last executing test programs:

3.970638983s ago: executing program 3 (id=2068):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f00000003c0), 0x0, 0x4}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x1})
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r1, 0x34, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_clone(0x2000, &(0x7f0000000680), 0x0, &(0x7f0000000540), &(0x7f0000000640), &(0x7f00000005c0)="ec4af8a0f5d832d6d7f1caa68eb013812688613362")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1}, 0x0)

3.776404822s ago: executing program 4 (id=2069):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)
syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x13, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1d, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x3c}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x18, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

3.479456067s ago: executing program 4 (id=2072):
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0x100000000}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x1082, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0), 0x0, 0xdd, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xed, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r2 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x5, &(0x7f00000000c0), 0x18)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x5e, 0x0, 0x0, 0xba}, 0x28)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x0, 0x3, 0x3, 0x8, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[r5, r5, r5, r5, r5, r5, r5, r5], &(0x7f0000000380)=[{0x0, 0x4, 0xf, 0x6}], 0x10, 0x7}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001041000001000000dc016d3c64fded95"], 0x18}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

2.775022123s ago: executing program 4 (id=2077):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8)

2.688162556s ago: executing program 3 (id=2079):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1800000069006bcd8e3fe3dc6e000000000100000000", 0x34}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000"], 0x0, 0x5a}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080))
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000))
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e2306", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
socketpair(0x1e, 0x4, 0xfffffff8, &(0x7f0000000040)={0x0, <r3=>0x0})
syz_clone(0x2e9a4480, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$unix(r3, 0x0, 0x0)

2.564071802s ago: executing program 4 (id=2081):
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001140)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}], 0x50}, 0x0)

2.540535794s ago: executing program 2 (id=2082):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)
syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x13, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1d, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x3c}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x18, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

2.399149461s ago: executing program 4 (id=2083):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/183, 0xb7}], 0x5}, 0x10020)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x0, 0x0)
close(r2)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0700000004000000060200000b00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x2, 0x300)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x25, 0x5, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r7})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

2.298063236s ago: executing program 4 (id=2086):
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r6, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x10000000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5)
socket$kcm(0x10, 0x2, 0x0)

2.233371139s ago: executing program 2 (id=2087):
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x1000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x39c}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r2}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r2, &(0x7f0000000880)}, 0x20)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000500), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0xc2, 0x9, 0x29010, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r5, 0x4, 0x0, 0x1, 0xf, @value=r5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0x7, &(0x7f0000000100)=@raw=[@alu={0x7, 0x1, 0x2, 0x8, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3b}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}], &(0x7f0000000140)='syzkaller\x00', 0x27bb, 0xa3, &(0x7f0000000180)=""/163, 0x40f00, 0x12, '\x00', r6, @fallback=0x28, r5, 0x8, &(0x7f0000000740)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x8, &(0x7f0000000800)=[r5, r5, r5, r5, r7, r5, r5], &(0x7f0000000840)=[{0x2, 0x3, 0xb, 0x9}, {0x0, 0x4, 0x5, 0x3}, {0x1, 0x2, 0xc, 0x7d41c5cd1aaf8bfd}, {0x2, 0x1, 0xf, 0xb}, {0x3, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x3, 0x1}, {0x5, 0x4, 0x3, 0x5}, {0x4, 0x2, 0x3, 0x8}], 0x10, 0x8}, 0x94)
r8 = socket$kcm(0xa, 0x2, 0x88)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000ac0)={r5, 0x0, 0xe3, 0x0, &(0x7f0000000980)="f5447ccadadfa6628d91b958760dca8aa5e8f28f528093376afc92b8c3f2e1b3b5a8f3a0cbef8dbd0ef676fc655133912167cc89388f3c21d267bfce4ca8c86cf2abdfbae1e0bb3517cd111f7d5ba35d921943b5d8558d4144063f446424bdb2157dc43b42dc9549e63118ca2961c7aa0719f5ebd2ea57d289d847fe06d6c86dc09ab08ac07530d79d81f095ac40732b01a5100d8e27d76d84f07638062038f89e6471cea8448f27ba49156d4871660d6dd68dd12fc6fdfaa80ac16d20e7926055aa45f3ddd7f2bf971d1b00d4a51cf0a3b61b41fc2e4565b6747a46809faa683d0702", 0x0, 0x100, 0x0, 0x38, 0x0, &(0x7f0000000a80)="77936018d6d4a7136a39a44b37ae76c4261af5d7bbdacfb6e6171694b247dce7af7c72b8081565564615adfb9661a280bc0415208df57675", 0x0, 0x2, 0x0, 0x100}, 0x50)
unlink(&(0x7f00000005c0)='./file0\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4)
setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c080000000900"/40, 0x5dc}], 0x1}, 0x0)

2.101223916s ago: executing program 0 (id=2088):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="14ff97002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x35}, 0x0)

1.999718211s ago: executing program 0 (id=2089):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000041c00000043000000040000000000000000000001050000000800000001000000000000070000000000616100"], 0x0, 0x38}, 0xff12)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000880))
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x4001, @multicast1}, 0x10, 0x0}, 0x34008011)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4b04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @private=0xa010101}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)='*', 0x1}], 0x1}, 0x4000)
setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000000), 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000003040)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000002c0)}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004a000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r4 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e003f0011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000001980)=""/4096, 0x1000}, 0x10000)

1.568048292s ago: executing program 3 (id=2092):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8)

1.433465369s ago: executing program 1 (id=2093):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001", 0x37}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1.349873503s ago: executing program 3 (id=2094):
close(0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="4c00100013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c001a00380000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20000890a337ccee6000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200480d1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x17, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100000, 0x1000008, 0x0, 0x2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0)
write$cgroup_devices(r2, 0x0, 0xa)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100021500bf050005001201", 0x67}], 0x1}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x9)
r6 = socket$kcm(0x2, 0x200000000000006, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="00000000000000ed070778000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x5, r7}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r7, &(0x7f00000001c0)="9d14bee5c9c85bcf6cbcd3419ed13711140957ed91fc6c43af7ac51e08bc584de0b1a08cd7e1708559f01703129b8fc507cc", &(0x7f0000000000)=""/36}, 0x20)
close(r4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

1.22815808s ago: executing program 2 (id=2095):
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100))
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x4048800)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x45)
sendmsg(0xffffffffffffffff, 0x0, 0x80)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

1.22711078s ago: executing program 1 (id=2096):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/183, 0xb7}], 0x5}, 0x10020)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x0, 0x0)
close(r2)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0700000004000000060200000b00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x2, 0x300)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x25, 0x5, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r7})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

1.002806271s ago: executing program 2 (id=2097):
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3)
syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x13, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x1d, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x3c}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x18, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

959.247383ms ago: executing program 0 (id=2098):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff}, 0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8000, '\x00', r2, r3, 0x5, 0x5, 0x5}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015001500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff}, 0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x8000, '\x00', r2, r3, 0x5, 0x5, 0x5}, 0x50) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015001500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) (async)

956.320273ms ago: executing program 1 (id=2099):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x101, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0xbc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000100))
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x4048800)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x45)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x51f0aeb2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg(0xffffffffffffffff, 0x0, 0x80)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x47, 0xc, 0x0, 0x79, 0x10400, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_bp, 0x811, 0xfffffffffffffff8, 0x2, 0x9, 0x0, 0x1, 0x5212, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}], 0x1}, 0x20000040)
sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close(r2)
r4 = socket$kcm(0x10, 0x100000000002, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x5, 0x0, 0x0, 0x1ff, 0x101e1, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x1, 0x4, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x4f)

864.708357ms ago: executing program 3 (id=2100):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f940e1224fc60", 0x14}], 0x1}, 0x40010)
perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001280), 0x9}, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0700000004000000000000000000000000007f00dc732993229f4b84683c73817f3fb421c7f3f399", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000001800"/28], 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000001500)={0x2, 0x80, 0x9f, 0x77, 0x5, 0xfe, 0x0, 0x6, 0x84, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_bp={&(0x7f00000014c0), 0xc}, 0x309, 0x1, 0x7b0, 0x9, 0x2, 0xbf61, 0x3, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xa, r0, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001bc0), 0x4}, 0x100910, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = socket$kcm(0x21, 0x2, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, 0x0)
setsockopt$sock_attach_bpf(r9, 0x110, 0x2, &(0x7f0000000000), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="180000002d8dc27a0973", @ANYRES32=r9, @ANYRES32, @ANYRES16=r10, @ANYRESHEX=r8, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0x18}, 0x0)
perf_event_open(&(0x7f0000000d00)={0x3, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa800e7fcbcfa610e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, r8, 0xa)
sendmsg$kcm(r7, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)}, 0x0)
close(r7)

862.019418ms ago: executing program 2 (id=2101):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, 0x0, 0x24040810) (async)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) (async)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r5}, 0x70)
r6 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r6, 0x6, 0xe, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x10000, &(0x7f00000007c0)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="de745600c081ce271e2436dc41465e7f4a507e3ff1f8404c6fab1a779be11bf7bc7ad4aaaa1262082c1f872cd64a9bd4090befbc90b89ccda70481890a91e9ecc61fcfbc8aaca8d5d43c992a64bf")
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r1, 0x0, 0x4f, 0x0}, 0x30)
write$cgroup_pid(r7, &(0x7f0000000180), 0x12) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
r8 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r8, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r10, 0x0, 0xf00000000000000}, 0x38)

725.091624ms ago: executing program 0 (id=2102):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x5, 0x2}, 0x0, 0x0, r0, 0x0)

657.323337ms ago: executing program 1 (id=2103):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8)

567.823552ms ago: executing program 0 (id=2104):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0x8)

466.866487ms ago: executing program 2 (id=2105):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xe, 0x4, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'io'}, {0x2b, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net'}, {0x2d, 'pids'}, {0x2d, 'cpuacct'}, {0x2b, 'memory'}, {0xa5010c45601dde7c, 'pids'}, {0x2b, 'cpuacct'}, {0x2b, 'net'}]}, 0x43)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xf}, 0x106581, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff}, 0x10}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r9, r8, 0x26}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r10, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)

428.505049ms ago: executing program 1 (id=2106):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x214e, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa00, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_retopts={{0x18, 0x110, 0xa, {[@cipso={0x86, 0x6, 0x2}]}}}], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00\x00'], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)

363.375082ms ago: executing program 0 (id=2107):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
write$cgroup_type(r0, &(0x7f0000000180), 0x13bb711e)

