13: 00007f92e3e16038 R14: 00007f92e3e15fa0 R15: 00007ffeed6d9108
[  366.549466][T11585]  </TASK>
[  366.783799][T11594] netlink: 'syz.1.2122': attribute type 10 has an invalid length.
[  366.800124][T11594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2122'.
[  367.408713][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2124'.
[  367.437480][T11601] batman_adv: batadv0: Adding interface: vlan1
[  367.454065][T11601] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  367.545050][T11601] batman_adv: batadv0: Interface activated: vlan1
[  368.308308][T11627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2132'.
[  371.067050][T11638] validate_nla: 4 callbacks suppressed
[  371.067063][T11638] netlink: 'syz.3.2136': attribute type 11 has an invalid length.
[  371.095736][T11638] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2136'.
[  371.399775][T11651] netlink: 'syz.2.2143': attribute type 10 has an invalid length.
[  371.426474][T11651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2143'.
[  372.089095][T11655] netlink: 'syz.1.2145': attribute type 10 has an invalid length.
[  372.381592][T11671] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2150'.
[  372.484348][T11668] netlink: 'syz.3.2149': attribute type 10 has an invalid length.
[  372.723526][T11681] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2151'.
[  374.957249][T11688] netlink: 'syz.3.2154': attribute type 25 has an invalid length.
[  374.997235][T11688] netlink: 'syz.3.2154': attribute type 9 has an invalid length.
[  375.285151][T11700] netlink: 'syz.2.2159': attribute type 10 has an invalid length.
[  375.611168][T11712] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2165'.
[  376.292142][T11730] netlink: 'syz.0.2173': attribute type 10 has an invalid length.
[  376.319672][T11736] netlink: 'syz.2.2176': attribute type 10 has an invalid length.
[  376.333551][T11736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2176'.
[  376.902542][T11746] netlink: 'syz.1.2179': attribute type 4 has an invalid length.
[  377.253030][T11760] netlink: 'syz.3.2184': attribute type 29 has an invalid length.
[  377.262443][T11760] netlink: 'syz.3.2184': attribute type 29 has an invalid length.
[  377.273419][T11760] netlink: 'syz.3.2184': attribute type 29 has an invalid length.
[  377.283093][T11760] netlink: 'syz.3.2184': attribute type 29 has an invalid length.
[  377.307801][T11765] netlink: 'syz.2.2187': attribute type 10 has an invalid length.
[  377.334000][T11765] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2187'.
[  377.345950][T11763] netlink: 'syz.1.2186': attribute type 10 has an invalid length.
[  377.710243][T11771] netlink: 'syz.1.2188': attribute type 2 has an invalid length.
[  377.731439][T11771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2188'.
[  377.772381][T11771] veth1_macvtap: left allmulticast mode
[  377.798367][T11771] veth1_macvtap: left promiscuous mode
[  377.987212][T11771] macsec0 (unregistering): left allmulticast mode
[  378.001061][T11771] macsec0 (unregistering): left promiscuous mode
[  378.022544][T11771] 
: port 1(macsec0) entered disabled state
[  378.161080][T11775] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2191'.
[  378.174895][T11775] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2191'.
[  378.297697][T11775] netlink: 145880 bytes leftover after parsing attributes in process `syz.2.2191'.
[  378.498170][T11785] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2195'.
[  378.740994][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  378.747504][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  378.774595][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'.
[  379.157453][T11807] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2202'.
[  379.355356][T11815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2205'.
[  379.428310][T11814] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2206'.
[  381.074794][T11870] FAULT_INJECTION: forcing a failure.
[  381.074794][T11870] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  381.106497][T11870] CPU: 1 PID: 11870 Comm: syz.1.2229 Not tainted syzkaller #0
[  381.114005][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  381.124066][T11870] Call Trace:
[  381.127364][T11870]  <TASK>
[  381.130307][T11870]  dump_stack_lvl+0x18c/0x250
[  381.135014][T11870]  ? show_regs_print_info+0x20/0x20
[  381.140239][T11870]  ? load_image+0x400/0x400
[  381.144771][T11870]  ? __might_fault+0xaa/0x120
[  381.149479][T11870]  ? __lock_acquire+0x7d40/0x7d40
[  381.154530][T11870]  should_fail_ex+0x39d/0x4d0
[  381.159235][T11870]  _copy_from_user+0x2f/0xe0
[  381.163843][T11870]  sk_setsockopt+0x2b2/0x2bc0
[  381.168543][T11870]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  381.174542][T11870]  ? sockopt_capable+0x60/0x60
[  381.179328][T11870]  ? lock_chain_count+0x20/0x20
[  381.184207][T11870]  ? lockdep_hardirqs_on+0x98/0x150
[  381.189436][T11870]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  381.195632][T11870]  ? sk_setsockopt+0x10/0x2bc0
[  381.200427][T11870]  do_sock_setsockopt+0x11b/0x1a0
[  381.205487][T11870]  __x64_sys_setsockopt+0x182/0x200
[  381.210712][T11870]  do_syscall_64+0x55/0xa0
[  381.215131][T11870]  ? clear_bhb_loop+0x40/0x90
[  381.219806][T11870]  ? clear_bhb_loop+0x40/0x90
[  381.224481][T11870]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.230369][T11870] RIP: 0033:0x7f6fb8f9c799
[  381.234781][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.254377][T11870] RSP: 002b:00007f6fb9ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  381.262797][T11870] RAX: ffffffffffffffda RBX: 00007f6fb9215fa0 RCX: 00007f6fb8f9c799
[  381.270773][T11870] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000007
[  381.278736][T11870] RBP: 00007f6fb9ee6090 R08: 0000000000000004 R09: 0000000000000000
[  381.286696][T11870] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  381.294658][T11870] R13: 00007f6fb9216038 R14: 00007f6fb9215fa0 R15: 00007ffec8f13188
[  381.302633][T11870]  </TASK>
[  381.430528][T11877] validate_nla: 11 callbacks suppressed
[  381.430648][T11877] netlink: 'syz.0.2233': attribute type 10 has an invalid length.
[  381.801534][T11886] netlink: 'syz.0.2235': attribute type 25 has an invalid length.
[  381.814725][T11886] netlink: 'syz.0.2235': attribute type 9 has an invalid length.
[  382.349438][T11902] netlink: 'syz.2.2244': attribute type 10 has an invalid length.
[  382.470080][T11906] FAULT_INJECTION: forcing a failure.
[  382.470080][T11906] name failslab, interval 1, probability 0, space 0, times 0
[  382.482781][T11906] CPU: 0 PID: 11906 Comm: syz.2.2246 Not tainted syzkaller #0
[  382.490268][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  382.500353][T11906] Call Trace:
[  382.503648][T11906]  <TASK>
[  382.506611][T11906]  dump_stack_lvl+0x18c/0x250
[  382.511337][T11906]  ? show_regs_print_info+0x20/0x20
[  382.516564][T11906]  ? load_image+0x400/0x400
[  382.521100][T11906]  ? netdev_core_pick_tx+0x340/0x340
[  382.526410][T11906]  should_fail_ex+0x39d/0x4d0
[  382.531115][T11906]  should_failslab+0x9/0x20
[  382.535634][T11906]  slab_pre_alloc_hook+0x59/0x310
[  382.540670][T11906]  kmem_cache_alloc+0x5a/0x2d0
[  382.545445][T11906]  ? skb_clone+0x1eb/0x370
[  382.549871][T11906]  skb_clone+0x1eb/0x370
[  382.554107][T11906]  bpf_clone_redirect+0x167/0x4a0
[  382.559145][T11906]  bpf_prog_973cd02a7a0e8181+0x5e/0x63
[  382.564604][T11906]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  382.570585][T11906]  ? lock_chain_count+0x20/0x20
[  382.575433][T11906]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  382.581413][T11906]  ? lockdep_softirqs_on+0x580/0x580
[  382.586692][T11906]  ? lock_chain_count+0x20/0x20
[  382.591535][T11906]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  382.597773][T11906]  ? __local_bh_disable_ip+0x108/0x1a0
[  382.603221][T11906]  ? __cant_sleep+0x220/0x220
[  382.607887][T11906]  ? __local_bh_enable_ip+0x13a/0x1c0
[  382.613256][T11906]  ? _local_bh_enable+0xa0/0xa0
[  382.618106][T11906]  ? bpf_test_timer_continue+0x135/0x380
[  382.623737][T11906]  ? bpf_test_run+0x174/0x870
[  382.628407][T11906]  bpf_test_run+0x2df/0x870
[  382.632908][T11906]  ? bpf_test_run+0x174/0x870
[  382.637574][T11906]  ? convert___skb_to_skb+0x590/0x590
[  382.642934][T11906]  ? eth_get_headlen+0x210/0x210
[  382.647873][T11906]  ? slab_build_skb+0x25f/0x3f0
[  382.652716][T11906]  ? convert___skb_to_skb+0x3d/0x590
[  382.657993][T11906]  bpf_prog_test_run_skb+0xad2/0x12b0
[  382.663364][T11906]  ? cpu_online+0x60/0x60
[  382.667683][T11906]  bpf_prog_test_run+0x321/0x390
[  382.672616][T11906]  __sys_bpf+0x49d/0x890
[  382.676851][T11906]  ? bpf_link_show_fdinfo+0x390/0x390
[  382.682224][T11906]  ? lock_chain_count+0x20/0x20
[  382.687097][T11906]  __x64_sys_bpf+0x7c/0x90
[  382.691505][T11906]  do_syscall_64+0x55/0xa0
[  382.695916][T11906]  ? clear_bhb_loop+0x40/0x90
[  382.700583][T11906]  ? clear_bhb_loop+0x40/0x90
[  382.705250][T11906]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  382.711139][T11906] RIP: 0033:0x7f22c459c799
[  382.715544][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.735147][T11906] RSP: 002b:00007f22c554c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  382.743557][T11906] RAX: ffffffffffffffda RBX: 00007f22c4815fa0 RCX: 00007f22c459c799
[  382.751523][T11906] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  382.759486][T11906] RBP: 00007f22c554c090 R08: 0000000000000000 R09: 0000000000000000
[  382.767451][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.775408][T11906] R13: 00007f22c4816038 R14: 00007f22c4815fa0 R15: 00007ffe1be88ae8
[  382.783385][T11906]  </TASK>
[  383.004684][T11913] netlink: 'syz.3.2251': attribute type 25 has an invalid length.
[  383.054609][T11913] netlink: 'syz.3.2251': attribute type 9 has an invalid length.
[  383.465537][T11930] netlink: 'syz.2.2255': attribute type 10 has an invalid length.
[  383.891441][T11948] netlink: set zone limit has 8 unknown bytes
[  386.453037][T11960] netlink: 'syz.0.2268': attribute type 4 has an invalid length.