290.575486ms ago: executing program 3 (id=2108):
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8991, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=':\xf5-\x00')
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xfd, 0x3, 0x9, 0x0, 0x0, 0x3ff, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x1, @perf_bp={0x0, 0x9}, 0x8400, 0xc764, 0x6, 0x1, 0x9, 0x401, 0x3e, 0x0, 0x10005, 0x0, 0xfffffffffffffff3}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f1"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)
close(r3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r4, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100187881ddcaf4a560ee000000000000003400000034000000040000000000000000000001050000000800000001000000000000070000000000000000000000030000000001008900000200000000000000006161"], 0x0, 0x50}, 0x28)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3bc}, @generic={0x3, 0x0, 0x2, 0x13, 0x71e8739f}, @exit], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r7}, 0x8)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x101}, 0x1, 0xc8, 0x8, 0x2, 0x0, 0x0, 0x4000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(r6, &(0x7f0000000740)={&(0x7f0000000600)=@llc={0x1a, 0x18, 0xfa, 0x9, 0x2d, 0xcc, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000002880)=[{0x40, 0x108, 0x2, "294802dc9be45562d26fde32c75bd18420cf4b5a1306ef12d010bb30b8c18af347f4fe481f6f3f98685742d6"}, {0x50, 0x103, 0x8, "4c2b6670016bc241d31204bfe8546ca901ca413b2d77d0418614d84c3b8f54b6c6007f5aa17263269aee5137789896e1031b455e5aa8c5a870"}, {0x98, 0x6, 0xd97, "b22aa32e26ab0e1ec8f60bf014e14dd91627da3fd5814627dddc060d782415d9115fd2614cd07cd0af2c29f6b1175c04df34da1f30539d79ee14fb71a2bf1c22687ecdf11cbeb86f4acdcf3c99f4a29830fb99e92f5ff3ad143f10d0c8e08126a919b4af5c1f06c7172aca621ee8a0cd92b770636896f652d796080f57f81a3b3c076540"}, {0x90, 0x104, 0x4, "5c3ca0c1e85ba96a6c90adc71f3c5938b916fe558db244cba2d3017cbd93d1b8614bd3abb2d7ff82e8f2171c8b3519baad0bf11f561b03298a9346ed6d067ddfaaf7e1f869235094f0130d03e28b5028992e3a1040bd55af265b6afd2e5811f17c0376960e690a34895c64ad4e833c3e988cebb068a3793f41"}, {0x100, 0xff, 0xfffffc61, "986472206905249795add30d6f7162ebda678663627934084d08c2354870a184f988c02fa66bc9e8d0241c72d1799e2945d9a45300cd1851541b2e09a9ef9b0d1d258d07f476dde92cdfe1e5773b036c1f4fb4eb24b628c1cfed99aa85ea1b8860fd5176f7173f0b6a9e49debbb87faaac3bed0f6d7621f7b6fee103d8528c5aae04b680841f4efeeb9a19dfb11520da42f77f19414e319e979563617b5018bab04590af308abce306d5d603d7db89a1b357b01f1738460bc7c5926ddcc1b4d4a2133984d1b19b6df522230a416cffec784575df73c1be17846ab35be08c1869b5156d3a0dea89cab306f7be8b"}, {0x10, 0x10d, 0x6}, {0x18, 0x117, 0x1, "be04eb972e"}, {0x88, 0x1, 0x0, "058d00138e904180961b890bcdb97aaad6572454ca7bf74955b5b80e64032916a1e8414ff311071eb767bd62e049255d2c10398f3a21a24fe57a02bacab489f4038e531b1f3f45bd793259316dbea8ad8fcf8a998a7583effdc190c1d6277d404f7526b87ff98584483ea5c2341a52c848fac274dab8"}], 0x368}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0xf71d0c53aa6556ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xb, 0x5, 0x31, 0x0, 0x0, 0x5, 0x44, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0xe7e65d92}, 0x44, 0xf1ab, 0x0, 0x4, 0x21, 0x9, 0xffff, 0x0, 0xfffffffc}, 0x0, 0x6, r0, 0x8)

0s ago: executing program 1 (id=2109):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000740)=""/183, 0xb7}], 0x5}, 0x10020)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x200040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x0, 0x0)
close(r2)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0700000004000000060200000b00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x11, 0x2, 0x300)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x25, 0x5, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r7})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

946][ T4922] CPU: 0 PID: 4922 Comm: syz.0.228 Not tainted syzkaller #0
[   89.505556][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   89.515643][ T4922] Call Trace:
[   89.518928][ T4922]  <TASK>
[   89.521967][ T4922]  dump_stack_lvl+0x188/0x250
[   89.526719][ T4922]  ? show_regs_print_info+0x20/0x20
[   89.531948][ T4922]  ? load_image+0x400/0x400
[   89.536471][ T4922]  ? __might_sleep+0xf0/0xf0
[   89.541074][ T4922]  ? __lock_acquire+0x7d10/0x7d10
[   89.546126][ T4922]  should_fail+0x38c/0x4c0
[   89.550690][ T4922]  should_failslab+0x5/0x20
[   89.555206][ T4922]  slab_pre_alloc_hook+0x51/0xc0
[   89.560198][ T4922]  __kmalloc+0x6b/0x330
[   89.564371][ T4922]  ? bpf_test_init+0xf8/0x1b0
[   89.569155][ T4922]  ? __lock_acquire+0x7d10/0x7d10
[   89.574189][ T4922]  bpf_test_init+0xf8/0x1b0
[   89.578795][ T4922]  bpf_prog_test_run_skb+0x181/0x1180
[   89.584310][ T4922]  ? __fget_files+0x40f/0x480
[   89.589006][ T4922]  ? cpu_online+0x60/0x60
[   89.593336][ T4922]  bpf_prog_test_run+0x31e/0x390
[   89.598274][ T4922]  __sys_bpf+0x5a5/0x6f0
[   89.602512][ T4922]  ? perf_trace_preemptirq_template+0x2aa/0x360
[   89.608756][ T4922]  ? bpf_link_show_fdinfo+0x380/0x380
[   89.614247][ T4922]  ? rcu_nmi_exit+0x6f/0xf0
[   89.618859][ T4922]  ? vtime_user_exit+0x2c8/0x3e0
[   89.623898][ T4922]  __x64_sys_bpf+0x78/0x90
[   89.628333][ T4922]  do_syscall_64+0x4c/0xa0
[   89.632828][ T4922]  ? clear_bhb_loop+0x30/0x80
[   89.637504][ T4922]  ? clear_bhb_loop+0x30/0x80
[   89.642282][ T4922]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   89.648167][ T4922] RIP: 0033:0x7f6a005ac799
[   89.652575][ T4922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.672200][ T4922] RSP: 002b:00007f69fe806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   89.680728][ T4922] RAX: ffffffffffffffda RBX: 00007f6a00825fa0 RCX: 00007f6a005ac799
[   89.688805][ T4922] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a
[   89.697216][ T4922] RBP: 00007f69fe806090 R08: 0000000000000000 R09: 0000000000000000
[   89.705270][ T4922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   89.713228][ T4922] R13: 00007f6a00826038 R14: 00007f6a00825fa0 R15: 00007ffd8a5471b8
[   89.721202][ T4922]  </TASK>
[   89.822718][ T4929] netlink: 'syz.2.230': attribute type 14 has an invalid length.
[   89.857235][ T4929] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.230'.
[   90.224105][ T4937] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   90.292898][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'.
[   90.369005][ T4940] netlink: 'syz.0.234': attribute type 27 has an invalid length.
[   90.405415][ T4949] netlink: 'syz.2.237': attribute type 10 has an invalid length.
[   90.489106][ T4951] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.238'.
[   90.756700][ T4963] netlink: 60 bytes leftover after parsing attributes in process `syz.4.244'.
[   90.788933][ T4963] netlink: 60 bytes leftover after parsing attributes in process `syz.4.244'.
[   90.818536][ T4968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.244'.
[   90.872197][ T4963] netlink: 60 bytes leftover after parsing attributes in process `syz.4.244'.
[   91.123130][ T4978] netlink: 'syz.4.250': attribute type 27 has an invalid length.
[   91.245116][ T4990] FAULT_INJECTION: forcing a failure.
[   91.245116][ T4990] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   91.272711][ T4986] netlink: 'syz.3.251': attribute type 10 has an invalid length.
[   91.312153][ T4990] CPU: 0 PID: 4990 Comm: syz.0.255 Not tainted syzkaller #0
[   91.319508][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   91.329778][ T4990] Call Trace:
[   91.333082][ T4990]  <TASK>
[   91.336100][ T4990]  dump_stack_lvl+0x188/0x250
[   91.340828][ T4999] netlink: 'syz.1.254': attribute type 2 has an invalid length.
[   91.340876][ T4990]  ? show_regs_print_info+0x20/0x20
[   91.354005][ T4990]  ? load_image+0x400/0x400
[   91.358549][ T4990]  ? __lock_acquire+0x7d10/0x7d10
[   91.358991][ T4999] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.254'.
[   91.363606][ T4990]  should_fail+0x38c/0x4c0
[   91.377242][ T4990]  _copy_from_user+0x2e/0x170
[   91.382048][ T4990]  __copy_msghdr_from_user+0xc9/0x630
[   91.387444][ T4990]  ? verify_lock_unused+0x140/0x140
[   91.392795][ T4990]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[   91.398103][ T4990]  ___sys_sendmsg+0x19a/0x2e0
[   91.402874][ T4990]  ? __sys_sendmsg+0x2a0/0x2a0
[   91.407669][ T4990]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[   91.414497][ T4990]  __se_sys_sendmsg+0x1af/0x290
[   91.419475][ T4990]  ? __x64_sys_sendmsg+0x80/0x80
[   91.424697][ T4990]  ? lockdep_hardirqs_on+0x94/0x140
[   91.429940][ T4990]  do_syscall_64+0x4c/0xa0
[   91.434385][ T4990]  ? clear_bhb_loop+0x30/0x80
[   91.439117][ T4990]  ? clear_bhb_loop+0x30/0x80
[   91.443819][ T4990]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   91.449737][ T4990] RIP: 0033:0x7f6a005ac799
[   91.454175][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.473978][ T4990] RSP: 002b:00007f69fe806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.482801][ T4990] RAX: ffffffffffffffda RBX: 00007f6a00825fa0 RCX: 00007f6a005ac799
[   91.490773][ T4990] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[   91.498751][ T4990] RBP: 00007f69fe806090 R08: 0000000000000000 R09: 0000000000000000
[   91.506839][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   91.514937][ T4990] R13: 00007f6a00826038 R14: 00007f6a00825fa0 R15: 00007ffd8a5471b8
[   91.523063][ T4990]  </TASK>
[   92.440399][ T5033] delete_channel: no stack
[   92.501077][ T5033] delete_channel: no stack
[   92.884721][ T5030] netlink: 'syz.3.267': attribute type 10 has an invalid length.
[   93.278828][ T5053] FAULT_INJECTION: forcing a failure.
[   93.278828][ T5053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   93.400731][ T5053] CPU: 0 PID: 5053 Comm: syz.0.274 Not tainted syzkaller #0
[   93.408094][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   93.418520][ T5053] Call Trace:
[   93.421817][ T5053]  <TASK>
[   93.424763][ T5053]  dump_stack_lvl+0x188/0x250
[   93.429555][ T5053]  ? show_regs_print_info+0x20/0x20
[   93.434777][ T5053]  ? load_image+0x400/0x400
[   93.439538][ T5053]  ? __lock_acquire+0x7d10/0x7d10
[   93.444699][ T5053]  should_fail+0x38c/0x4c0
[   93.449268][ T5053]  _copy_from_user+0x2e/0x170
[   93.453980][ T5053]  iovec_from_user+0x142/0x370
[   93.458782][ T5053]  __import_iovec+0x70/0x490
[   93.463504][ T5053]  import_iovec+0x6f/0xa0
[   93.467932][ T5053]  ___sys_sendmsg+0x1fd/0x2e0
[   93.472649][ T5053]  ? __sys_sendmsg+0x2a0/0x2a0
[   93.477466][ T5053]  ? ktime_get_real_ts64+0x440/0x440
[   93.482809][ T5053]  __se_sys_sendmsg+0x1af/0x290
[   93.487911][ T5053]  ? __x64_sys_sendmsg+0x80/0x80
[   93.492872][ T5053]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[   93.499050][ T5053]  ? lockdep_hardirqs_on+0x94/0x140
[   93.504290][ T5053]  do_syscall_64+0x4c/0xa0
[   93.508826][ T5053]  ? clear_bhb_loop+0x30/0x80
[   93.513518][ T5053]  ? clear_bhb_loop+0x30/0x80
[   93.518224][ T5053]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   93.524144][ T5053] RIP: 0033:0x7f6a005ac799
[   93.528760][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.548845][ T5053] RSP: 002b:00007f69fe806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.557707][ T5053] RAX: ffffffffffffffda RBX: 00007f6a00825fa0 RCX: 00007f6a005ac799
[   93.566063][ T5053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[   93.574074][ T5053] RBP: 00007f69fe806090 R08: 0000000000000000 R09: 0000000000000000
[   93.582245][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   93.590417][ T5053] R13: 00007f6a00826038 R14: 00007f6a00825fa0 R15: 00007ffd8a5471b8
[   93.598593][ T5053]  </TASK>
[   93.626008][ T5062] netlink: 'syz.2.278': attribute type 27 has an invalid length.
[   94.273075][ T4243] wlan1: Trigger new scan to find an IBSS to join
[   94.430602][ T5096] __nla_validate_parse: 4 callbacks suppressed
[   94.430636][ T5096] netlink: 10 bytes leftover after parsing attributes in process `syz.0.291'.
[   94.493422][ T5096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.291'.
[   94.505355][ T5102] validate_nla: 2 callbacks suppressed
[   94.505374][ T5102] netlink: 'syz.2.293': attribute type 3 has an invalid length.
[   94.516574][ T5096] netlink: 132 bytes leftover after parsing attributes in process `syz.0.291'.
[   94.558185][ T5102] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.293'.
[   94.696520][ T5111] netlink: 'syz.1.295': attribute type 21 has an invalid length.
[   94.727355][ T5111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.295'.
[   94.767884][ T5113] netlink: 'syz.2.297': attribute type 21 has an invalid length.
[   94.804838][ T5113] netlink: 168 bytes leftover after parsing attributes in process `syz.2.297'.
[   95.146843][ T5133] netlink: 'syz.4.305': attribute type 10 has an invalid length.
[   95.177411][ T5133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.304076][ T5133] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.560055][ T5133] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   95.601684][ T5146] netlink: 'syz.1.309': attribute type 10 has an invalid length.
[   95.729739][ T5146] team0: Device hsr_slave_0 failed to register rx_handler
[   95.787387][ T5152] netlink: 'syz.3.308': attribute type 10 has an invalid length.
[   95.985753][ T5152] team0 (unregistering): Port device team_slave_0 removed
[   95.998007][ T5164] netlink: 'syz.2.317': attribute type 3 has an invalid length.
[   96.007062][ T5164] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.317'.
[   96.029589][ T5152] team0 (unregistering): Port device team_slave_1 removed
[   96.056992][ T5133] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.305'.
[   96.073444][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'.
[   96.093383][ T5162] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   96.105106][ T5162] team0: Device hsr_slave_0 failed to register rx_handler
[   96.144874][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.316'.
[   96.312684][ T5175] netlink: 'syz.3.320': attribute type 10 has an invalid length.
[   96.440918][ T5175] batman_adv: batadv0: Adding interface: netdevsim0
[   96.527251][ T5175] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.586295][ T5175] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   96.742590][ T5182] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   97.047992][ T5192] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[   97.116623][ T5192] openvswitch: netlink: Message has 1 unknown bytes.
[   97.487485][ T5198] FAULT_INJECTION: forcing a failure.
[   97.487485][ T5198] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   97.636477][ T5198] CPU: 0 PID: 5198 Comm: syz.2.329 Not tainted syzkaller #0
[   97.643845][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   97.654022][ T5198] Call Trace:
[   97.657443][ T5198]  <TASK>
[   97.660377][ T5198]  dump_stack_lvl+0x188/0x250
[   97.665068][ T5198]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[   97.671233][ T5198]  ? show_regs_print_info+0x20/0x20
[   97.676450][ T5198]  ? load_image+0x400/0x400
[   97.681160][ T5198]  should_fail+0x38c/0x4c0
[   97.685778][ T5198]  _copy_from_user+0x2e/0x170
[   97.690470][ T5198]  iovec_from_user+0x142/0x370
[   97.695260][ T5198]  __import_iovec+0x70/0x490
[   97.699886][ T5198]  import_iovec+0x6f/0xa0
[   97.704245][ T5198]  ___sys_sendmsg+0x1fd/0x2e0
[   97.708946][ T5198]  ? __sys_sendmsg+0x2a0/0x2a0
[   97.713721][ T5198]  ? rcu_nmi_exit+0x6f/0xf0
[   97.718265][ T5198]  ? __se_sys_sendmsg+0xc9/0x290
[   97.723229][ T5198]  __se_sys_sendmsg+0x1af/0x290
[   97.728217][ T5198]  ? __x64_sys_sendmsg+0x80/0x80
[   97.733196][ T5198]  ? syscall_enter_from_user_mode+0x2a/0x70