[  386.461710][T11960] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2268'.
[  386.965552][T11979] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2276'.
[  387.049377][T11984] FAULT_INJECTION: forcing a failure.
[  387.049377][T11984] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  387.102841][T11984] CPU: 0 PID: 11984 Comm: syz.1.2277 Not tainted syzkaller #0
[  387.110355][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  387.120427][T11984] Call Trace:
[  387.123724][T11984]  <TASK>
[  387.126671][T11984]  dump_stack_lvl+0x18c/0x250
[  387.131377][T11984]  ? show_regs_print_info+0x20/0x20
[  387.136601][T11984]  ? load_image+0x400/0x400
[  387.141139][T11984]  ? __lock_acquire+0x7d40/0x7d40
[  387.146190][T11984]  ? _copy_from_iter+0x201/0x12e0
[  387.151244][T11984]  should_fail_ex+0x39d/0x4d0
[  387.155954][T11984]  prepare_alloc_pages+0x1e2/0x5f0
[  387.161098][T11984]  __alloc_pages+0x134/0x460
[  387.165713][T11984]  ? zone_statistics+0x170/0x170
[  387.170669][T11984]  ? _raw_spin_lock_irqsave+0x100/0x100
[  387.176247][T11984]  ? copy_page_from_iter+0xe8/0x100
[  387.181477][T11984]  pipe_write+0x62b/0x1b10
[  387.185930][T11984]  ? pipe_write+0xd71/0x1b10
[  387.190562][T11984]  ? pipe_read+0x1310/0x1310
[  387.195177][T11984]  ? end_current_label_crit_section+0x149/0x170
[  387.201443][T11984]  ? common_file_perm+0x198/0x1f0
[  387.206494][T11984]  vfs_write+0x46c/0x990
[  387.210765][T11984]  ? file_end_write+0x250/0x250
[  387.215642][T11984]  ? __fget_files+0x43d/0x4b0
[  387.220353][T11984]  ? __fdget_pos+0x1d8/0x330
[  387.224973][T11984]  ? ksys_write+0x75/0x260
[  387.229410][T11984]  ksys_write+0x150/0x260
[  387.233763][T11984]  ? __ia32_sys_read+0x90/0x90
[  387.238556][T11984]  ? lockdep_hardirqs_on+0x98/0x150
[  387.243778][T11984]  do_syscall_64+0x55/0xa0
[  387.248208][T11984]  ? clear_bhb_loop+0x40/0x90
[  387.252890][T11984]  ? clear_bhb_loop+0x40/0x90
[  387.257561][T11984]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  387.263449][T11984] RIP: 0033:0x7f6fb8f9c799
[  387.267872][T11984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.287488][T11984] RSP: 002b:00007f6fb9ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  387.295906][T11984] RAX: ffffffffffffffda RBX: 00007f6fb9215fa0 RCX: 00007f6fb8f9c799
[  387.303878][T11984] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000
[  387.311841][T11984] RBP: 00007f6fb9ee6090 R08: 0000000000000000 R09: 0000000000000000
[  387.319806][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  387.327786][T11984] R13: 00007f6fb9216038 R14: 00007f6fb9215fa0 R15: 00007ffec8f13188
[  387.335765][T11984]  </TASK>
[  388.957258][T12022] FAULT_INJECTION: forcing a failure.
[  388.957258][T12022] name failslab, interval 1, probability 0, space 0, times 0
[  389.027523][T12022] CPU: 1 PID: 12022 Comm: syz.0.2294 Not tainted syzkaller #0
[  389.035040][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  389.045116][T12022] Call Trace:
[  389.048681][T12022]  <TASK>
[  389.051633][T12022]  dump_stack_lvl+0x18c/0x250
[  389.056344][T12022]  ? show_regs_print_info+0x20/0x20
[  389.061583][T12022]  ? load_image+0x400/0x400
[  389.066126][T12022]  ? __might_sleep+0xe0/0xe0
[  389.070740][T12022]  ? __lock_acquire+0x7d40/0x7d40
[  389.075782][T12022]  ? stack_trace_save+0xaa/0x100
[  389.080743][T12022]  ? stack_trace_snprint+0xf0/0xf0
[  389.085886][T12022]  should_fail_ex+0x39d/0x4d0
[  389.090595][T12022]  should_failslab+0x9/0x20
[  389.095126][T12022]  slab_pre_alloc_hook+0x59/0x310
[  389.100177][T12022]  ? kasan_set_track+0x5f/0x70
[  389.104949][T12022]  ? kasan_set_track+0x4e/0x70
[  389.109726][T12022]  ? __kasan_kmalloc+0x8f/0xa0
[  389.114510][T12022]  kmem_cache_alloc_node+0x60/0x320
[  389.119730][T12022]  ? netlink_sendmsg+0x8d0/0xbf0
[  389.124689][T12022]  ? __alloc_skb+0x103/0x2c0
[  389.129310][T12022]  __alloc_skb+0x103/0x2c0
[  389.133756][T12022]  netlink_dump+0x1ec/0xe50
[  389.138286][T12022]  ? netlink_lookup+0x200/0x200
[  389.143156][T12022]  ? __kasan_kmalloc+0x8f/0xa0
[  389.147925][T12022]  ? __inet_diag_dump_start+0x886/0x9f0
[  389.153468][T12022]  ? netlink_lookup+0x30/0x200
[  389.158242][T12022]  __netlink_dump_start+0x5f1/0x810
[  389.163530][T12022]  inet_diag_handler_cmd+0x1e1/0x2c0
[  389.168820][T12022]  ? inet_diag_unregister+0xb0/0xb0
[  389.174020][T12022]  ? inet_diag_handler_get_info+0x7a0/0x7a0
[  389.179909][T12022]  ? inet_diag_dump_start+0x20/0x20
[  389.185099][T12022]  ? inet_diag_dump+0x50/0x50
[  389.189774][T12022]  ? sock_diag_lock_handler+0x19/0x280
[  389.195226][T12022]  ? sock_diag_lock_handler+0x19/0x280
[  389.200687][T12022]  ? inet_diag_unregister+0xb0/0xb0
[  389.205883][T12022]  sock_diag_rcv_msg+0x3d8/0x600
[  389.210815][T12022]  netlink_rcv_skb+0x241/0x4d0
[  389.215588][T12022]  ? sock_diag_bind+0xb0/0xb0
[  389.220265][T12022]  ? netlink_ack+0x1180/0x1180
[  389.225038][T12022]  ? __lock_acquire+0x7d40/0x7d40
[  389.230060][T12022]  ? netlink_deliver_tap+0x2e/0x1b0
[  389.235256][T12022]  sock_diag_rcv+0x2a/0x40
[  389.239668][T12022]  netlink_unicast+0x751/0x8d0
[  389.244437][T12022]  netlink_sendmsg+0x8d0/0xbf0
[  389.249205][T12022]  ? netlink_getsockopt+0x590/0x590
[  389.254403][T12022]  ? aa_sock_msg_perm+0x94/0x150
[  389.259336][T12022]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  389.264621][T12022]  ? security_socket_sendmsg+0x80/0xa0
[  389.270094][T12022]  ? netlink_getsockopt+0x590/0x590
[  389.275308][T12022]  ____sys_sendmsg+0x5ba/0x960
[  389.280124][T12022]  ? __asan_memset+0x22/0x40
[  389.284716][T12022]  ? __sys_sendmsg_sock+0x30/0x30
[  389.289731][T12022]  ? __import_iovec+0x5f2/0x850
[  389.294602][T12022]  ? import_iovec+0x73/0xa0
[  389.299105][T12022]  ___sys_sendmsg+0x2a6/0x360
[  389.303779][T12022]  ? get_pid_task+0x20/0x1e0
[  389.308388][T12022]  ? __sys_sendmsg+0x2a0/0x2a0
[  389.313159][T12022]  ? __lock_acquire+0x7d40/0x7d40
[  389.318197][T12022]  __se_sys_sendmsg+0x1c2/0x2b0
[  389.323043][T12022]  ? __x64_sys_sendmsg+0x80/0x80
[  389.327984][T12022]  ? lockdep_hardirqs_on+0x98/0x150
[  389.333177][T12022]  do_syscall_64+0x55/0xa0
[  389.337590][T12022]  ? clear_bhb_loop+0x40/0x90
[  389.342265][T12022]  ? clear_bhb_loop+0x40/0x90
[  389.346935][T12022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.352823][T12022] RIP: 0033:0x7fd85659c799
[  389.357238][T12022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.376838][T12022] RSP: 002b:00007fd857392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.385252][T12022] RAX: ffffffffffffffda RBX: 00007fd856815fa0 RCX: 00007fd85659c799
[  389.393218][T12022] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  389.401181][T12022] RBP: 00007fd857392090 R08: 0000000000000000 R09: 0000000000000000
[  389.409143][T12022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.417105][T12022] R13: 00007fd856816038 R14: 00007fd856815fa0 R15: 00007ffc89e3eca8
[  389.425169][T12022]  </TASK>
[  389.796566][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  389.805090][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  389.818408][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  389.830449][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  389.852889][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  389.863289][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  390.269820][T12029] chnl_net:caif_netlink_parms(): no params data found
[  390.354172][T12029] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.361465][T12029] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.369334][T12029] bridge_slave_0: entered allmulticast mode
[  390.396710][T12029] bridge_slave_0: entered promiscuous mode
[  390.405048][T12029] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.486855][T12029] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.494129][T12029] bridge_slave_1: entered allmulticast mode
[  390.549186][T12029] bridge_slave_1: entered promiscuous mode
[  390.611776][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.624499][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.680414][T12029] team0: Port device team_slave_0 added
[  390.707607][T12029] team0: Port device team_slave_1 added
[  390.787057][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.794068][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.841884][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.864509][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.883810][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.910424][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.967389][T12029] hsr_slave_0: entered promiscuous mode
[  390.974606][T12029] hsr_slave_1: entered promiscuous mode
[  391.182070][T12070] netlink: 'syz.1.2311': attribute type 10 has an invalid length.
[  391.255831][T12070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2311'.
[  391.454304][T12029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.759108][T12073] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2312'.
[  391.939628][ T5083] Bluetooth: hci3: command tx timeout
[  392.044106][T12029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.163738][T12029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.339544][T12029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.498663][T12029] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  392.533919][T12029] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  392.572053][T12029] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  392.628435][T12029] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  392.734760][T12094] netlink: 'syz.0.2320': attribute type 10 has an invalid length.
[  392.744309][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2320'.
[  392.829826][T12029] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.860169][T12029] 8021q: adding VLAN 0 to HW filter on device team0
[  392.919258][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.927395][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.952174][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.959380][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state
[  393.102869][T12104] netlink: 'syz.0.2329': attribute type 10 has an invalid length.