[   97.739120][ T5198]  do_syscall_64+0x4c/0xa0
[   97.743556][ T5198]  ? clear_bhb_loop+0x30/0x80
[   97.748246][ T5198]  ? clear_bhb_loop+0x30/0x80
[   97.753283][ T5198]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   97.759199][ T5198] RIP: 0033:0x7f5e8b48f799
[   97.763626][ T5198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.783662][ T5198] RSP: 002b:00007f5e896e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.792104][ T5198] RAX: ffffffffffffffda RBX: 00007f5e8b708fa0 RCX: 00007f5e8b48f799
[   97.800097][ T5198] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000006
[   97.808168][ T5198] RBP: 00007f5e896e9090 R08: 0000000000000000 R09: 0000000000000000
[   97.816327][ T5198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.824305][ T5198] R13: 00007f5e8b709038 R14: 00007f5e8b708fa0 R15: 00007ffde0db2f98
[   97.832556][ T5198]  </TASK>
[   98.266788][ T4262] wlan1: Trigger new scan to find an IBSS to join
[   98.359112][ T5225] openvswitch: netlink: Duplicate key (type 0).
[   98.382267][  T144] wlan1: Creating new IBSS network, BSSID 96:aa:30:25:f5:7a
[   98.606976][ T5230] device wlan0 entered promiscuous mode
[   98.627790][ T5236] sctp: [Deprecated]: syz.1.344 (pid 5236) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.627790][ T5236] Use struct sctp_sack_info instead
[   99.006238][ T5248] delete_channel: no stack
[   99.276096][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.288169][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.377060][ T5262] ref_ctr_offset mismatch. inode: 0x192 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[   99.494320][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.501741][ T5256] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.515303][ T5256] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.523033][ T5256] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.620791][ T5256] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   99.651715][ T5263] __nla_validate_parse: 16 callbacks suppressed
[   99.651733][ T5263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.351'.
[   99.884413][ T5277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.359'.
[  100.345599][ T5290] netlink: 180 bytes leftover after parsing attributes in process `syz.3.363'.
[  101.333731][ T5309] validate_nla: 8 callbacks suppressed
[  101.333782][ T5309] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[  101.414706][ T5309] netlink: 'syz.0.370': attribute type 3 has an invalid length.
[  101.462270][ T5309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.370'.
[  101.493737][ T5315] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.371'.
[  101.683588][ T5323] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[  101.708791][ T5323] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.375'.
[  101.771684][ T5329] netlink: 'syz.3.376': attribute type 13 has an invalid length.
[  101.804038][ T5329] netlink: 164 bytes leftover after parsing attributes in process `syz.3.376'.
[  101.851430][ T5329] syz_tun: refused to change device tx_queue_len
[  101.917503][ T5335] netlink: 'syz.3.376': attribute type 15 has an invalid length.
[  101.977436][ T5335] netlink: 'syz.3.376': attribute type 7 has an invalid length.
[  101.992583][ T5337] netlink: 'syz.0.380': attribute type 10 has an invalid length.
[  102.041100][ T5337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'.
[  102.045952][ T5342] netlink: 'syz.4.382': attribute type 3 has an invalid length.
[  102.089360][ T5342] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.382'.
[  102.099172][ T5337] bridge0: port 3(ipvlan1) entered blocking state
[  102.139103][ T5337] bridge0: port 3(ipvlan1) entered disabled state
[  102.196663][ T5337] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  102.230844][ T5341] netlink: 40 bytes leftover after parsing attributes in process `syz.4.382'.
[  102.283463][ T5341] device caif0 entered promiscuous mode
[  102.297166][ T5341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.567621][ T5355] FAULT_INJECTION: forcing a failure.
[  102.567621][ T5355] name failslab, interval 1, probability 0, space 0, times 0
[  102.570056][ T5353] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[  102.651010][ T5355] CPU: 0 PID: 5355 Comm: syz.4.385 Not tainted syzkaller #0
[  102.658444][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  102.668521][ T5355] Call Trace:
[  102.671999][ T5355]  <TASK>
[  102.674990][ T5355]  dump_stack_lvl+0x188/0x250
[  102.679705][ T5355]  ? show_regs_print_info+0x20/0x20
[  102.685388][ T5355]  ? load_image+0x400/0x400
[  102.689923][ T5355]  ? __might_sleep+0xf0/0xf0
[  102.694532][ T5355]  ? __lock_acquire+0x7d10/0x7d10
[  102.699583][ T5355]  should_fail+0x38c/0x4c0
[  102.704022][ T5355]  should_failslab+0x5/0x20
[  102.708927][ T5355]  slab_pre_alloc_hook+0x51/0xc0
[  102.713875][ T5355]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  102.720307][ T5355]  ? proc_alloc_inode+0x19/0xa0
[  102.725156][ T5355]  kmem_cache_alloc+0x3d/0x290
[  102.730001][ T5355]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  102.736429][ T5355]  proc_alloc_inode+0x19/0xa0
[  102.741096][ T5355]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  102.747467][ T5355]  new_inode_pseudo+0x5f/0x210
[  102.752225][ T5355]  new_inode+0x25/0x1c0
[  102.756365][ T5355]  ? __lock_acquire+0x7d10/0x7d10
[  102.761380][ T5355]  proc_pid_make_inode+0x20/0x1c0
[  102.766433][ T5355]  proc_pident_instantiate+0x69/0x2b0
[  102.771890][ T5355]  proc_pident_lookup+0x1c6/0x260
[  102.776921][ T5355]  __lookup_slow+0x29d/0x410
[  102.781506][ T5355]  ? lookup_one_len+0x2d0/0x2d0
[  102.786379][ T5355]  ? down_read+0x1aa/0x2e0
[  102.790788][ T5355]  lookup_slow+0x53/0x70
[  102.795122][ T5355]  walk_component+0x319/0x460
[  102.799816][ T5355]  link_path_walk+0x665/0xd70
[  102.804592][ T5355]  ? handle_lookup_down+0x130/0x130
[  102.809779][ T5355]  ? percpu_counter_add_batch+0x13b/0x160
[  102.815671][ T5355]  path_openat+0x28d/0x2fa0
[  102.820492][ T5355]  ? verify_lock_unused+0x140/0x140
[  102.825682][ T5355]  ? slab_post_alloc_hook+0x4c/0x380
[  102.830963][ T5355]  ? do_filp_open+0x410/0x410
[  102.835640][ T5355]  do_filp_open+0x1e2/0x410
[  102.840145][ T5355]  ? vfs_tmpfile+0x300/0x300
[  102.844731][ T5355]  ? noop_direct_IO+0x10/0x10
[  102.849402][ T5355]  ? _raw_spin_unlock+0x24/0x40
[  102.854241][ T5355]  ? alloc_fd+0x598/0x630
[  102.858564][ T5355]  do_sys_openat2+0x150/0x4b0
[  102.863229][ T5355]  ? __lock_acquire+0x7d10/0x7d10
[  102.868338][ T5355]  ? do_sys_open+0xe0/0xe0
[  102.872746][ T5355]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  102.878728][ T5355]  ? lock_chain_count+0x20/0x20
[  102.883572][ T5355]  ? vtime_user_exit+0x2c8/0x3e0
[  102.888589][ T5355]  __x64_sys_openat+0x135/0x160
[  102.893449][ T5355]  do_syscall_64+0x4c/0xa0
[  102.897854][ T5355]  ? clear_bhb_loop+0x30/0x80
[  102.902523][ T5355]  ? clear_bhb_loop+0x30/0x80
[  102.907339][ T5355]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  102.913295][ T5355] RIP: 0033:0x7f6b1f9cbfce
[  102.917709][ T5355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  102.937434][ T5355] RSP: 002b:00007f6b1dc64ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  102.945859][ T5355] RAX: ffffffffffffffda RBX: 00007f6b1dc656c0 RCX: 00007f6b1f9cbfce
[  102.953824][ T5355] RDX: 0000000000000002 RSI: 00007f6b1dc64f90 RDI: ffffffffffffff9c
[  102.961876][ T5355] RBP: 00007f6b1dc65090 R08: 0000000000000000 R09: 0000000000000000
[  102.970074][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.978089][ T5355] R13: 00007f6b1fc85038 R14: 00007f6b1fc84fa0 R15: 00007fff3835e4c8
[  102.986326][ T5355]  </TASK>
[  103.050796][ T5353] netlink: 'syz.3.386': attribute type 3 has an invalid length.
[  103.685451][ T5390] sctp: [Deprecated]: syz.4.400 (pid 5390) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.685451][ T5390] Use struct sctp_sack_info instead
[  104.211805][ T5405] team0 (unregistering): Port device team_slave_0 removed
[  106.192556][ T5405] team0 (unregistering): Port device team_slave_1 removed
[  106.237108][ T5405] team0 (unregistering): Port device bond0 removed
[  106.314723][ T5420] __nla_validate_parse: 7 callbacks suppressed
[  106.314743][ T5420] netlink: 152 bytes leftover after parsing attributes in process `syz.0.410'.
[  106.363222][ T5420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.404293][ T5429] validate_nla: 4 callbacks suppressed
[  106.404309][ T5429] netlink: 'syz.4.414': attribute type 10 has an invalid length.
[  106.492051][ T5429] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  106.578672][ T5435] netlink: 'syz.3.415': attribute type 1 has an invalid length.
[  106.601607][ T5438] netlink: 'syz.3.415': attribute type 10 has an invalid length.
[  106.613940][ T5435] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.415'.
[  106.793807][ T5446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.419'.
[  106.837215][ T5444] bond0: (slave geneve0): Error: Slave device does not support XDP
[  106.858425][ T5446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.419'.
[  106.869321][ T5447] netlink: 'syz.2.418': attribute type 10 has an invalid length.
[  106.880517][ T5448] netlink: 60 bytes leftover after parsing attributes in process `syz.4.419'.
[  106.906647][ T5446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.419'.
[  107.740683][ T5470] netlink: 'syz.2.431': attribute type 10 has an invalid length.
[  107.871983][ T5473] netlink: 'syz.1.432': attribute type 2 has an invalid length.
[  107.905574][ T5473] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.432'.
[  107.923749][ T5475] netlink: 'syz.2.443': attribute type 10 has an invalid length.
[  108.042796][ T5478] bond0: (slave geneve0): Error: Slave device does not support XDP
[  108.075080][ T5480] netlink: 'syz.4.433': attribute type 10 has an invalid length.
[  108.413053][ T5500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'.
[  108.442377][ T5500] device caif0 entered promiscuous mode
[  108.454512][ T5504] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  108.459134][ T5500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.564797][ T5506] netlink: 'syz.2.442': attribute type 3 has an invalid length.
[  108.604454][ T5506] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.442'.
[  108.674169][ T5510] netlink: 'syz.1.447': attribute type 10 has an invalid length.
[  109.060606][ T5520] bond0: (slave geneve0): Error: Slave device does not support XDP
[  109.354816][ T5525] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.454'.
[  109.500162][ T5548] device syzkaller0 entered promiscuous mode
[  110.954609][ T5599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.040423][ T5599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.084483][ T5599] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  111.958343][ T5635] validate_nla: 3 callbacks suppressed
[  111.958361][ T5635] netlink: 'syz.1.496': attribute type 10 has an invalid length.
[  112.762960][ T5674] netlink: 'syz.2.505': attribute type 2 has an invalid length.
[  112.853576][ T5674] __nla_validate_parse: 6 callbacks suppressed
[  112.853595][ T5674] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.505'.
[  112.929846][ T5679] Q'Y]cÊRݘOC‰ÿ: renamed from lo
[  113.096669][ T5674] device wlan0 left promiscuous mode
[  113.220680][ T5686] netlink: 'syz.3.510': attribute type 10 has an invalid length.
[  113.451607][ T5694] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.516'.
[  114.505538][ T5739] netlink: 'syz.1.530': attribute type 10 has an invalid length.
[  114.711277][ T5745] sctp: [Deprecated]: syz.0.533 (pid 5745) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.711277][ T5745] Use struct sctp_sack_info instead
[  115.299759][ T5756] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.535'.