[  393.126359][T12104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2329'.
[  394.016077][ T5083] Bluetooth: hci3: command tx timeout
[  394.094850][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.148905][T12029] veth0_vlan: entered promiscuous mode
[  394.179007][T12029] veth1_vlan: entered promiscuous mode
[  394.252626][T12029] veth0_macvtap: entered promiscuous mode
[  394.284474][T12029] veth1_macvtap: entered promiscuous mode
[  394.306518][T12120] FAULT_INJECTION: forcing a failure.
[  394.306518][T12120] name failslab, interval 1, probability 0, space 0, times 0
[  394.327292][T12120] CPU: 0 PID: 12120 Comm: syz.0.2327 Not tainted syzkaller #0
[  394.334810][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  394.344890][T12120] Call Trace:
[  394.348194][T12120]  <TASK>
[  394.351144][T12120]  dump_stack_lvl+0x18c/0x250
[  394.355853][T12120]  ? show_regs_print_info+0x20/0x20
[  394.361077][T12120]  ? load_image+0x400/0x400
[  394.365600][T12120]  ? __might_sleep+0xe0/0xe0
[  394.370207][T12120]  ? __lock_acquire+0x7d40/0x7d40
[  394.375261][T12120]  should_fail_ex+0x39d/0x4d0
[  394.380018][T12120]  should_failslab+0x9/0x20
[  394.384545][T12120]  slab_pre_alloc_hook+0x59/0x310
[  394.389595][T12120]  ? rtnl_newlink+0x10d/0x20a0
[  394.394382][T12120]  __kmem_cache_alloc_node+0x53/0x250
[  394.399789][T12120]  ? rtnl_newlink+0x10d/0x20a0
[  394.404575][T12120]  kmalloc_trace+0x2a/0xe0
[  394.409018][T12120]  ? rtnl_setlink+0x4e0/0x4e0
[  394.413710][T12120]  rtnl_newlink+0x10d/0x20a0
[  394.418322][T12120]  ? lockdep_hardirqs_on+0x98/0x150
[  394.423555][T12120]  ? __mutex_lock+0x94c/0xcc0
[  394.428256][T12120]  ? __lock_acquire+0x7d40/0x7d40
[  394.433307][T12120]  ? do_raw_spin_lock+0x11f/0x2c0
[  394.438344][T12120]  ? rtnl_setlink+0x4e0/0x4e0
[  394.443033][T12120]  ? __rwlock_init+0x150/0x150
[  394.447829][T12120]  ? do_raw_spin_unlock+0x121/0x230
[  394.453058][T12120]  ? __mutex_lock+0x956/0xcc0
[  394.457759][T12120]  ? __mutex_lock+0x4f9/0xcc0
[  394.462459][T12120]  ? rtnetlink_rcv_msg+0x811/0xfa0
[  394.467591][T12120]  ? mutex_lock_nested+0x20/0x20
[  394.472555][T12120]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  394.477779][T12120]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  394.482912][T12120]  ? rtnl_setlink+0x4e0/0x4e0
[  394.487601][T12120]  rtnetlink_rcv_msg+0x869/0xfa0
[  394.492559][T12120]  ? lockdep_hardirqs_on+0x98/0x150
[  394.497772][T12120]  ? rtnetlink_bind+0x80/0x80
[  394.502464][T12120]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  394.508454][T12120]  ? lock_chain_count+0x20/0x20
[  394.513322][T12120]  ? __local_bh_enable_ip+0x13a/0x1c0
[  394.518702][T12120]  ? lockdep_hardirqs_on+0x98/0x150
[  394.523909][T12120]  ? __local_bh_enable_ip+0x13a/0x1c0
[  394.529290][T12120]  ? _local_bh_enable+0xa0/0xa0
[  394.534155][T12120]  ? __dev_queue_xmit+0x265/0x3660
[  394.539281][T12120]  ? __dev_queue_xmit+0x265/0x3660
[  394.544413][T12120]  ? __dev_queue_xmit+0x1b2c/0x3660
[  394.549631][T12120]  ? __dev_queue_xmit+0x265/0x3660
[  394.554759][T12120]  ? ref_tracker_free+0x690/0x840
[  394.559798][T12120]  netlink_rcv_skb+0x241/0x4d0
[  394.564575][T12120]  ? rtnetlink_bind+0x80/0x80
[  394.569261][T12120]  ? netlink_ack+0x1180/0x1180
[  394.574068][T12120]  ? __lock_acquire+0x7d40/0x7d40
[  394.579110][T12120]  ? netlink_deliver_tap+0x2e/0x1b0
[  394.584325][T12120]  netlink_unicast+0x751/0x8d0
[  394.589109][T12120]  netlink_sendmsg+0x8d0/0xbf0
[  394.593889][T12120]  ? netlink_getsockopt+0x590/0x590
[  394.599097][T12120]  ? aa_sock_msg_perm+0x94/0x150
[  394.604045][T12120]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  394.609336][T12120]  ? security_socket_sendmsg+0x80/0xa0
[  394.614800][T12120]  ? netlink_getsockopt+0x590/0x590
[  394.620010][T12120]  ____sys_sendmsg+0x5ba/0x960
[  394.624786][T12120]  ? __asan_memset+0x22/0x40
[  394.629395][T12120]  ? __sys_sendmsg_sock+0x30/0x30
[  394.634422][T12120]  ? __import_iovec+0x5f2/0x850
[  394.639301][T12120]  ? import_iovec+0x73/0xa0
[  394.643809][T12120]  ___sys_sendmsg+0x2a6/0x360
[  394.648498][T12120]  ? get_pid_task+0x20/0x1e0
[  394.653106][T12120]  ? __sys_sendmsg+0x2a0/0x2a0
[  394.657898][T12120]  ? __lock_acquire+0x7d40/0x7d40
[  394.662953][T12120]  __se_sys_sendmsg+0x1c2/0x2b0
[  394.667814][T12120]  ? __x64_sys_sendmsg+0x80/0x80
[  394.672770][T12120]  ? lockdep_hardirqs_on+0x98/0x150
[  394.677978][T12120]  do_syscall_64+0x55/0xa0
[  394.682404][T12120]  ? clear_bhb_loop+0x40/0x90
[  394.687086][T12120]  ? clear_bhb_loop+0x40/0x90
[  394.691771][T12120]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.697669][T12120] RIP: 0033:0x7fd85659c799
[  394.702088][T12120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.721705][T12120] RSP: 002b:00007fd857392028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.730127][T12120] RAX: ffffffffffffffda RBX: 00007fd856815fa0 RCX: 00007fd85659c799
[  394.738122][T12120] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  394.746108][T12120] RBP: 00007fd857392090 R08: 0000000000000000 R09: 0000000000000000
[  394.754085][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.762063][T12120] R13: 00007fd856816038 R14: 00007fd856815fa0 R15: 00007ffc89e3eca8
[  394.770060][T12120]  </TASK>
[  394.794180][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.828831][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  394.905906][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.946054][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  394.975553][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.008068][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.029581][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.039683][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  395.050267][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.062775][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.091515][T12029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.112687][T12029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.122368][T12029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.132464][T12029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.289498][T12134] netlink: 'syz.0.2334': attribute type 10 has an invalid length.
[  395.362137][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.386075][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.414841][T12136] netlink: 'syz.1.2335': attribute type 25 has an invalid length.
[  395.434676][T12136] netlink: 'syz.1.2335': attribute type 9 has an invalid length.
[  395.480796][T12140] netlink: 'syz.3.2337': attribute type 2 has an invalid length.
[  395.505734][T12140] netlink: 'syz.3.2337': attribute type 8 has an invalid length.
[  395.513602][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2337'.
[  395.528681][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.542142][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  396.095984][ T5083] Bluetooth: hci3: command tx timeout
[  396.218692][T12165] netlink: 'syz.0.2346': attribute type 25 has an invalid length.
[  396.235890][T12165] netlink: 'syz.0.2346': attribute type 9 has an invalid length.
[  396.571185][T12176] netlink: 'syz.0.2350': attribute type 13 has an invalid length.
[  396.586286][T12176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2350'.
[  396.608092][T12178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2349'.
[  396.764692][T12184] vcan0: entered allmulticast mode
[  396.828437][T12184] veth0_macvtap: left promiscuous mode
[  397.600583][T12200] FAULT_INJECTION: forcing a failure.
[  397.600583][T12200] name failslab, interval 1, probability 0, space 0, times 0
[  397.625951][T12200] CPU: 1 PID: 12200 Comm: syz.2.2356 Not tainted syzkaller #0
[  397.633467][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  397.643519][T12200] Call Trace:
[  397.646794][T12200]  <TASK>
[  397.649721][T12200]  dump_stack_lvl+0x18c/0x250
[  397.654401][T12200]  ? show_regs_print_info+0x20/0x20
[  397.659597][T12200]  ? load_image+0x400/0x400
[  397.664095][T12200]  ? __might_sleep+0xe0/0xe0
[  397.668678][T12200]  ? __lock_acquire+0x7d40/0x7d40
[  397.673695][T12200]  ? prepend_path+0x4b/0x960
[  397.678298][T12200]  should_fail_ex+0x39d/0x4d0
[  397.682976][T12200]  should_failslab+0x9/0x20
[  397.687480][T12200]  slab_pre_alloc_hook+0x59/0x310
[  397.692500][T12200]  ? __asan_memcpy+0x40/0x70
[  397.697083][T12200]  ? tomoyo_encode+0x28b/0x540
[  397.701837][T12200]  ? tomoyo_encode+0x28b/0x540
[  397.706590][T12200]  __kmem_cache_alloc_node+0x53/0x250
[  397.711960][T12200]  ? prepend_path+0x4b/0x960
[  397.716545][T12200]  ? tomoyo_encode+0x28b/0x540
[  397.721300][T12200]  __kmalloc+0xa4/0x230
[  397.725452][T12200]  tomoyo_encode+0x28b/0x540
[  397.730041][T12200]  tomoyo_realpath_from_path+0x592/0x5d0
[  397.735681][T12200]  tomoyo_path_number_perm+0x248/0x620
[  397.741148][T12200]  ? tomoyo_path_number_perm+0x217/0x620
[  397.746779][T12200]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  397.752237][T12200]  ? ksys_write+0x1c4/0x260
[  397.756759][T12200]  ? __fget_files+0x28/0x4b0
[  397.761343][T12200]  ? __fget_files+0x28/0x4b0
[  397.765935][T12200]  security_file_ioctl+0x70/0xa0
[  397.770883][T12200]  __se_sys_ioctl+0x48/0x170
[  397.775466][T12200]  do_syscall_64+0x55/0xa0
[  397.779879][T12200]  ? clear_bhb_loop+0x40/0x90
[  397.784548][T12200]  ? clear_bhb_loop+0x40/0x90
[  397.789220][T12200]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  397.795104][T12200] RIP: 0033:0x7f024d59c799
[  397.799512][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.819109][T12200] RSP: 002b:00007f024b7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.827517][T12200] RAX: ffffffffffffffda RBX: 00007f024d816180 RCX: 00007f024d59c799
[  397.835481][T12200] RDX: 0000000000000000 RSI: 00000000400454cc RDI: 0000000000000003
[  397.843442][T12200] RBP: 00007f024b7d5090 R08: 0000000000000000 R09: 0000000000000000
[  397.851404][T12200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.859366][T12200] R13: 00007f024d816218 R14: 00007f024d816180 R15: 00007fff34d4e0b8
[  397.867364][T12200]  </TASK>
[  397.906634][T12200] ERROR: Out of memory at tomoyo_realpath_from_path.
[  397.970005][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  397.999150][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  398.022798][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  398.039882][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  398.049537][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  398.060103][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  398.177593][ T5083] Bluetooth: hci3: command tx timeout
[  399.539992][T12200] syzkaller0: tun_chr_ioctl cmd 1074025676
[  399.546156][T12200] syzkaller0: owner set to 0
[  399.837472][T12206] validate_nla: 3 callbacks suppressed
[  399.837488][T12206] netlink: 'syz.1.2358': attribute type 25 has an invalid length.
[  399.855769][T12206] netlink: 'syz.1.2358': attribute type 9 has an invalid length.
[  399.961300][T12201] chnl_net:caif_netlink_parms(): no params data found
[  400.010501][T12210] syzkaller0: tun_chr_ioctl cmd 1074025676
[  400.025908][T12210] syzkaller0: owner set to 0
[  400.175974][ T5083] Bluetooth: hci4: command tx timeout
[  400.245410][T12201] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.252783][T12201] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.271161][T12201] bridge_slave_0: entered allmulticast mode
[  400.282019][T12201] bridge_slave_0: entered promiscuous mode
[  400.293054][T12201] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.301130][T12201] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.308545][T12201] bridge_slave_1: entered allmulticast mode
[  400.316255][T12201] bridge_slave_1: entered promiscuous mode
[  400.437708][T12201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  400.471405][T12223] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2370'.
[  400.497340][T12201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  400.543014][T12223] netlink: 'syz.1.2370': attribute type 10 has an invalid length.
[  402.265752][ T5083] Bluetooth: hci4: command tx timeout
[  403.081229][T12201] team0: Port device team_slave_0 added
[  403.091223][T12201] team0: Port device team_slave_1 added
[  403.128396][T12201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.135490][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.161812][T12201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.193928][T12201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.203522][T12201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  403.230594][T12201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.404185][T12201] hsr_slave_0: entered promiscuous mode
[  403.443205][T12201] hsr_slave_1: entered promiscuous mode
[  403.464394][T12201] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  403.493483][T12201] Cannot create hsr debugfs directory
[  403.565258][T12238] netlink: 'syz.3.2369': attribute type 25 has an invalid length.
[  403.583073][T12238] netlink: 'syz.3.2369': attribute type 9 has an invalid length.
[  403.830126][T12201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.868847][T12246] netlink: 'syz.3.2373': attribute type 10 has an invalid length.
[  404.012945][T12201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.170960][T12201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.481223][ T5083] Bluetooth: hci4: command tx timeout
[  406.297853][T12201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.346193][T12256] FAULT_INJECTION: forcing a failure.
[  406.346193][T12256] name failslab, interval 1, probability 0, space 0, times 0
[  406.359167][T12256] CPU: 0 PID: 12256 Comm: syz.1.2377 Not tainted syzkaller #0
[  406.366658][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  406.376736][T12256] Call Trace:
[  406.380010][T12256]  <TASK>
[  406.382937][T12256]  dump_stack_lvl+0x18c/0x250
[  406.387631][T12256]  ? show_regs_print_info+0x20/0x20
[  406.392852][T12256]  ? load_image+0x400/0x400
[  406.397355][T12256]  ? __might_sleep+0xe0/0xe0
[  406.401944][T12256]  ? __lock_acquire+0x7d40/0x7d40
[  406.406968][T12256]  should_fail_ex+0x39d/0x4d0
[  406.411650][T12256]  should_failslab+0x9/0x20
[  406.416165][T12256]  slab_pre_alloc_hook+0x59/0x310
[  406.421207][T12256]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  406.426931][T12256]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  406.432653][T12256]  __kmem_cache_alloc_node+0x53/0x250
[  406.438031][T12256]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  406.443746][T12256]  __kmalloc+0xa4/0x230
[  406.447902][T12256]  tomoyo_realpath_from_path+0xe3/0x5d0
[  406.453456][T12256]  tomoyo_path_number_perm+0x248/0x620
[  406.458915][T12256]  ? tomoyo_path_number_perm+0x217/0x620
[  406.464548][T12256]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  406.470020][T12256]  ? ksys_write+0x1c4/0x260
[  406.474541][T12256]  ? __fget_files+0x28/0x4b0
[  406.479125][T12256]  ? __fget_files+0x28/0x4b0
[  406.483719][T12256]  security_file_ioctl+0x70/0xa0
[  406.488657][T12256]  __se_sys_ioctl+0x48/0x170
[  406.493242][T12256]  do_syscall_64+0x55/0xa0
[  406.497653][T12256]  ? clear_bhb_loop+0x40/0x90
[  406.502343][T12256]  ? clear_bhb_loop+0x40/0x90
[  406.507012][T12256]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  406.512903][T12256] RIP: 0033:0x7f6fb8f9c799
[  406.517318][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.536929][T12256] RSP: 002b:00007f6fb9ee6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.545343][T12256] RAX: ffffffffffffffda RBX: 00007f6fb9215fa0 RCX: 00007f6fb8f9c799
[  406.553307][T12256] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000005
[  406.561271][T12256] RBP: 00007f6fb9ee6090 R08: 0000000000000000 R09: 0000000000000000
[  406.569233][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.577196][T12256] R13: 00007f6fb9216038 R14: 00007f6fb9215fa0 R15: 00007ffec8f13188
[  406.585173][T12256]  </TASK>
[  406.602896][ T5083] Bluetooth: hci4: command tx timeout
[  406.725110][T12256] ERROR: Out of memory at tomoyo_realpath_from_path.
[  406.752499][T12261] netlink: 'syz.2.2380': attribute type 21 has an invalid length.
[  406.762823][T12261] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2380'.
[  406.772222][T12201] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  406.791498][T12201] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  406.809441][T12201] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  406.848597][T12201] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  407.015088][T12201] 8021q: adding VLAN 0 to HW filter on device bond0
[  407.102478][T12201] 8021q: adding VLAN 0 to HW filter on device team0
[  407.146651][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.153927][ T7384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.253095][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.260462][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  408.164664][T12201] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.420459][T12201] veth0_vlan: entered promiscuous mode
[  408.433962][T12201] veth1_vlan: entered promiscuous mode
[  408.546760][T12201] veth0_macvtap: entered promiscuous mode
[  408.559039][T12201] veth1_macvtap: entered promiscuous mode
[  408.581220][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.606838][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.634576][T12201] batman_adv: batadv0: Interface activated: batadv_slave_0
[  408.654592][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.672077][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.682515][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.697151][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.711782][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.725178][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.743656][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.754821][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.772669][T12201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.783791][T12201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.803397][T12201] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.845460][T12201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.864006][T12201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.879441][T12201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.894832][T12201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.336209][ T7384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.356005][ T7384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.396176][ T7384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.419436][ T7384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.622181][T12303] netlink: 'syz.0.2363': attribute type 10 has an invalid length.
[  411.635173][T12303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2363'.
[  411.651581][T12303] team0: entered promiscuous mode
[  411.659792][T12303] team_slave_0: entered promiscuous mode
[  411.668458][T12303] team_slave_1: entered promiscuous mode
[  411.676534][T12303] bridge0: port 3(team0) entered blocking state
[  411.683347][T12303] bridge0: port 3(team0) entered disabled state
[  411.690730][T12303] team0: entered allmulticast mode
[  411.709087][T12303] team_slave_0: entered allmulticast mode
[  411.738666][T12303] team_slave_1: entered allmulticast mode
[  411.776003][T12303] bridge0: port 3(team0) entered blocking state
[  411.782568][T12303] bridge0: port 3(team0) entered forwarding state
[  411.995996][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'.
[  412.020336][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'.
[  412.041487][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'.
[  412.063791][T12313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'.
[  412.161197][T12316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'.
[  412.214045][T12318] netlink: 'syz.0.2396': attribute type 2 has an invalid length.
[  412.222969][T12318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2396'.
[  412.544550][T12320] netlink: 'syz.1.2397': attribute type 25 has an invalid length.
[  412.552633][T12320] netlink: 'syz.1.2397': attribute type 9 has an invalid length.
[  412.762619][T12329] netlink: 'syz.1.2400': attribute type 21 has an invalid length.
[  412.779161][T12329] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2400'.
[  415.933003][T12342] netlink: 'syz.1.2406': attribute type 2 has an invalid length.
[  415.954762][T12342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2406'.
[  416.087397][T12346] netlink: 'syz.0.2408': attribute type 25 has an invalid length.
[  416.095276][T12346] netlink: 'syz.0.2408': attribute type 9 has an invalid length.
[  416.327604][T12344] delete_channel: no stack
[  416.458755][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2412'.
[  416.497455][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2412'.
[  417.114562][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  417.124569][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  417.133240][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  417.142243][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  417.151522][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  417.160018][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  417.728347][T12369] chnl_net:caif_netlink_parms(): no params data found
[  418.036148][T12369] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.051153][T12369] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.060989][T12369] bridge_slave_0: entered allmulticast mode
[  418.077026][T12369] bridge_slave_0: entered promiscuous mode
[  418.094908][T12369] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.124489][T12369] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.146285][T12369] bridge_slave_1: entered allmulticast mode
[  418.170641][T12369] bridge_slave_1: entered promiscuous mode
[  418.212595][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.226441][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.890707][T12369] team0: Port device team_slave_0 added
[  418.908379][T12369] team0: Port device team_slave_1 added
[  418.968297][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.975280][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.035109][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.040456][T12393] __nla_validate_parse: 3 callbacks suppressed
[  419.040475][T12393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2421'.