[  115.594848][ T5769] netlink: 1 bytes leftover after parsing attributes in process `syz.0.541'.
[  115.668285][ T5769] netlink: 'syz.0.541': attribute type 11 has an invalid length.
[  115.709531][ T5769] netlink: 'syz.0.541': attribute type 10 has an invalid length.
[  115.756457][ T5769] team0: Device wlan1 is up. Set it down before adding it as a team port
[  116.131083][ T5788] netlink: 'syz.2.547': attribute type 29 has an invalid length.
[  116.223222][ T5788] netlink: 'syz.2.547': attribute type 29 has an invalid length.
[  116.286063][ T5800] sctp: [Deprecated]: syz.4.549 (pid 5800) Use of int in maxseg socket option.
[  116.286063][ T5800] Use struct sctp_assoc_value instead
[  116.308942][ T5793] netlink: 'syz.2.547': attribute type 29 has an invalid length.
[  116.482009][ T5801] netlink: 'syz.2.547': attribute type 29 has an invalid length.
[  116.519254][ T5807] device wlan1 entered promiscuous mode
[  117.337277][ T5841] netlink: 'syz.0.565': attribute type 1 has an invalid length.
[  117.345649][ T5841] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.565'.
[  117.628929][ T5846] Ÿë
: port 1(gretap0) entered blocking state
[  117.656445][ T5846] Ÿë
: port 1(gretap0) entered disabled state
[  117.771927][ T5846] device gretap0 entered promiscuous mode
[  118.039837][ T5860] netlink: 830 bytes leftover after parsing attributes in process `syz.1.571'.
[  119.045522][ T5878] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.582'.
[  119.259812][ T5891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'.
[  119.284096][ T5889] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.586'.
[  119.353646][ T5892] FAULT_INJECTION: forcing a failure.
[  119.353646][ T5892] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.381880][ T5891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'.
[  119.397612][ T5892] CPU: 1 PID: 5892 Comm: syz.3.588 Not tainted syzkaller #0
[  119.404948][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  119.415034][ T5892] Call Trace:
[  119.418356][ T5892]  <TASK>
[  119.421300][ T5892]  dump_stack_lvl+0x188/0x250
[  119.426007][ T5892]  ? show_regs_print_info+0x20/0x20
[  119.431235][ T5892]  ? load_image+0x400/0x400
[  119.435759][ T5892]  ? __lock_acquire+0x7d10/0x7d10
[  119.440815][ T5892]  should_fail+0x38c/0x4c0
[  119.445441][ T5892]  _copy_from_user+0x2e/0x170
[  119.450212][ T5892]  bpf_test_init+0x136/0x1b0
[  119.454819][ T5892]  bpf_prog_test_run_skb+0x181/0x1180
[  119.460202][ T5892]  ? lockdep_hardirqs_on+0x94/0x140
[  119.465413][ T5892]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  119.471581][ T5892]  ? cpu_online+0x60/0x60
[  119.475928][ T5892]  ? cpu_online+0x60/0x60
[  119.480279][ T5892]  bpf_prog_test_run+0x31e/0x390
[  119.485235][ T5892]  __sys_bpf+0x5a5/0x6f0
[  119.489493][ T5892]  ? bpf_link_show_fdinfo+0x380/0x380
[  119.494905][ T5892]  __x64_sys_bpf+0x78/0x90
[  119.499443][ T5892]  do_syscall_64+0x4c/0xa0
[  119.503882][ T5892]  ? clear_bhb_loop+0x30/0x80
[  119.508651][ T5892]  ? clear_bhb_loop+0x30/0x80
[  119.513413][ T5892]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.519421][ T5892] RIP: 0033:0x7fbbd36f2799
[  119.523860][ T5892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.543646][ T5892] RSP: 002b:00007fbbd194c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  119.552159][ T5892] RAX: ffffffffffffffda RBX: 00007fbbd396bfa0 RCX: 00007fbbd36f2799
[  119.560379][ T5892] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a
[  119.568369][ T5892] RBP: 00007fbbd194c090 R08: 0000000000000000 R09: 0000000000000000
[  119.576479][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.584471][ T5892] R13: 00007fbbd396c038 R14: 00007fbbd396bfa0 R15: 00007ffe3c2edb98
[  119.592475][ T5892]  </TASK>
[  119.597283][ T5895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'.
[  119.610631][ T5896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.587'.
[  119.837069][ T5908] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  119.932480][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'.
[  119.934593][ T5907] netlink: 'syz.2.593': attribute type 1 has an invalid length.
[  120.037156][ T5907] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.593'.
[  120.287829][ T5911] device syzkaller0 entered promiscuous mode
[  120.319389][ T5915] delete_channel: no stack
[  120.328680][ T5927] netlink: 'syz.1.601': attribute type 10 has an invalid length.
[  120.347455][ T5927] netlink: 2 bytes leftover after parsing attributes in process `syz.1.601'.
[  120.370427][ T5927] device bond0 entered promiscuous mode
[  120.387275][ T5927] device bond_slave_0 entered promiscuous mode
[  120.393633][ T5927] device bond_slave_1 entered promiscuous mode
[  120.412283][ T5927] device bridge0 entered promiscuous mode
[  120.444504][ T5927] device batadv_slave_0 entered promiscuous mode
[  120.462535][ T5927] bridge0: port 3(bond0) entered blocking state
[  120.479634][ T5927] bridge0: port 3(bond0) entered disabled state
[  120.673663][ T5939] netlink: 'syz.0.602': attribute type 11 has an invalid length.
[  121.260916][ T5957] device syzkaller0 entered promiscuous mode
[  121.323639][ T5971] tun0: tun_chr_ioctl cmd 1074025677
[  121.352461][ T5971] tun0: linktype set to 768
[  121.576603][ T5985] FAULT_INJECTION: forcing a failure.
[  121.576603][ T5985] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.643059][ T5985] CPU: 0 PID: 5985 Comm: syz.3.618 Not tainted syzkaller #0
[  121.650501][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.660693][ T5985] Call Trace:
[  121.664197][ T5985]  <TASK>
[  121.667343][ T5985]  dump_stack_lvl+0x188/0x250
[  121.672072][ T5985]  ? show_regs_print_info+0x20/0x20
[  121.677384][ T5985]  ? load_image+0x400/0x400
[  121.681911][ T5985]  ? __lock_acquire+0x7d10/0x7d10
[  121.686965][ T5985]  should_fail+0x38c/0x4c0
[  121.691625][ T5985]  _copy_from_user+0x2e/0x170
[  121.696335][ T5985]  iovec_from_user+0x142/0x370
[  121.701249][ T5985]  __import_iovec+0x70/0x490
[  121.705875][ T5985]  import_iovec+0x6f/0xa0
[  121.710246][ T5985]  ___sys_sendmsg+0x1fd/0x2e0
[  121.715039][ T5985]  ? __sys_sendmsg+0x2a0/0x2a0
[  121.719874][ T5985]  ? vfs_write+0x8b2/0xd60
[  121.724328][ T5985]  __se_sys_sendmsg+0x1af/0x290
[  121.729196][ T5985]  ? __x64_sys_sendmsg+0x80/0x80
[  121.734149][ T5985]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  121.740186][ T5985]  ? lockdep_hardirqs_on+0x94/0x140
[  121.745427][ T5985]  do_syscall_64+0x4c/0xa0
[  121.749870][ T5985]  ? clear_bhb_loop+0x30/0x80
[  121.754660][ T5985]  ? clear_bhb_loop+0x30/0x80
[  121.759366][ T5985]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.765286][ T5985] RIP: 0033:0x7fbbd36f2799
[  121.769729][ T5985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.789451][ T5985] RSP: 002b:00007fbbd194c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.797889][ T5985] RAX: ffffffffffffffda RBX: 00007fbbd396bfa0 RCX: 00007fbbd36f2799
[  121.805855][ T5985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  121.813900][ T5985] RBP: 00007fbbd194c090 R08: 0000000000000000 R09: 0000000000000000
[  121.821859][ T5985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.829922][ T5985] R13: 00007fbbd396c038 R14: 00007fbbd396bfa0 R15: 00007ffe3c2edb98
[  121.838265][ T5985]  </TASK>
[  121.874488][ T6006] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  121.892637][ T6002] netlink: 'syz.1.624': attribute type 10 has an invalid length.
[  122.002941][ T6002] team0: Device wg1 is of different type
[  122.090425][ T6004] netlink: 'syz.1.624': attribute type 21 has an invalid length.
[  122.246833][ T6019] netlink: 'syz.4.628': attribute type 10 has an invalid length.
[  122.256830][ T1432] wlan1: Trigger new scan to find an IBSS to join
[  122.557319][ T6026] netlink: 'syz.4.631': attribute type 9 has an invalid length.
[  123.088703][ T6032] __nla_validate_parse: 10 callbacks suppressed
[  123.088740][ T6032] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.635'.
[  123.172441][ T6032] netlink: 18146 bytes leftover after parsing attributes in process `syz.0.635'.
[  123.311011][ T6042] netlink: 'syz.1.637': attribute type 25 has an invalid length.
[  123.329353][ T6033] delete_channel: no stack
[  123.332294][ T6042] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.637'.
[  123.502716][ T6048] netlink: 'syz.3.640': attribute type 10 has an invalid length.
[  124.074717][ T6081] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.653'.
[  124.146477][ T6081] netlink: 18146 bytes leftover after parsing attributes in process `syz.4.653'.
[  124.259118][    T9] wlan1: Trigger new scan to find an IBSS to join
[  124.320180][ T6092] netlink: 'syz.4.656': attribute type 10 has an invalid length.
[  124.450109][ T6098] netlink: 'syz.0.659': attribute type 2 has an invalid length.
[  124.486692][ T6098] netlink: 'syz.0.659': attribute type 8 has an invalid length.
[  124.527741][ T6098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.659'.
[  124.981573][ T6117] netlink: 'syz.4.665': attribute type 3 has an invalid length.
[  125.026482][ T6117] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.665'.
[  125.917082][ T6146] tun0: tun_chr_ioctl cmd 1074025677
[  125.929677][ T6146] tun0: linktype set to 768
[  125.944560][ T6145] netlink: 'syz.3.672': attribute type 10 has an invalid length.
[  126.256630][  T144] wlan1: Trigger new scan to find an IBSS to join
[  126.843888][ T6164] netlink: 152 bytes leftover after parsing attributes in process `syz.1.676'.
[  128.257210][ T6185] wlan1: Creating new IBSS network, BSSID 16:cb:f7:78:3e:b7
[  128.258343][ T6187] wlan1: Trigger new scan to find an IBSS to join
[  129.089065][ T6221] netlink: 144 bytes leftover after parsing attributes in process `syz.3.687'.
[  129.222424][ T6231] netlink: 152 bytes leftover after parsing attributes in process `syz.4.689'.
[  129.437152][ T6234] netlink: 'syz.3.690': attribute type 10 has an invalid length.
[  130.720501][ T6266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.700'.
[  131.105188][ T6275] netlink: 'syz.4.702': attribute type 10 has an invalid length.
[  131.217503][ T6131] wlan1: Trigger new scan to find an IBSS to join
[  131.302805][ T6185] wlan1: Creating new IBSS network, BSSID 1e:d9:62:66:30:5c
[  131.319190][ T6272] netlink: 144 bytes leftover after parsing attributes in process `syz.2.701'.
[  131.365961][ T6286] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.706'.
[  131.602681][ T6293] netlink: 'syz.1.710': attribute type 29 has an invalid length.
[  131.618409][ T6293] netlink: 'syz.1.710': attribute type 29 has an invalid length.
[  131.658093][ T6293] netlink: 'syz.1.710': attribute type 29 has an invalid length.
[  132.673608][ T6317] netlink: 184948 bytes leftover after parsing attributes in process `syz.2.716'.
[  132.876001][ T6325] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.719'.
[  132.901046][ T6325] openvswitch: netlink: Duplicate key (type 0).
[  132.923625][ T6323] device wlan0 entered promiscuous mode
[  133.144776][ T6333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  133.228479][ T1426] ieee802154 phy0 wpan0: encryption failed: -22
[  133.235521][ T1426] ieee802154 phy1 wpan1: encryption failed: -22
[  133.342665][ T6335] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.723'.
[  133.809760][ T6342] netlink: 144 bytes leftover after parsing attributes in process `syz.4.720'.
[  133.864885][ T6337] netlink: 'syz.2.725': attribute type 21 has an invalid length.
[  133.890627][ T6337] netlink: 'syz.2.725': attribute type 6 has an invalid length.
[  133.959713][ T6337] netlink: 132 bytes leftover after parsing attributes in process `syz.2.725'.
[  134.348757][ T6353] ref_ctr_offset mismatch. inode: 0x2d4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  134.761165][ T6370] netlink: 'syz.3.737': attribute type 153 has an invalid length.