[  419.048569][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.068256][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.105837][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.216524][T12369] hsr_slave_0: entered promiscuous mode
[  419.223298][T12369] hsr_slave_1: entered promiscuous mode
[  419.229517][ T5083] Bluetooth: hci0: command tx timeout
[  419.246617][T12369] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  419.254226][T12369] Cannot create hsr debugfs directory
[  419.730740][T12369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.892680][T12369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.008758][T12369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.070260][T12369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.300551][T12369] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  420.312183][T12369] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  420.331602][T12369] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  420.442938][T12369] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  421.307544][ T5083] Bluetooth: hci0: command tx timeout
[  421.356794][T12369] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.480860][T12369] 8021q: adding VLAN 0 to HW filter on device team0
[  421.524792][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.532126][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  423.386001][ T5083] Bluetooth: hci0: command tx timeout
[  424.781818][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.789032][ T7384] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.087175][T12432] netlink: 'syz.3.2433': attribute type 10 has an invalid length.
[  425.157415][T12432] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.171598][T12432] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  425.361259][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.457842][ T5083] Bluetooth: hci0: command tx timeout
[  425.508965][T12369] veth0_vlan: entered promiscuous mode
[  425.577427][T12369] veth1_vlan: entered promiscuous mode
[  425.660214][T12369] veth0_macvtap: entered promiscuous mode
[  425.688389][T12369] veth1_macvtap: entered promiscuous mode
[  425.756268][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.767418][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.778696][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.797579][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.809676][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.836010][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.849665][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.860123][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.870855][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.881018][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.892078][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.902780][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.913529][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.935419][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.955654][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.968434][T12369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.979157][T12369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.991685][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.016514][T12453] netlink: 'syz.2.2439': attribute type 21 has an invalid length.
[  426.024394][T12453] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2439'.
[  426.065803][T12453] netlink: 'syz.2.2439': attribute type 5 has an invalid length.
[  426.073574][T12453] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2439'.
[  426.111214][T12369] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.124779][T12369] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.138764][T12369] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.159313][T12369] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.315784][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.342053][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.401148][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.411668][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.459397][T12463] bridge0: entered promiscuous mode
[  426.464762][T12463] bridge0: entered allmulticast mode
[  426.721344][T12471] netlink: 'syz.1.2445': attribute type 25 has an invalid length.
[  426.729519][T12471] netlink: 'syz.1.2445': attribute type 9 has an invalid length.
[  426.854737][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2447'.
[  427.326578][T12492] netlink: 'syz.1.2455': attribute type 10 has an invalid length.
[  427.416251][T12492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2455'.
[  427.425320][T12492] team0: entered promiscuous mode
[  427.606431][T12492] team_slave_0: entered promiscuous mode
[  427.669885][T12492] team_slave_1: entered promiscuous mode
[  427.709553][T12492] bridge0: port 3(team0) entered blocking state
[  427.745114][T12492] bridge0: port 3(team0) entered disabled state
[  427.886568][T12492] team0: entered allmulticast mode
[  427.903089][T12492] team_slave_0: entered allmulticast mode
[  427.927544][T12492] team_slave_1: entered allmulticast mode
[  427.975021][T12492] bridge0: port 3(team0) entered blocking state
[  427.981589][T12492] bridge0: port 3(team0) entered forwarding state
[  428.196387][T12497] delete_channel: no stack
[  428.480217][T12506] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2460'.
[  428.494032][T12506] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  428.593292][T12504] netlink: 'syz.2.2458': attribute type 25 has an invalid length.
[  428.623875][T12504] netlink: 'syz.2.2458': attribute type 9 has an invalid length.
[  428.792629][T12518] FAULT_INJECTION: forcing a failure.
[  428.792629][T12518] name failslab, interval 1, probability 0, space 0, times 0
[  428.824164][T12518] CPU: 0 PID: 12518 Comm: syz.1.2464 Not tainted syzkaller #0
[  428.831674][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  428.841733][T12518] Call Trace:
[  428.845002][T12518]  <TASK>
[  428.847929][T12518]  dump_stack_lvl+0x18c/0x250
[  428.852605][T12518]  ? show_regs_print_info+0x20/0x20
[  428.857798][T12518]  ? load_image+0x400/0x400
[  428.862299][T12518]  ? __might_sleep+0xe0/0xe0
[  428.866885][T12518]  ? __lock_acquire+0x7d40/0x7d40
[  428.871907][T12518]  should_fail_ex+0x39d/0x4d0
[  428.876587][T12518]  should_failslab+0x9/0x20
[  428.881093][T12518]  slab_pre_alloc_hook+0x59/0x310
[  428.886116][T12518]  ? apparmor_sk_alloc_security+0x77/0x100
[  428.891914][T12518]  __kmem_cache_alloc_node+0x53/0x250
[  428.897282][T12518]  ? apparmor_sk_alloc_security+0x77/0x100
[  428.903090][T12518]  kmalloc_trace+0x2a/0xe0
[  428.907503][T12518]  apparmor_sk_alloc_security+0x77/0x100
[  428.913137][T12518]  security_sk_alloc+0x6e/0xa0
[  428.917895][T12518]  sk_prot_alloc+0x101/0x210
[  428.922477][T12518]  ? sk_alloc+0x24/0x360
[  428.926719][T12518]  sk_alloc+0x3a/0x360
[  428.930785][T12518]  ? bpf_ctx_init+0x163/0x1a0
[  428.935457][T12518]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  428.940997][T12518]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  428.946368][T12518]  ? __fget_files+0x28/0x4b0
[  428.950950][T12518]  ? __fget_files+0x28/0x4b0
[  428.955538][T12518]  ? __fget_files+0x43d/0x4b0
[  428.960215][T12518]  ? cpu_online+0x60/0x60
[  428.964555][T12518]  bpf_prog_test_run+0x321/0x390
[  428.969493][T12518]  __sys_bpf+0x49d/0x890
[  428.973736][T12518]  ? bpf_link_show_fdinfo+0x390/0x390
[  428.979112][T12518]  ? lock_chain_count+0x20/0x20
[  428.983961][T12518]  __x64_sys_bpf+0x7c/0x90
[  428.988371][T12518]  do_syscall_64+0x55/0xa0
[  428.992785][T12518]  ? clear_bhb_loop+0x40/0x90
[  428.997464][T12518]  ? clear_bhb_loop+0x40/0x90
[  429.002134][T12518]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  429.008019][T12518] RIP: 0033:0x7fe6eeb9c799
[  429.012429][T12518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  429.032051][T12518] RSP: 002b:00007fe6efa78028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  429.040456][T12518] RAX: ffffffffffffffda RBX: 00007fe6eee15fa0 RCX: 00007fe6eeb9c799
[  429.048423][T12518] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  429.056390][T12518] RBP: 00007fe6efa78090 R08: 0000000000000000 R09: 0000000000000000
[  429.064360][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  429.072331][T12518] R13: 00007fe6eee16038 R14: 00007fe6eee15fa0 R15: 00007fff05a97be8
[  429.080324][T12518]  </TASK>
[  429.743750][T12537] netlink: 'syz.0.2469': attribute type 10 has an invalid length.
[  429.761325][T12537] vxcan1: entered promiscuous mode
[  429.768778][T12537] vxcan1: entered allmulticast mode
[  429.774151][T12537] team0: Device vxcan1 is of different type
[  429.801122][T12538] netlink: 'syz.2.2468': attribute type 10 has an invalid length.
[  429.815751][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'.
[  429.828732][T12538] team0: entered promiscuous mode
[  429.837708][T12538] team_slave_0: entered promiscuous mode
[  429.848415][T12538] team_slave_1: entered promiscuous mode
[  429.872679][T12538] bridge0: port 3(team0) entered blocking state
[  429.897345][T12538] bridge0: port 3(team0) entered disabled state
[  429.918209][T12538] team0: entered allmulticast mode
[  429.934446][T12538] team_slave_0: entered allmulticast mode
[  429.954644][T12538] team_slave_1: entered allmulticast mode
[  429.992235][T12538] bridge0: port 3(team0) entered blocking state
[  429.998813][T12538] bridge0: port 3(team0) entered forwarding state
[  431.459193][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  431.475915][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  431.484735][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  431.496761][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  431.504587][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  431.512981][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  432.121387][T12563] chnl_net:caif_netlink_parms(): no params data found
[  432.403594][T12563] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.429697][T12563] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.453433][T12563] bridge_slave_0: entered allmulticast mode
[  432.480321][T12563] bridge_slave_0: entered promiscuous mode
[  432.512325][T12563] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.536017][T12563] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.563814][T12563] bridge_slave_1: entered allmulticast mode
[  432.594696][T12563] bridge_slave_1: entered promiscuous mode
[  432.697252][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  432.739936][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  432.869590][T12563] team0: Port device team_slave_0 added
[  432.900502][T12563] team0: Port device team_slave_1 added
[  432.994928][T12563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  433.011279][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.075744][T12563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  433.898298][T12563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.914972][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.942015][T12563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.047502][T12578] FAULT_INJECTION: forcing a failure.
[  434.047502][T12578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.075658][T12578] CPU: 1 PID: 12578 Comm: syz.2.2478 Not tainted syzkaller #0
[  434.083172][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  434.093240][T12578] Call Trace:
[  434.096524][T12578]  <TASK>
[  434.099449][T12578]  dump_stack_lvl+0x18c/0x250
[  434.104130][T12578]  ? show_regs_print_info+0x20/0x20
[  434.109333][T12578]  ? load_image+0x400/0x400
[  434.113834][T12578]  ? __might_fault+0xaa/0x120
[  434.118503][T12578]  ? __lock_acquire+0x7d40/0x7d40
[  434.123524][T12578]  should_fail_ex+0x39d/0x4d0
[  434.128206][T12578]  _copy_from_iter+0x1d9/0x12e0
[  434.133060][T12578]  ? __might_fault+0xaa/0x120
[  434.137732][T12578]  ? _copy_from_iter+0x24e/0x12e0
[  434.142753][T12578]  ? __virt_addr_valid+0x18c/0x540
[  434.147859][T12578]  ? __lock_acquire+0x7d40/0x7d40
[  434.152878][T12578]  ? copyout_mc+0x70/0x70
[  434.157205][T12578]  ? copyout_mc+0x70/0x70
[  434.161530][T12578]  ? __virt_addr_valid+0x18c/0x540
[  434.166637][T12578]  ? page_copy_sane+0x16a/0x270
[  434.171485][T12578]  copy_page_from_iter+0x7b/0x100
[  434.176512][T12578]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  434.182326][T12578]  unix_stream_sendmsg+0x562/0xbf0
[  434.187446][T12578]  ? unix_show_fdinfo+0x270/0x270
[  434.192645][T12578]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  434.199066][T12578]  ? aa_sock_msg_perm+0x94/0x150
[  434.204001][T12578]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  434.209284][T12578]  ? security_socket_sendmsg+0x80/0xa0
[  434.214733][T12578]  ? unix_show_fdinfo+0x270/0x270
[  434.219755][T12578]  ____sys_sendmsg+0x5ba/0x960
[  434.224512][T12578]  ? __asan_memset+0x22/0x40
[  434.229095][T12578]  ? __sys_sendmsg_sock+0x30/0x30
[  434.234113][T12578]  ? __import_iovec+0x5f2/0x850
[  434.238979][T12578]  ? import_iovec+0x73/0xa0
[  434.243478][T12578]  ___sys_sendmsg+0x2a6/0x360
[  434.248151][T12578]  ? get_pid_task+0x20/0x1e0
[  434.252741][T12578]  ? __sys_sendmsg+0x2a0/0x2a0
[  434.257532][T12578]  ? __lock_acquire+0x7d40/0x7d40
[  434.262590][T12578]  __se_sys_sendmsg+0x1c2/0x2b0
[  434.267448][T12578]  ? __x64_sys_sendmsg+0x80/0x80
[  434.272417][T12578]  ? lockdep_hardirqs_on+0x98/0x150
[  434.277633][T12578]  do_syscall_64+0x55/0xa0
[  434.282057][T12578]  ? clear_bhb_loop+0x40/0x90
[  434.286741][T12578]  ? clear_bhb_loop+0x40/0x90
[  434.291428][T12578]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.297323][T12578] RIP: 0033:0x7f024d59c799
[  434.301736][T12578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.321338][T12578] RSP: 002b:00007f024b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.329746][T12578] RAX: ffffffffffffffda RBX: 00007f024d816090 RCX: 00007f024d59c799
[  434.337708][T12578] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000005
[  434.345671][T12578] RBP: 00007f024b7f6090 R08: 0000000000000000 R09: 0000000000000000
[  434.353632][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.361593][T12578] R13: 00007f024d816128 R14: 00007f024d816090 R15: 00007fff34d4e0b8
[  434.369570][T12578]  </TASK>
[  434.435008][T12581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2479'.