[  134.783975][ T6370] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.737'.
[  135.642062][ T6388] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.741'.
[  136.325955][ T6412] netlink: 'syz.1.748': attribute type 10 has an invalid length.
[  139.133408][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.140904][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.202453][ T6409] netlink: 'syz.4.749': attribute type 10 has an invalid length.
[  139.227063][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.749'.
[  139.267336][ T6409] bridge0: port 3(ipvlan1) entered blocking state
[  139.274492][ T6409] bridge0: port 3(ipvlan1) entered disabled state
[  139.305890][ T6409] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  139.650115][ T6436] FAULT_INJECTION: forcing a failure.
[  139.650115][ T6436] name failslab, interval 1, probability 0, space 0, times 0
[  139.772992][ T6436] CPU: 0 PID: 6436 Comm: syz.4.758 Not tainted syzkaller #0
[  139.780348][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  139.790523][ T6436] Call Trace:
[  139.793831][ T6436]  <TASK>
[  139.796879][ T6436]  dump_stack_lvl+0x188/0x250
[  139.801580][ T6436]  ? show_regs_print_info+0x20/0x20
[  139.806812][ T6436]  ? load_image+0x400/0x400
[  139.811327][ T6436]  ? __might_sleep+0xf0/0xf0
[  139.815935][ T6436]  ? __lock_acquire+0x7d10/0x7d10
[  139.820976][ T6436]  ? lockdep_init_map_type+0x98/0x900
[  139.826373][ T6436]  should_fail+0x38c/0x4c0
[  139.830808][ T6436]  should_failslab+0x5/0x20
[  139.835433][ T6436]  slab_pre_alloc_hook+0x51/0xc0
[  139.840434][ T6436]  ? security_inode_alloc+0x30/0x110
[  139.845734][ T6436]  kmem_cache_alloc+0x3d/0x290
[  139.850639][ T6436]  security_inode_alloc+0x30/0x110
[  139.855777][ T6436]  inode_init_always+0x8f4/0xcb0
[  139.860741][ T6436]  ? memset+0x1e/0x40
[  139.864745][ T6436]  new_inode_pseudo+0x8e/0x210
[  139.869614][ T6436]  new_inode+0x25/0x1c0
[  139.873779][ T6436]  ? __lock_acquire+0x7d10/0x7d10
[  139.878830][ T6436]  proc_pid_make_inode+0x20/0x1c0
[  139.883875][ T6436]  proc_pident_instantiate+0x69/0x2b0
[  139.889262][ T6436]  proc_pident_lookup+0x1c6/0x260
[  139.894308][ T6436]  __lookup_slow+0x29d/0x410
[  139.898936][ T6436]  ? lookup_one_len+0x2d0/0x2d0
[  139.903835][ T6436]  ? down_read+0x1aa/0x2e0
[  139.908284][ T6436]  lookup_slow+0x53/0x70
[  139.912569][ T6436]  walk_component+0x319/0x460
[  139.917346][ T6436]  link_path_walk+0x665/0xd70
[  139.922257][ T6436]  ? handle_lookup_down+0x130/0x130
[  139.927556][ T6436]  ? percpu_counter_add_batch+0x13b/0x160
[  139.933309][ T6436]  path_openat+0x28d/0x2fa0
[  139.937930][ T6436]  ? perf_trace_lock+0xe4/0x390
[  139.942781][ T6436]  ? do_filp_open+0x410/0x410
[  139.947449][ T6436]  ? perf_trace_lock+0xe4/0x390
[  139.952307][ T6436]  ? trace_event_raw_event_lock+0x270/0x270
[  139.958207][ T6436]  do_filp_open+0x1e2/0x410
[  139.962718][ T6436]  ? vfs_tmpfile+0x300/0x300
[  139.967308][ T6436]  ? noop_direct_IO+0x10/0x10
[  139.971983][ T6436]  ? _raw_spin_unlock+0x24/0x40
[  139.976846][ T6436]  ? alloc_fd+0x598/0x630
[  139.981408][ T6436]  do_sys_openat2+0x150/0x4b0
[  139.986126][ T6436]  ? __lock_acquire+0x7d10/0x7d10
[  139.991268][ T6436]  ? do_sys_open+0xe0/0xe0
[  139.995685][ T6436]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  140.001661][ T6436]  ? lock_chain_count+0x20/0x20
[  140.006520][ T6436]  ? vtime_user_exit+0x2c8/0x3e0
[  140.011504][ T6436]  __x64_sys_openat+0x135/0x160
[  140.016357][ T6436]  do_syscall_64+0x4c/0xa0
[  140.020868][ T6436]  ? clear_bhb_loop+0x30/0x80
[  140.025534][ T6436]  ? clear_bhb_loop+0x30/0x80
[  140.030253][ T6436]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.036141][ T6436] RIP: 0033:0x7f6b1f9cbfce
[  140.040690][ T6436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.060376][ T6436] RSP: 002b:00007f6b1dc64ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  140.068806][ T6436] RAX: ffffffffffffffda RBX: 00007f6b1dc656c0 RCX: 00007f6b1f9cbfce
[  140.076859][ T6436] RDX: 0000000000000002 RSI: 00007f6b1dc64f90 RDI: ffffffffffffff9c
[  140.084869][ T6436] RBP: 00007f6b1dc65090 R08: 0000000000000000 R09: 0000000000000000
[  140.092917][ T6436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.100882][ T6436] R13: 00007f6b1fc85038 R14: 00007f6b1fc84fa0 R15: 00007fff3835e4c8
[  140.108881][ T6436]  </TASK>
[  140.169788][ T6454] netlink: 'syz.0.763': attribute type 153 has an invalid length.
[  140.183514][ T6454] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.763'.
[  140.373892][ T6459] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.765'.
[  141.063373][ T6475] bond0: (slave geneve0): Error: Slave device does not support XDP
[  141.117361][ T6483] netlink: 'syz.3.770': attribute type 10 has an invalid length.
[  141.247084][ T6487] netlink: 'syz.2.768': attribute type 10 has an invalid length.
[  141.310626][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.320077][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.509301][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.516944][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.526987][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.534810][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.583994][ T6487] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  141.638142][ T6501] netlink: 'syz.3.776': attribute type 10 has an invalid length.
[  141.930909][ T6510] netlink: 'syz.4.778': attribute type 21 has an invalid length.
[  141.966507][ T6510] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.778'.
[  142.332326][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.654050][ T6522] netlink: 'syz.2.783': attribute type 153 has an invalid length.
[  142.683275][ T6522] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.783'.
[  142.934991][ T6534] netlink: 1059 bytes leftover after parsing attributes in process `syz.3.788'.
[  145.403082][ T6570] netlink: 'syz.3.798': attribute type 3 has an invalid length.
[  145.444034][ T6570] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.798'.
[  145.615939][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.847724][ T6585] netlink: 'syz.2.803': attribute type 10 has an invalid length.
[  146.249514][ T6587] netlink: 'syz.3.804': attribute type 9 has an invalid length.
[  146.273131][ T6587] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.804'.
[  146.411742][ T6590] netlink: 'syz.1.805': attribute type 21 has an invalid length.
[  146.478562][ T6590] netlink: 'syz.1.805': attribute type 6 has an invalid length.
[  146.518049][ T6590] netlink: 132 bytes leftover after parsing attributes in process `syz.1.805'.
[  147.994041][ T6633] netlink: 'syz.3.818': attribute type 10 has an invalid length.
[  148.554876][ T6652] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  148.757264][ T6665] netlink: 'syz.0.828': attribute type 11 has an invalid length.
[  148.765555][ T6665] netlink: 140 bytes leftover after parsing attributes in process `syz.0.828'.
[  149.005412][ T6671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  149.084165][ T6671] tap0: tun_chr_ioctl cmd 21731
[  149.354444][ T6681] netlink: 'syz.1.834': attribute type 10 has an invalid length.
[  150.046868][ T6718] netlink: 48 bytes leftover after parsing attributes in process `syz.4.848'.
[  150.388585][ T6729] netlink: 'syz.3.851': attribute type 10 has an invalid length.
[  150.436574][ T6729] netlink: 55 bytes leftover after parsing attributes in process `syz.3.851'.
[  151.909817][ T6768] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.862'.
[  152.395538][ T6776] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.864'.
[  152.696537][ T6780] netlink: 'syz.1.867': attribute type 1 has an invalid length.
[  153.092067][ T6780] netlink: 'syz.1.867': attribute type 10 has an invalid length.
[  153.457938][ T6792] netlink: 'syz.0.871': attribute type 9 has an invalid length.
[  153.487129][ T6792] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.871'.
[  154.219365][ T6812] device syzkaller0 left promiscuous mode
[  155.036596][ T6847] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.890'.
[  155.065404][ T6847] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  155.260020][ T6850] netlink: 'syz.3.899': attribute type 10 has an invalid length.
[  155.297999][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.405749][ T6853] netlink: 'syz.2.891': attribute type 9 has an invalid length.
[  155.425192][ T6853] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.891'.
[  155.464575][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.629949][ T6850] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  157.852774][ T6926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.916'.
[  158.217451][ T6945] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[  158.256481][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'.
[  159.130553][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  160.403118][ T7008] tun0: tun_chr_ioctl cmd 1074025677
[  160.414608][ T7008] tun0: linktype set to 768
[  160.673606][ T7014] netlink: 'syz.4.947': attribute type 12 has an invalid length.
[  160.719079][ T7014] netlink: 104 bytes leftover after parsing attributes in process `syz.4.947'.
[  161.519571][ T7035] netlink: 'syz.3.953': attribute type 17 has an invalid length.
[  161.575647][ T7035] netlink: 'syz.3.953': attribute type 16 has an invalid length.
[  161.615094][ T7035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.953'.
[  162.447753][ T7042] netlink: 'syz.1.954': attribute type 10 has an invalid length.
[  162.482480][ T7048] netlink: 'syz.2.958': attribute type 11 has an invalid length.
[  162.527400][ T7048] netlink: 148 bytes leftover after parsing attributes in process `syz.2.958'.
[  163.204746][ T7082] netlink: 'syz.3.971': attribute type 1 has an invalid length.
[  163.217141][ T7082] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.971'.
[  163.756527][ T7090] pimreg: tun_chr_ioctl cmd 1074025677
[  163.762527][ T7090] pimreg: linktype set to 805
[  164.058148][ T7098] netlink: 'syz.3.975': attribute type 6 has an invalid length.
[  164.123040][ T7097] netlink: 'syz.4.976': attribute type 1 has an invalid length.
[  164.169341][ T7097] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.976'.
[  167.550533][ T7123] netlink: 830 bytes leftover after parsing attributes in process `syz.2.983'.
[  167.551381][ T7118] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  167.656943][ T7118] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  167.712998][ T7118] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  167.949205][ T7144] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.991'.
[  168.065254][ T7147] netlink: 'syz.2.993': attribute type 21 has an invalid length.
[  168.093947][ T7147] netlink: 156 bytes leftover after parsing attributes in process `syz.2.993'.
[  168.163779][ T7147] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  168.190696][ T7147] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.993'.
[  168.273664][ T7162] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.997'.
[  168.348584][ T7162] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.997'.
[  169.003290][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1005'.
[  169.027448][ T7183] FAULT_INJECTION: forcing a failure.
[  169.027448][ T7183] name failslab, interval 1, probability 0, space 0, times 0
[  169.064099][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1005'.
[  169.112086][ T7183] CPU: 1 PID: 7183 Comm: syz.3.1004 Not tainted syzkaller #0
[  169.114169][ T7185] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1005'.
[  169.119514][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  169.119531][ T7183] Call Trace:
[  169.119540][ T7183]  <TASK>
[  169.119548][ T7183]  dump_stack_lvl+0x188/0x250