[  434.597298][T12581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.625408][T12581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.645716][T12581] bond0 (unregistering): Released all slaves
[  434.754353][T12563] hsr_slave_0: entered promiscuous mode
[  434.781466][T12563] hsr_slave_1: entered promiscuous mode
[  434.838364][T12563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  434.866069][T12563] Cannot create hsr debugfs directory
[  435.402805][T12563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.699499][T12563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.784169][T12599] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2486'.
[  435.866170][ T5083] Bluetooth: hci1: command tx timeout
[  435.922374][T12599] team_slave_0: left promiscuous mode
[  435.977392][T12599] team_slave_0: left allmulticast mode
[  436.144448][T12599] team0: Port device team_slave_0 removed
[  436.161705][T12599] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  436.268860][T12563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.489537][T12563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.628169][T12612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2489'.
[  437.091698][T12612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.118040][T12612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.139608][T12612] bond0 (unregistering): Released all slaves
[  437.341133][T12619] netlink: 'syz.0.2492': attribute type 8 has an invalid length.
[  437.363341][T12619] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.2492'.
[  437.498286][T12619] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  437.763816][T12563] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  437.780769][T12563] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  437.809962][T12563] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  437.823194][T12563] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  437.936076][ T5083] Bluetooth: hci1: command tx timeout
[  438.100997][T12563] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.169872][T12563] 8021q: adding VLAN 0 to HW filter on device team0
[  438.214685][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.221930][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.247970][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.255183][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.354086][T12563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.478808][T12640] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2499'.
[  438.517355][T12640] team_slave_0: left promiscuous mode
[  438.537242][T12640] team_slave_0: left allmulticast mode
[  438.612610][T12640] team0: Port device team_slave_0 removed
[  438.621617][T12640] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  438.812766][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.929277][T12563] veth0_vlan: entered promiscuous mode
[  438.949983][T12563] veth1_vlan: entered promiscuous mode
[  439.003650][T12563] veth0_macvtap: entered promiscuous mode
[  439.013423][T12563] veth1_macvtap: entered promiscuous mode
[  439.040248][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.051307][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.061975][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.072690][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.082877][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  439.093678][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.105490][T12563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  439.128243][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.139308][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.149404][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.160260][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.170229][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.181003][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.190898][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.201679][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.212119][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.222749][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.232639][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.243545][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.253431][T12563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  439.263943][T12563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  439.275513][T12563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  439.292777][T12563] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  439.301760][T12563] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  439.311211][T12563] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  439.323355][T12563] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  439.404974][ T7378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.420082][ T7378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.450982][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.470726][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  439.657314][T12657] netlink: 'syz.3.2471': attribute type 33 has an invalid length.
[  439.665410][T12657] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2471'.
[  439.704779][T12658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2502'.
[  439.975370][T12658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  440.020529][T12658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.031724][ T5083] Bluetooth: hci1: command tx timeout
[  440.051541][T12658] bond0 (unregistering): Released all slaves
[  440.536281][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  440.544708][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  440.684221][T12664] netlink: 'syz.1.2503': attribute type 10 has an invalid length.
[  440.886248][T12670] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2507'.
[  440.898789][T12672] netlink: 'syz.2.2507': attribute type 10 has an invalid length.
[  440.910301][T12672] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  440.929120][T12672] batman_adv: batadv0: Removing interface: batadv_slave_0
[  441.090355][T12679] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2518'.
[  441.115244][T12681] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2510'.
[  441.142125][T12681] team_slave_0: left promiscuous mode
[  441.149183][T12681] team_slave_0: left allmulticast mode
[  441.326693][T12681] team0: Port device team_slave_0 removed
[  441.357288][T12681] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  441.438771][T12679] netlink: 'syz.0.2518': attribute type 10 has an invalid length.
[  441.448652][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.542693][T12679] batman_adv: batadv0: Removing interface: batadv_slave_0
[  442.043656][T12698] FAULT_INJECTION: forcing a failure.
[  442.043656][T12698] name failslab, interval 1, probability 0, space 0, times 0
[  442.115733][ T5083] Bluetooth: hci1: command tx timeout
[  442.135881][T12698] CPU: 1 PID: 12698 Comm: syz.2.2514 Not tainted syzkaller #0
[  442.143397][T12698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  442.153468][T12698] Call Trace:
[  442.156764][T12698]  <TASK>
[  442.159710][T12698]  dump_stack_lvl+0x18c/0x250
[  442.164410][T12698]  ? show_regs_print_info+0x20/0x20
[  442.169642][T12698]  ? load_image+0x400/0x400
[  442.174172][T12698]  ? __might_sleep+0xe0/0xe0
[  442.178823][T12698]  ? __lock_acquire+0x7d40/0x7d40
[  442.183870][T12698]  ? is_dynamic_key+0x260/0x260
[  442.188747][T12698]  should_fail_ex+0x39d/0x4d0
[  442.193452][T12698]  should_failslab+0x9/0x20
[  442.197977][T12698]  slab_pre_alloc_hook+0x59/0x310
[  442.203033][T12698]  kmem_cache_alloc_node+0x60/0x320
[  442.208248][T12698]  ? __alloc_skb+0x103/0x2c0
[  442.212871][T12698]  __alloc_skb+0x103/0x2c0
[  442.217312][T12698]  __ip_append_data+0x2b73/0x3d40
[  442.222375][T12698]  ? raw_send_hdrinc+0x1170/0x1170
[  442.227501][T12698]  ? mark_lock+0x94/0x320
[  442.231851][T12698]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  442.237848][T12698]  ? ip_setup_cork+0x860/0x860
[  442.242628][T12698]  ? ip_setup_cork+0x530/0x860
[  442.247411][T12698]  ip_append_data+0x10d/0x180
[  442.252108][T12698]  ? raw_send_hdrinc+0x1170/0x1170
[  442.257401][T12698]  raw_sendmsg+0x15c1/0x1c00
[  442.262042][T12698]  ? compat_raw_ioctl+0x70/0x70
[  442.266924][T12698]  ? __lock_acquire+0x1273/0x7d40
[  442.272333][T12698]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  442.278771][T12698]  ? sock_rps_record_flow+0x19/0x3f0
[  442.284078][T12698]  ? inet_sendmsg+0x7c/0x2f0
[  442.288686][T12698]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  442.293986][T12698]  ? security_socket_sendmsg+0x80/0xa0
[  442.299460][T12698]  ? inet_send_prepare+0x260/0x260
[  442.304635][T12698]  ____sys_sendmsg+0x5ba/0x960
[  442.309413][T12698]  ? __lock_acquire+0x7d40/0x7d40
[  442.314460][T12698]  ? __asan_memset+0x22/0x40
[  442.319157][T12698]  ? __sys_sendmsg_sock+0x30/0x30
[  442.324366][T12698]  ? __import_iovec+0x5f2/0x850
[  442.329242][T12698]  ? import_iovec+0x73/0xa0
[  442.333758][T12698]  ___sys_sendmsg+0x2a6/0x360
[  442.338453][T12698]  ? __sys_sendmsg+0x2a0/0x2a0
[  442.343247][T12698]  ? __lock_acquire+0x7d40/0x7d40
[  442.348315][T12698]  __se_sys_sendmsg+0x1c2/0x2b0
[  442.353186][T12698]  ? __x64_sys_sendmsg+0x80/0x80
[  442.358159][T12698]  ? lockdep_hardirqs_on+0x98/0x150
[  442.363377][T12698]  do_syscall_64+0x55/0xa0
[  442.367809][T12698]  ? clear_bhb_loop+0x40/0x90
[  442.372502][T12698]  ? clear_bhb_loop+0x40/0x90
[  442.377189][T12698]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.383096][T12698] RIP: 0033:0x7f024d59c799
[  442.387530][T12698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.407160][T12698] RSP: 002b:00007f024e377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  442.415594][T12698] RAX: ffffffffffffffda RBX: 00007f024d815fa0 RCX: 00007f024d59c799
[  442.423585][T12698] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  442.431571][T12698] RBP: 00007f024e377090 R08: 0000000000000000 R09: 0000000000000000
[  442.439552][T12698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.447653][T12698] R13: 00007f024d816038 R14: 00007f024d815fa0 R15: 00007fff34d4e0b8
[  442.455661][T12698]  </TASK>
[  443.825497][T12731] netlink: 'syz.2.2529': attribute type 29 has an invalid length.
[  443.853812][T12731] netlink: 'syz.2.2529': attribute type 29 has an invalid length.
[  443.937407][T12731] netlink: 'syz.2.2529': attribute type 29 has an invalid length.
[  444.376125][T12747] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2536'.
[  444.414277][T12747] netlink: 'syz.3.2536': attribute type 10 has an invalid length.
[  444.436355][T12747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  444.472770][T12747] batman_adv: batadv0: Removing interface: batadv_slave_0
[  444.514081][T12747] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  444.925084][T12758] Dead loop on virtual device ip6_vti0, fix it urgently!
[  445.255263][T12771] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2547'.