[  169.119576][ T7183]  ? show_regs_print_info+0x20/0x20
[  169.119595][ T7183]  ? load_image+0x400/0x400
[  169.119611][ T7183]  ? __lock_acquire+0x7d10/0x7d10
[  169.119636][ T7183]  should_fail+0x38c/0x4c0
[  169.119659][ T7183]  should_failslab+0x5/0x20
[  169.119674][ T7183]  slab_pre_alloc_hook+0x51/0xc0
[  169.119692][ T7183]  __kmalloc+0x6b/0x330
[  169.119705][ T7183]  ? sk_prot_alloc+0xe7/0x210
[  169.119727][ T7183]  sk_prot_alloc+0xe7/0x210
[  169.119741][ T7183]  ? sk_alloc+0x1d/0x310
[  169.154956][ T7189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1005'.
[  169.155073][ T7183]  sk_alloc+0x2f/0x310
[  169.209443][ T7183]  bpf_prog_test_run_skb+0x240/0x1180
[  169.214930][ T7183]  ? __fget_files+0x40f/0x480
[  169.219632][ T7183]  ? cpu_online+0x60/0x60
[  169.223980][ T7183]  bpf_prog_test_run+0x31e/0x390
[  169.228934][ T7183]  __sys_bpf+0x5a5/0x6f0
[  169.233188][ T7183]  ? bpf_link_show_fdinfo+0x380/0x380
[  169.238655][ T7183]  ? rcu_nmi_exit+0x6f/0xf0
[  169.243181][ T7183]  ? vtime_user_exit+0x2c8/0x3e0
[  169.248135][ T7183]  __x64_sys_bpf+0x78/0x90
[  169.252566][ T7183]  do_syscall_64+0x4c/0xa0
[  169.256982][ T7183]  ? clear_bhb_loop+0x30/0x80
[  169.261661][ T7183]  ? clear_bhb_loop+0x30/0x80
[  169.266346][ T7183]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  169.272337][ T7183] RIP: 0033:0x7fbbd36f2799
[  169.276765][ T7183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.296475][ T7183] RSP: 002b:00007fbbd194c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  169.304922][ T7183] RAX: ffffffffffffffda RBX: 00007fbbd396bfa0 RCX: 00007fbbd36f2799
[  169.312921][ T7183] RDX: 0000000000000050 RSI: 00002000000007c0 RDI: 000000000000000a
[  169.321009][ T7183] RBP: 00007fbbd194c090 R08: 0000000000000000 R09: 0000000000000000
[  169.328998][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.337072][ T7183] R13: 00007fbbd396c038 R14: 00007fbbd396bfa0 R15: 00007ffe3c2edb98
[  169.345169][ T7183]  </TASK>
[  169.410387][ T7192] netlink: 'syz.4.1008': attribute type 3 has an invalid length.
[  169.463846][ T7195] device syzkaller0 entered promiscuous mode
[  169.495794][ T7192] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1008'.
[  169.578192][ T7201] netlink: 'syz.2.1009': attribute type 10 has an invalid length.
[  170.029124][ T7217] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1014'.
[  170.148174][ T7223] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  170.188727][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  170.935584][ T7238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1023'.
[  171.279699][ T7255] netlink: 'syz.0.1025': attribute type 21 has an invalid length.
[  171.426399][ T7255] netlink: 'syz.0.1025': attribute type 6 has an invalid length.
[  171.537538][ T7253] bridge: RTM_NEWNEIGH with invalid state 0x5
[  172.330809][ T7271] netlink: 'syz.0.1035': attribute type 10 has an invalid length.
[  173.194164][ T7302] netlink: 'syz.4.1044': attribute type 4 has an invalid length.
[  174.113248][ T7303] delete_channel: no stack
[  174.422074][ T7327] __nla_validate_parse: 11 callbacks suppressed
[  174.422095][ T7327] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.1053'.
[  174.480948][ T7327] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.1053'.
[  174.501205][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1053'.
[  174.723835][ T7337] netlink: 'syz.4.1056': attribute type 3 has an invalid length.
[  174.793758][ T7337] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1056'.
[  174.817220][ T7339] netlink: 'syz.2.1058': attribute type 46 has an invalid length.
[  174.870523][ T7339] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1058'.
[  176.278163][   T23] Bluetooth: hci0: command 0x0406 tx timeout
[  176.295045][   T23] Bluetooth: hci1: command 0x0406 tx timeout
[  176.302748][   T23] Bluetooth: hci4: command 0x0406 tx timeout
[  176.312724][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  176.334778][   T23] Bluetooth: hci3: command 0x0406 tx timeout
[  176.476615][ T7410] netlink: 'syz.4.1082': attribute type 10 has an invalid length.
[  176.740809][ T7414] FAULT_INJECTION: forcing a failure.
[  176.740809][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  176.784757][ T7414] CPU: 0 PID: 7414 Comm: syz.4.1084 Not tainted syzkaller #0
[  176.792593][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  176.802677][ T7414] Call Trace:
[  176.805984][ T7414]  <TASK>
[  176.808927][ T7414]  dump_stack_lvl+0x188/0x250
[  176.813627][ T7414]  ? show_regs_print_info+0x20/0x20
[  176.818850][ T7414]  ? load_image+0x400/0x400
[  176.823373][ T7414]  ? __lock_acquire+0x7d10/0x7d10
[  176.828543][ T7414]  should_fail+0x38c/0x4c0
[  176.832999][ T7414]  _copy_from_user+0x2e/0x170
[  176.837706][ T7414]  __sys_bpf+0x26d/0x6f0
[  176.842049][ T7414]  ? bpf_link_show_fdinfo+0x380/0x380
[  176.847445][ T7414]  __x64_sys_bpf+0x78/0x90
[  176.851884][ T7414]  do_syscall_64+0x4c/0xa0
[  176.856573][ T7414]  ? clear_bhb_loop+0x30/0x80
[  176.861691][ T7414]  ? clear_bhb_loop+0x30/0x80
[  176.866513][ T7414]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.872435][ T7414] RIP: 0033:0x7f6b1fa0b799
[  176.876869][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.896607][ T7414] RSP: 002b:00007f6b1dc65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  176.905136][ T7414] RAX: ffffffffffffffda RBX: 00007f6b1fc84fa0 RCX: 00007f6b1fa0b799
[  176.913149][ T7414] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  176.921407][ T7414] RBP: 00007f6b1dc65090 R08: 0000000000000000 R09: 0000000000000000
[  176.929400][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.937395][ T7414] R13: 00007f6b1fc85038 R14: 00007f6b1fc84fa0 R15: 00007fff3835e4c8
[  176.945579][ T7414]  </TASK>
[  177.337216][ T7422] tc_dump_action: action bad kind
[  177.363838][ T7424] netlink: 'syz.3.1089': attribute type 3 has an invalid length.
[  177.443457][ T7424] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1089'.
[  177.594611][ T7437] netlink: 'syz.3.1094': attribute type 10 has an invalid length.
[  178.888110][ T7478] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  178.895891][ T7478] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1109'.
[  179.222443][ T7501] FAULT_INJECTION: forcing a failure.
[  179.222443][ T7501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.265180][ T7501] CPU: 0 PID: 7501 Comm: syz.0.1113 Not tainted syzkaller #0
[  179.273040][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  179.283259][ T7501] Call Trace:
[  179.286556][ T7501]  <TASK>
[  179.289501][ T7501]  dump_stack_lvl+0x188/0x250
[  179.294191][ T7501]  ? show_regs_print_info+0x20/0x20
[  179.299415][ T7501]  ? load_image+0x400/0x400
[  179.303910][ T7501]  ? __lock_acquire+0x7d10/0x7d10
[  179.308929][ T7501]  ? vfs_write+0x8b2/0xd60
[  179.313424][ T7501]  should_fail+0x38c/0x4c0
[  179.317851][ T7501]  _copy_from_user+0x2e/0x170
[  179.322544][ T7501]  __sys_bpf+0x26d/0x6f0
[  179.326799][ T7501]  ? bpf_link_show_fdinfo+0x380/0x380
[  179.332179][ T7501]  __x64_sys_bpf+0x78/0x90
[  179.336582][ T7501]  do_syscall_64+0x4c/0xa0
[  179.340985][ T7501]  ? clear_bhb_loop+0x30/0x80
[  179.345648][ T7501]  ? clear_bhb_loop+0x30/0x80
[  179.350318][ T7501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.356374][ T7501] RIP: 0033:0x7f6a005ac799
[  179.360805][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.380576][ T7501] RSP: 002b:00007f69fe7e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  179.388988][ T7501] RAX: ffffffffffffffda RBX: 00007f6a00826090 RCX: 00007f6a005ac799
[  179.397128][ T7501] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002
[  179.405262][ T7501] RBP: 00007f69fe7e5090 R08: 0000000000000000 R09: 0000000000000000
[  179.413225][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.421293][ T7501] R13: 00007f6a00826128 R14: 00007f6a00826090 R15: 00007ffd8a5471b8
[  179.429290][ T7501]  </TASK>
[  179.942688][ T7521] netlink: 'syz.3.1120': attribute type 10 has an invalid length.
[  180.554234][ T7538] FAULT_INJECTION: forcing a failure.
[  180.554234][ T7538] name failslab, interval 1, probability 0, space 0, times 0
[  180.576506][ T7538] CPU: 1 PID: 7538 Comm: syz.2.1130 Not tainted syzkaller #0
[  180.583975][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  180.594053][ T7538] Call Trace:
[  180.597438][ T7538]  <TASK>
[  180.600492][ T7538]  dump_stack_lvl+0x188/0x250
[  180.605186][ T7538]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  180.611460][ T7538]  ? show_regs_print_info+0x20/0x20
[  180.616694][ T7538]  ? load_image+0x400/0x400
[  180.621228][ T7538]  should_fail+0x38c/0x4c0
[  180.625656][ T7538]  should_failslab+0x5/0x20
[  180.630167][ T7538]  slab_pre_alloc_hook+0x51/0xc0
[  180.635396][ T7538]  __kmalloc_node_track_caller+0x68/0x3a0
[  180.641146][ T7538]  ? netlink_sendmsg+0x654/0xbe0
[  180.646114][ T7538]  ? kmem_cache_alloc_node+0x162/0x2d0
[  180.651729][ T7538]  ? __alloc_skb+0xf4/0x750
[  180.656256][ T7538]  ? netlink_sendmsg+0x654/0xbe0
[  180.661218][ T7538]  __alloc_skb+0x22c/0x750
[  180.665754][ T7538]  netlink_sendmsg+0x654/0xbe0
[  180.670543][ T7538]  ? netlink_getsockopt+0x570/0x570
[  180.675761][ T7538]  ? aa_sock_msg_perm+0x94/0x150
[  180.680721][ T7538]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  180.686021][ T7538]  ? security_socket_sendmsg+0x7c/0xa0
[  180.691505][ T7538]  ? netlink_getsockopt+0x570/0x570
[  180.696821][ T7538]  ____sys_sendmsg+0x5b7/0x8f0
[  180.701708][ T7538]  ? __sys_sendmsg_sock+0x30/0x30
[  180.706763][ T7538]  ? import_iovec+0x6f/0xa0
[  180.711293][ T7538]  ___sys_sendmsg+0x236/0x2e0
[  180.716000][ T7538]  ? __sys_sendmsg+0x2a0/0x2a0
[  180.720794][ T7538]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  180.726557][ T7538]  __se_sys_sendmsg+0x1af/0x290
[  180.731430][ T7538]  ? __x64_sys_sendmsg+0x80/0x80
[  180.736513][ T7538]  ? syscall_enter_from_user_mode+0x2a/0x70
[  180.742515][ T7538]  do_syscall_64+0x4c/0xa0
[  180.746952][ T7538]  ? clear_bhb_loop+0x30/0x80
[  180.751648][ T7538]  ? clear_bhb_loop+0x30/0x80
[  180.756344][ T7538]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  180.762332][ T7538] RIP: 0033:0x7f5e8b48f799
[  180.766739][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.786443][ T7538] RSP: 002b:00007f5e896e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.795058][ T7538] RAX: ffffffffffffffda RBX: 00007f5e8b708fa0 RCX: 00007f5e8b48f799
[  180.803022][ T7538] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000006
[  180.810979][ T7538] RBP: 00007f5e896e9090 R08: 0000000000000000 R09: 0000000000000000
[  180.818933][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.826890][ T7538] R13: 00007f5e8b709038 R14: 00007f5e8b708fa0 R15: 00007ffde0db2f98
[  180.834870][ T7538]  </TASK>
[  180.923990][ T7543] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1132'.
[  181.091217][ T7548] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1132'.
[  181.388251][ T7565] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1139'.
[  181.436892][ T7569] netlink: 'syz.4.1138': attribute type 10 has an invalid length.
[  181.452772][ T7565] openvswitch: netlink: Duplicate key (type 0).
[  181.513952][ T7573] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1138'.
[  181.665047][ T7581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  182.265213][ T7599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1153'.
[  182.571373][ T7604] netlink: 'syz.2.1153': attribute type 39 has an invalid length.
[  182.853038][ T7613] ref_ctr_offset mismatch. inode: 0x4fa offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  182.922786][ T7618] netlink: 'syz.4.1160': attribute type 10 has an invalid length.
[  183.087074][ T7621] netlink: 'syz.0.1159': attribute type 10 has an invalid length.