[  445.508442][T12771] netlink: 'syz.3.2547': attribute type 10 has an invalid length.
[  448.693945][T12791] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.2552'.
[  448.875559][T12798] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2556'.
[  449.058878][T12804] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.2559'.
[  449.081777][T12807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2561'.
[  449.119914][T12804] netlink: 'syz.1.2559': attribute type 10 has an invalid length.
[  449.152812][T12804] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.221685][T12804] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.235692][T12809] netlink: 'syz.2.2562': attribute type 12 has an invalid length.
[  449.243562][T12809] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2562'.
[  449.469184][T12818] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2566'.
[  449.914197][T12834] FAULT_INJECTION: forcing a failure.
[  449.914197][T12834] name failslab, interval 1, probability 0, space 0, times 0
[  449.963744][T12834] CPU: 0 PID: 12834 Comm: syz.0.2572 Not tainted syzkaller #0
[  449.971279][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  449.981369][T12834] Call Trace:
[  449.984660][T12834]  <TASK>
[  449.987599][T12834]  dump_stack_lvl+0x18c/0x250
[  449.992298][T12834]  ? show_regs_print_info+0x20/0x20
[  449.997587][T12834]  ? load_image+0x400/0x400
[  450.002091][T12834]  ? __might_sleep+0xe0/0xe0
[  450.006686][T12834]  ? __lock_acquire+0x7d40/0x7d40
[  450.011815][T12834]  ? is_dynamic_key+0x260/0x260
[  450.016694][T12834]  should_fail_ex+0x39d/0x4d0
[  450.021401][T12834]  should_failslab+0x9/0x20
[  450.025907][T12834]  slab_pre_alloc_hook+0x59/0x310
[  450.030942][T12834]  kmem_cache_alloc_node+0x60/0x320
[  450.036148][T12834]  ? __alloc_skb+0x103/0x2c0
[  450.040758][T12834]  __alloc_skb+0x103/0x2c0
[  450.045180][T12834]  __ip_append_data+0x2b73/0x3d40
[  450.050228][T12834]  ? raw_send_hdrinc+0x1170/0x1170
[  450.055343][T12834]  ? mark_lock+0x94/0x320
[  450.059682][T12834]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  450.065668][T12834]  ? ip_setup_cork+0x860/0x860
[  450.070445][T12834]  ? ip_setup_cork+0x530/0x860
[  450.075209][T12834]  ip_append_data+0x10d/0x180
[  450.079892][T12834]  ? raw_send_hdrinc+0x1170/0x1170
[  450.085004][T12834]  raw_sendmsg+0x15c1/0x1c00
[  450.089623][T12834]  ? compat_raw_ioctl+0x70/0x70
[  450.094478][T12834]  ? __lock_acquire+0x1273/0x7d40
[  450.099543][T12834]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  450.105965][T12834]  ? sock_rps_record_flow+0x19/0x3f0
[  450.111258][T12834]  ? inet_sendmsg+0x7c/0x2f0
[  450.115854][T12834]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  450.121141][T12834]  ? security_socket_sendmsg+0x80/0xa0
[  450.126600][T12834]  ? inet_send_prepare+0x260/0x260
[  450.131717][T12834]  ____sys_sendmsg+0x5ba/0x960
[  450.136487][T12834]  ? __lock_acquire+0x7d40/0x7d40
[  450.141604][T12834]  ? __asan_memset+0x22/0x40
[  450.146197][T12834]  ? __sys_sendmsg_sock+0x30/0x30
[  450.151221][T12834]  ? __import_iovec+0x3fa/0x850
[  450.156105][T12834]  ? import_iovec+0x73/0xa0
[  450.160625][T12834]  ___sys_sendmsg+0x2a6/0x360
[  450.165320][T12834]  ? __sys_sendmsg+0x2a0/0x2a0
[  450.170106][T12834]  ? __lock_acquire+0x7d40/0x7d40
[  450.175152][T12834]  __se_sys_sendmsg+0x1c2/0x2b0
[  450.180016][T12834]  ? __x64_sys_sendmsg+0x80/0x80
[  450.185011][T12834]  ? lockdep_hardirqs_on+0x98/0x150
[  450.190264][T12834]  do_syscall_64+0x55/0xa0
[  450.194793][T12834]  ? clear_bhb_loop+0x40/0x90
[  450.199476][T12834]  ? clear_bhb_loop+0x40/0x90
[  450.204164][T12834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  450.210059][T12834] RIP: 0033:0x7ff91239c799
[  450.214476][T12834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.234090][T12834] RSP: 002b:00007ff91332f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.242512][T12834] RAX: ffffffffffffffda RBX: 00007ff912615fa0 RCX: 00007ff91239c799
[  450.250489][T12834] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  450.258560][T12834] RBP: 00007ff91332f090 R08: 0000000000000000 R09: 0000000000000000
[  450.266533][T12834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  450.274512][T12834] R13: 00007ff912616038 R14: 00007ff912615fa0 R15: 00007ffff3c5c758
[  450.282503][T12834]  </TASK>
[  450.398827][T12841] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2575'.
[  450.454584][T12841] netlink: 'syz.3.2575': attribute type 10 has an invalid length.
[  451.309667][T12869] netlink: 'syz.1.2587': attribute type 10 has an invalid length.
[  451.335843][T12869] netlink: 'syz.1.2587': attribute type 16 has an invalid length.
[  451.344243][T12869] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2587'.
[  451.370836][T12871] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2588'.
[  451.404890][T12874] FAULT_INJECTION: forcing a failure.
[  451.404890][T12874] name failslab, interval 1, probability 0, space 0, times 0
[  451.420538][T12871] netlink: 'syz.3.2588': attribute type 10 has an invalid length.
[  451.421643][T12874] CPU: 0 PID: 12874 Comm: syz.2.2590 Not tainted syzkaller #0
[  451.435855][T12874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  451.445912][T12874] Call Trace:
[  451.449190][T12874]  <TASK>
[  451.452121][T12874]  dump_stack_lvl+0x18c/0x250
[  451.456805][T12874]  ? sctp_sendmsg+0x1575/0x28c0
[  451.461653][T12874]  ? ___sys_sendmsg+0x2a6/0x360
[  451.466502][T12874]  ? show_regs_print_info+0x20/0x20
[  451.471704][T12874]  ? load_image+0x400/0x400
[  451.476221][T12874]  should_fail_ex+0x39d/0x4d0
[  451.480907][T12874]  should_failslab+0x9/0x20
[  451.485412][T12874]  slab_pre_alloc_hook+0x59/0x310
[  451.490443][T12874]  ? sctp_add_bind_addr+0x8c/0x360
[  451.495556][T12874]  __kmem_cache_alloc_node+0x53/0x250
[  451.500939][T12874]  ? sctp_add_bind_addr+0x8c/0x360
[  451.506052][T12874]  kmalloc_trace+0x2a/0xe0
[  451.510501][T12874]  sctp_add_bind_addr+0x8c/0x360
[  451.515618][T12874]  sctp_copy_local_addr_list+0x315/0x4f0
[  451.521264][T12874]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  451.526983][T12874]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  451.533058][T12874]  ? sctp_v4_is_any+0x35/0x60
[  451.537739][T12874]  ? sctp_copy_one_addr+0x8c/0x350
[  451.542858][T12874]  sctp_bind_addr_copy+0xb3/0x3c0
[  451.547980][T12874]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  451.554317][T12874]  sctp_connect_new_asoc+0x2f9/0x6a0
[  451.559609][T12874]  ? __sctp_connect+0xd80/0xd80
[  451.564459][T12874]  ? __local_bh_enable_ip+0x13a/0x1c0
[  451.569834][T12874]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  451.575383][T12874]  ? security_sctp_bind_connect+0x89/0xb0
[  451.581112][T12874]  sctp_sendmsg+0x1575/0x28c0
[  451.585802][T12874]  ? sctp_getsockopt+0xb60/0xb60
[  451.590741][T12874]  ? aa_sk_perm+0x83c/0x970
[  451.595341][T12874]  ? aa_af_perm+0x330/0x330
[  451.599844][T12874]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  451.606280][T12874]  ? sock_rps_record_flow+0x19/0x3f0
[  451.611577][T12874]  ? inet_sendmsg+0xe9/0x2f0
[  451.616167][T12874]  ? inet_send_prepare+0x260/0x260
[  451.621278][T12874]  ____sys_sendmsg+0x5ba/0x960
[  451.626041][T12874]  ? __lock_acquire+0x7d40/0x7d40
[  451.631067][T12874]  ? __asan_memset+0x22/0x40
[  451.635665][T12874]  ? __sys_sendmsg_sock+0x30/0x30
[  451.640685][T12874]  ? __import_iovec+0x5f2/0x850
[  451.645543][T12874]  ? import_iovec+0x73/0xa0
[  451.650045][T12874]  ___sys_sendmsg+0x2a6/0x360
[  451.654723][T12874]  ? __sys_sendmsg+0x2a0/0x2a0
[  451.659585][T12874]  ? __lock_acquire+0x7d40/0x7d40
[  451.664633][T12874]  __se_sys_sendmsg+0x1c2/0x2b0
[  451.669487][T12874]  ? __x64_sys_sendmsg+0x80/0x80
[  451.674435][T12874]  ? lockdep_hardirqs_on+0x98/0x150
[  451.679657][T12874]  do_syscall_64+0x55/0xa0
[  451.684270][T12874]  ? clear_bhb_loop+0x40/0x90
[  451.688947][T12874]  ? clear_bhb_loop+0x40/0x90
[  451.693626][T12874]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.699528][T12874] RIP: 0033:0x7f024d59c799
[  451.703962][T12874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.723574][T12874] RSP: 002b:00007f024e377028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.731990][T12874] RAX: ffffffffffffffda RBX: 00007f024d815fa0 RCX: 00007f024d59c799
[  451.739960][T12874] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003
[  451.747929][T12874] RBP: 00007f024e377090 R08: 0000000000000000 R09: 0000000000000000
[  451.755900][T12874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  451.763868][T12874] R13: 00007f024d816038 R14: 00007f024d815fa0 R15: 00007fff34d4e0b8
[  451.771851][T12874]  </TASK>
[  452.332253][T12892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2597'.
[  452.345025][T12892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2597'.
[  452.379518][T12892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2597'.
[  452.657962][T12901] FAULT_INJECTION: forcing a failure.
[  452.657962][T12901] name failslab, interval 1, probability 0, space 0, times 0
[  452.670791][T12901] CPU: 0 PID: 12901 Comm: syz.2.2600 Not tainted syzkaller #0
[  452.678296][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  452.688381][T12901] Call Trace:
[  452.691686][T12901]  <TASK>
[  452.694638][T12901]  dump_stack_lvl+0x18c/0x250
[  452.699438][T12901]  ? show_regs_print_info+0x20/0x20
[  452.704661][T12901]  ? load_image+0x400/0x400
[  452.709190][T12901]  ? __lock_acquire+0x7d40/0x7d40
[  452.714283][T12901]  should_fail_ex+0x39d/0x4d0
[  452.718995][T12901]  should_failslab+0x9/0x20
[  452.723522][T12901]  slab_pre_alloc_hook+0x59/0x310
[  452.728574][T12901]  ? __lock_acquire+0x7d40/0x7d40
[  452.733628][T12901]  kmem_cache_alloc+0x5a/0x2d0
[  452.738405][T12901]  ? security_file_alloc+0x34/0x120
[  452.743639][T12901]  security_file_alloc+0x34/0x120
[  452.748698][T12901]  init_file+0x94/0x1f0
[  452.752884][T12901]  alloc_empty_file+0xb7/0x1d0
[  452.757676][T12901]  alloc_file+0x5c/0x600
[  452.761958][T12901]  alloc_file_pseudo+0x184/0x210
[  452.766910][T12901]  ? alloc_empty_backing_file+0xe0/0xe0
[  452.772481][T12901]  ? alloc_fd+0x58f/0x630
[  452.776842][T12901]  anon_inode_getfd+0xca/0x1c0
[  452.781622][T12901]  btf_new_fd+0x856/0x9f0
[  452.785995][T12901]  ? bpf_btf_show_fdinfo+0x80/0x80
[  452.791134][T12901]  ? capable+0x88/0xe0
[  452.795220][T12901]  __sys_bpf+0x670/0x890
[  452.799561][T12901]  ? bpf_link_show_fdinfo+0x390/0x390
[  452.804963][T12901]  ? lock_chain_count+0x20/0x20
[  452.809839][T12901]  __x64_sys_bpf+0x7c/0x90
[  452.814281][T12901]  do_syscall_64+0x55/0xa0
[  452.818720][T12901]  ? clear_bhb_loop+0x40/0x90
[  452.823417][T12901]  ? clear_bhb_loop+0x40/0x90
[  452.828112][T12901]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.834011][T12901] RIP: 0033:0x7f024d59c799
[  452.838451][T12901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.858154][T12901] RSP: 002b:00007f024e377028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  452.866573][T12901] RAX: ffffffffffffffda RBX: 00007f024d815fa0 RCX: 00007f024d59c799
[  452.874554][T12901] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012
[  452.882534][T12901] RBP: 00007f024e377090 R08: 0000000000000000 R09: 0000000000000000
[  452.890512][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  452.898487][T12901] R13: 00007f024d816038 R14: 00007f024d815fa0 R15: 00007fff34d4e0b8
[  452.906479][T12901]  </TASK>
[  452.912577][T12903] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2601'.
[  452.993065][T12900] netlink: 'syz.3.2601': attribute type 10 has an invalid length.
[  454.181291][T12932] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2615'.
[  454.234019][T12932] netlink: 'syz.2.2615': attribute type 10 has an invalid length.
[  454.375555][T12939] sctp: [Deprecated]: syz.3.2614 (pid 12939) Use of int in max_burst socket option deprecated.
[  454.375555][T12939] Use struct sctp_assoc_value instead
[  513.935913][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[  524.255941][ T5765] Bluetooth: hci4: command 0x0406 tx timeout
[  539.615892][ T5775] Bluetooth: hci0: command 0x0406 tx timeout
[  556.055142][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  556.064490][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  558.885607][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  558.892258][    C1] rcu: 	1-....: (10500 ticks this GP) idle=4694/1/0x4000000000000000 softirq=42842/42842 fqs=5236
[  558.903813][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  558.910298][    C1] rcu: 	 number:  1532076          0            0
[  558.916693][    C1] rcu: 	cputime:    19095      33394           28   ==> 52500(ms)
[  558.924483][    C1] rcu: 	(t=10502 jiffies g=53969 q=1017 ncpus=2)
[  558.930822][    C1] CPU: 1 PID: 12928 Comm: syz.0.2612 Not tainted syzkaller #0
[  558.938282][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  558.948332][    C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x2e/0x80
[  558.954659][    C1] Code: 48 8b 04 24 65 48 8b 0d 40 97 7c 7e 65 8b 15 41 97 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 1c 16 00 00 00 <74> 4e 8b 91 f8 15 00 00 83 fa 03 75 43 48 8b 91 00 16 00 00 44 8b
[  558.974265][    C1] RSP: 0018:ffffc900001f0330 EFLAGS: 00000246
[  558.980374][    C1] RAX: ffffffff813b3800 RBX: ffffffff81000000 RCX: ffff8880632e0000
[  558.988349][    C1] RDX: 0000000000000100 RSI: ffffffff8ac00000 RDI: ffffffff8176bf91
[  558.996322][    C1] RBP: ffffc900001f0400 R08: ffffc900001f04d0 R09: 0000000000000009
[  559.004296][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001f0408
[  559.012271][    C1] R13: dffffc0000000000 R14: ffffc900001f043d R15: ffffffff8176bf91
[  559.020248][    C1] FS:  00007ff91332f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  559.029177][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  559.035758][    C1] CR2: 0000000100000000 CR3: 000000007a1ba000 CR4: 00000000003506e0
[  559.043731][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  559.051698][    C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  559.059668][    C1] Call Trace:
[  559.062962][    C1]  <IRQ>
[  559.065800][    C1]  unwind_next_frame+0x1e0/0x2970
[  559.070839][    C1]  ? __run_timers+0x542/0x800
[  559.075527][    C1]  ? __run_timers+0x542/0x800
[  559.080266][    C1]  ? stack_trace_save+0x100/0x100
[  559.085314][    C1]  arch_stack_walk+0x144/0x190
[  559.090116][    C1]  ? __run_timers+0x542/0x800
[  559.094901][    C1]  stack_trace_save+0xaa/0x100
[  559.099678][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  559.104828][    C1]  kasan_set_track+0x4e/0x70
[  559.109437][    C1]  ? kasan_set_track+0x4e/0x70
[  559.114198][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  559.119219][    C1]  ? slab_post_alloc_hook+0x6e/0x4b0
[  559.124507][    C1]  ? kmem_cache_alloc+0x11a/0x2d0
[  559.129554][    C1]  ? dst_alloc+0x105/0x170
[  559.134000][    C1]  ? icmp6_dst_alloc+0x7b/0x400
[  559.138862][    C1]  ? ndisc_send_skb+0x44e/0x14f0
[  559.143801][    C1]  ? addrconf_rs_timer+0x2d5/0x630
[  559.148911][    C1]  ? call_timer_fn+0x189/0x540
[  559.153675][    C1]  ? __run_timers+0x542/0x800
[  559.158387][    C1]  __kasan_slab_alloc+0x6c/0x80
[  559.163243][    C1]  slab_post_alloc_hook+0x6e/0x4b0
[  559.168360][    C1]  kmem_cache_alloc+0x11a/0x2d0
[  559.173209][    C1]  ? dst_alloc+0x105/0x170
[  559.177622][    C1]  ? ipv6_sysctl_rtcache_flush+0xf0/0xf0
[  559.183252][    C1]  dst_alloc+0x105/0x170
[  559.187491][    C1]  icmp6_dst_alloc+0x7b/0x400
[  559.192162][    C1]  ? icmpv6_flow_init+0x62/0x120
[  559.197109][    C1]  ndisc_send_skb+0x44e/0x14f0
[  559.201884][    C1]  ? ndisc_send_skb+0x1f5/0x14f0
[  559.206820][    C1]  ? ndisc_mc_map+0x680/0x680
[  559.211488][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  559.216683][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  559.222869][    C1]  addrconf_rs_timer+0x2d5/0x630
[  559.227821][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  559.233904][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  559.239912][    C1]  call_timer_fn+0x189/0x540
[  559.244512][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  559.250595][    C1]  ? call_timer_fn+0xd2/0x540
[  559.255288][    C1]  ? __run_timers+0x800/0x800
[  559.259991][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  559.266072][    C1]  __run_timers+0x542/0x800
[  559.270594][    C1]  ? detach_timer+0x2b0/0x2b0
[  559.275362][    C1]  ? lock_chain_count+0x20/0x20
[  559.280216][    C1]  run_timer_softirq+0x67/0xf0
[  559.284975][    C1]  handle_softirqs+0x280/0x820
[  559.289736][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  559.294497][    C1]  ? do_softirq+0x1a0/0x1a0
[  559.298997][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  559.304195][    C1]  __irq_exit_rcu+0xd3/0x190
[  559.308779][    C1]  ? irq_exit_rcu+0x20/0x20
[  559.313280][    C1]  irq_exit_rcu+0x9/0x20
[  559.317522][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  559.323149][    C1]  </IRQ>
[  559.326072][    C1]  <TASK>
[  559.328996][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  559.334984][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120
[  559.341489][    C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 0b c9 cd f6 65 8b 05 2c f8 74 75 85 c0 74 3c 48 c7 04 24 0e 36
[  559.361114][    C1] RSP: 0018:ffffc900033b7ca0 EFLAGS: 00000206
[  559.367213][    C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 18aa6dc8f0276a00
[  559.375209][    C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: 0000000000000001
[  559.383178][    C1] RBP: ffffc900033b7d30 R08: ffffffff911c15ff R09: 1ffffffff22382bf
[  559.391152][    C1] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: dffffc0000000000
[  559.399209][    C1] R13: 1ffff92000676fb8 R14: ffff88804314d800 R15: 1ffff92000676f94
[  559.407194][    C1]  ? _raw_spin_unlock+0x40/0x40
[  559.412051][    C1]  __se_sys_perf_event_open+0x183e/0x1c50
[  559.417779][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  559.423420][    C1]  ? lock_chain_count+0x20/0x20
[  559.428299][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  559.433509][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  559.439162][    C1]  do_syscall_64+0x55/0xa0
[  559.443583][    C1]  ? clear_bhb_loop+0x40/0x90
[  559.448257][    C1]  ? clear_bhb_loop+0x40/0x90
[  559.452933][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.458842][    C1] RIP: 0033:0x7ff91239c799
[  559.463270][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.482982][    C1] RSP: 002b:00007ff91332f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  559.491422][    C1] RAX: ffffffffffffffda RBX: 00007ff912615fa0 RCX: 00007ff91239c799
[  559.499394][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480
[  559.507366][    C1] RBP: 00007ff912432c99 R08: 0000000000000000 R09: 0000000000000000
[  559.515332][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  559.523298][    C1] R13: 00007ff912616038 R14: 00007ff912615fa0 R15: 00007ffff3c5c758
[  559.531370][    C1]  </TASK>
[  560.022678][ T5777] Bluetooth: hci1: command 0x0406 tx timeout