[  183.152287][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.160103][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.345596][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.352924][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.360448][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.367658][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.443935][ T7621] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  183.947459][ T7649] netlink: 'syz.3.1169': attribute type 3 has an invalid length.
[  184.022814][ T7649] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1169'.
[  184.090232][ T7655] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1170'.
[  184.182607][ T7657] netlink: 'syz.2.1172': attribute type 9 has an invalid length.
[  184.224893][ T7657] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1172'.
[  184.382247][ T7655] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1170'.
[  184.506402][ T7657] netlink: 'syz.2.1172': attribute type 29 has an invalid length.
[  184.589633][ T7657] netlink: 'syz.2.1172': attribute type 29 has an invalid length.
[  184.923016][ T7663] netlink: 'syz.2.1172': attribute type 29 has an invalid length.
[  187.114815][ T7675] FAULT_INJECTION: forcing a failure.
[  187.114815][ T7675] name failslab, interval 1, probability 0, space 0, times 0
[  187.188529][ T7675] CPU: 1 PID: 7675 Comm: syz.4.1178 Not tainted syzkaller #0
[  187.195956][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  187.206036][ T7675] Call Trace:
[  187.209339][ T7675]  <TASK>
[  187.212284][ T7675]  dump_stack_lvl+0x188/0x250
[  187.216980][ T7675]  ? show_regs_print_info+0x20/0x20
[  187.222367][ T7675]  ? load_image+0x400/0x400
[  187.226881][ T7675]  ? __might_sleep+0xf0/0xf0
[  187.231470][ T7675]  ? __lock_acquire+0x7d10/0x7d10
[  187.236503][ T7675]  should_fail+0x38c/0x4c0
[  187.240918][ T7675]  should_failslab+0x5/0x20
[  187.245410][ T7675]  slab_pre_alloc_hook+0x51/0xc0
[  187.250341][ T7675]  ? __d_alloc+0x2a/0x6f0
[  187.254756][ T7675]  kmem_cache_alloc+0x3d/0x290
[  187.259516][ T7675]  __d_alloc+0x2a/0x6f0
[  187.263665][ T7675]  d_alloc_parallel+0x7b/0x1330
[  187.268648][ T7675]  ? __d_lookup+0x6a6/0x760
[  187.273166][ T7675]  path_openat+0x95e/0x2fa0
[  187.277677][ T7675]  ? verify_lock_unused+0x140/0x140
[  187.282866][ T7675]  ? slab_post_alloc_hook+0x4c/0x380
[  187.288143][ T7675]  ? do_filp_open+0x410/0x410
[  187.292830][ T7675]  do_filp_open+0x1e2/0x410
[  187.297324][ T7675]  ? vfs_tmpfile+0x300/0x300
[  187.301909][ T7675]  ? noop_direct_IO+0x10/0x10
[  187.306580][ T7675]  ? _raw_spin_unlock+0x24/0x40
[  187.311429][ T7675]  ? alloc_fd+0x598/0x630
[  187.315752][ T7675]  do_sys_openat2+0x150/0x4b0
[  187.320522][ T7675]  ? __lock_acquire+0x7d10/0x7d10
[  187.325555][ T7675]  ? do_sys_open+0xe0/0xe0
[  187.329963][ T7675]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  187.335941][ T7675]  ? lock_chain_count+0x20/0x20
[  187.340779][ T7675]  ? vtime_user_exit+0x2c8/0x3e0
[  187.345713][ T7675]  __x64_sys_openat+0x135/0x160
[  187.350586][ T7675]  do_syscall_64+0x4c/0xa0
[  187.354993][ T7675]  ? clear_bhb_loop+0x30/0x80
[  187.359670][ T7675]  ? clear_bhb_loop+0x30/0x80
[  187.364343][ T7675]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  187.370221][ T7675] RIP: 0033:0x7f6b1f9cbfce
[  187.374626][ T7675] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  187.394232][ T7675] RSP: 002b:00007f6b1dc64ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  187.402641][ T7675] RAX: ffffffffffffffda RBX: 00007f6b1dc656c0 RCX: 00007f6b1f9cbfce
[  187.410627][ T7675] RDX: 0000000000000002 RSI: 00007f6b1dc64f90 RDI: ffffffffffffff9c
[  187.418590][ T7675] RBP: 00007f6b1dc65090 R08: 0000000000000000 R09: 0000000000000000
[  187.426558][ T7675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.434602][ T7675] R13: 00007f6b1fc85038 R14: 00007f6b1fc84fa0 R15: 00007fff3835e4c8
[  187.442823][ T7675]  </TASK>
[  187.646472][ T7690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1182'.
[  187.799241][ T7700] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1188'.
[  187.854008][ T7702] netlink: 'syz.1.1182': attribute type 39 has an invalid length.
[  188.232518][ T7720] netlink: 'syz.1.1193': attribute type 10 has an invalid length.
[  188.314817][ T7717] netlink: 'syz.2.1203': attribute type 9 has an invalid length.
[  188.323512][ T7717] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1203'.
[  188.663300][ T7740] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1197'.
[  191.163559][ T7773] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1209'.
[  191.181458][ T7775] netlink: 'syz.4.1209': attribute type 11 has an invalid length.
[  191.201057][ T7777] netlink: 'syz.4.1209': attribute type 10 has an invalid length.
[  191.230891][ T7777] team0: Port device wlan1 added
[  191.251574][ T7779] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1210'.
[  191.322645][ T7781] netlink: 'syz.3.1221': attribute type 11 has an invalid length.
[  191.345324][ T7781] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1221'.
[  191.392334][ T7786] FAULT_INJECTION: forcing a failure.
[  191.392334][ T7786] name failslab, interval 1, probability 0, space 0, times 0
[  191.443089][ T7789] netlink: 'syz.0.1213': attribute type 15 has an invalid length.
[  191.450718][ T7786] CPU: 0 PID: 7786 Comm: syz.1.1212 Not tainted syzkaller #0
[  191.458288][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  191.468453][ T7786] Call Trace:
[  191.468766][ T7789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1213'.
[  191.471741][ T7786]  <TASK>
[  191.471753][ T7786]  dump_stack_lvl+0x188/0x250
[  191.471782][ T7786]  ? show_regs_print_info+0x20/0x20
[  191.471805][ T7786]  ? load_image+0x400/0x400
[  191.498264][ T7786]  ? __might_sleep+0xf0/0xf0
[  191.502878][ T7786]  ? __lock_acquire+0x7d10/0x7d10
[  191.507924][ T7786]  ? __local_bh_enable_ip+0x136/0x1c0
[  191.513374][ T7786]  should_fail+0x38c/0x4c0
[  191.517832][ T7786]  should_failslab+0x5/0x20
[  191.522356][ T7786]  slab_pre_alloc_hook+0x51/0xc0
[  191.527359][ T7786]  kmem_cache_alloc_node_trace+0x4a/0x300
[  191.533183][ T7786]  ? __get_vm_area_node+0x119/0x2d0
[  191.538410][ T7786]  __get_vm_area_node+0x119/0x2d0
[  191.543528][ T7786]  __vmalloc_node_range+0xef/0x8b0
[  191.548786][ T7786]  ? netlink_sendmsg+0x5ec/0xbe0
[  191.553741][ T7786]  ? netlink_data_ready+0x10/0x10
[  191.558789][ T7786]  ? netlink_sendmsg+0x5ec/0xbe0
[  191.563767][ T7786]  vmalloc+0x75/0x80
[  191.567682][ T7786]  ? netlink_sendmsg+0x5ec/0xbe0
[  191.572642][ T7786]  netlink_sendmsg+0x5ec/0xbe0
[  191.577430][ T7786]  ? netlink_getsockopt+0x570/0x570
[  191.582651][ T7786]  ? aa_sock_msg_perm+0x94/0x150
[  191.587615][ T7786]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  191.593096][ T7786]  ? security_socket_sendmsg+0x7c/0xa0
[  191.598573][ T7786]  sock_write_iter+0x2a6/0x3a0
[  191.603616][ T7786]  ? sock_read_iter+0x380/0x380
[  191.608578][ T7786]  ? memset+0x1e/0x40
[  191.612584][ T7786]  ? iov_iter_init+0xb4/0x170
[  191.617278][ T7786]  vfs_write+0x745/0xd60
[  191.621560][ T7786]  ? file_end_write+0x250/0x250
[  191.626438][ T7786]  ? __fget_files+0x40f/0x480
[  191.631147][ T7786]  ? __fdget_pos+0x1e2/0x370
[  191.635754][ T7786]  ? ksys_write+0x71/0x260
[  191.640342][ T7786]  ksys_write+0x152/0x260
[  191.644697][ T7786]  ? __ia32_sys_read+0x80/0x80
[  191.649490][ T7786]  ? lockdep_hardirqs_on+0x94/0x140
[  191.654724][ T7786]  do_syscall_64+0x4c/0xa0
[  191.659156][ T7786]  ? clear_bhb_loop+0x30/0x80
[  191.664028][ T7786]  ? clear_bhb_loop+0x30/0x80
[  191.668725][ T7786]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  191.674643][ T7786] RIP: 0033:0x7f6744c73799
[  191.679074][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.698870][ T7786] RSP: 002b:00007f6742ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  191.707439][ T7786] RAX: ffffffffffffffda RBX: 00007f6744eecfa0 RCX: 00007f6744c73799
[  191.715473][ T7786] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004
[  191.723547][ T7786] RBP: 00007f6742ecd090 R08: 0000000000000000 R09: 0000000000000000
[  191.731623][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.739607][ T7786] R13: 00007f6744eed038 R14: 00007f6744eecfa0 R15: 00007ffcd9fdbff8
[  191.747624][ T7786]  </TASK>
[  192.988523][ T7786] syz.1.1212: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  193.067644][ T7786] CPU: 1 PID: 7786 Comm: syz.1.1212 Not tainted syzkaller #0
[  193.075277][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  193.085376][ T7786] Call Trace:
[  193.088774][ T7786]  <TASK>
[  193.091740][ T7786]  dump_stack_lvl+0x188/0x250
[  193.096555][ T7786]  ? rcu_lock_release+0x5/0x20
[  193.101439][ T7786]  ? show_regs_print_info+0x20/0x20
[  193.106686][ T7786]  ? load_image+0x400/0x400
[  193.111347][ T7786]  warn_alloc+0x243/0x320
[  193.115753][ T7786]  ? zone_watermark_ok_safe+0x240/0x240
[  193.121528][ T7786]  ? kmem_cache_alloc_node_trace+0x16c/0x300
[  193.127541][ T7786]  ? __get_vm_area_node+0x119/0x2d0
[  193.132845][ T7786]  __vmalloc_node_range+0x2b1/0x8b0
[  193.138204][ T7786]  ? netlink_data_ready+0x10/0x10
[  193.143294][ T7786]  ? netlink_sendmsg+0x5ec/0xbe0
[  193.148270][ T7786]  vmalloc+0x75/0x80
[  193.152200][ T7786]  ? netlink_sendmsg+0x5ec/0xbe0
[  193.157171][ T7786]  netlink_sendmsg+0x5ec/0xbe0
[  193.162010][ T7786]  ? netlink_getsockopt+0x570/0x570
[  193.167266][ T7786]  ? aa_sock_msg_perm+0x94/0x150
[  193.172261][ T7786]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  193.177585][ T7786]  ? security_socket_sendmsg+0x7c/0xa0
[  193.183091][ T7786]  sock_write_iter+0x2a6/0x3a0
[  193.187897][ T7786]  ? sock_read_iter+0x380/0x380
[  193.192823][ T7786]  ? memset+0x1e/0x40
[  193.196944][ T7786]  ? iov_iter_init+0xb4/0x170
[  193.201662][ T7786]  vfs_write+0x745/0xd60
[  193.205949][ T7786]  ? file_end_write+0x250/0x250
[  193.210848][ T7786]  ? __fget_files+0x40f/0x480
[  193.215582][ T7786]  ? __fdget_pos+0x1e2/0x370
[  193.220189][ T7786]  ? ksys_write+0x71/0x260
[  193.224650][ T7786]  ksys_write+0x152/0x260
[  193.229103][ T7786]  ? __ia32_sys_read+0x80/0x80
[  193.234005][ T7786]  ? lockdep_hardirqs_on+0x94/0x140
[  193.239243][ T7786]  do_syscall_64+0x4c/0xa0
[  193.243782][ T7786]  ? clear_bhb_loop+0x30/0x80
[  193.248483][ T7786]  ? clear_bhb_loop+0x30/0x80
[  193.253190][ T7786]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.259204][ T7786] RIP: 0033:0x7f6744c73799
[  193.263810][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.283445][ T7786] RSP: 002b:00007f6742ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  193.291987][ T7786] RAX: ffffffffffffffda RBX: 00007f6744eecfa0 RCX: 00007f6744c73799
[  193.299986][ T7786] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004
[  193.307987][ T7786] RBP: 00007f6742ecd090 R08: 0000000000000000 R09: 0000000000000000
[  193.315973][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.323963][ T7786] R13: 00007f6744eed038 R14: 00007f6744eecfa0 R15: 00007ffcd9fdbff8
[  193.332109][ T7786]  </TASK>
[  193.338607][  T144] wlan1: Trigger new scan to find an IBSS to join
[  193.928873][ T7824] netlink: 'syz.2.1229': attribute type 15 has an invalid length.
[  193.956240][ T7824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1229'.
[  193.990564][ T7786] Mem-Info:
[  193.993742][ T7786] active_anon:270 inactive_anon:5750 isolated_anon:0
[  193.993742][ T7786]  active_file:19049 inactive_file:36767 isolated_file:0
[  193.993742][ T7786]  unevictable:768 dirty:164 writeback:0
[  193.993742][ T7786]  slab_reclaimable:20591 slab_unreclaimable:98035
[  193.993742][ T7786]  mapped:29717 shmem:1648 pagetables:573 bounce:0
[  193.993742][ T7786]  kernel_misc_reclaimable:0
[  193.993742][ T7786]  free:1370024 free_pcp:12193 free_cma:0
[  194.053042][ T7786] Node 0 active_anon:1048kB inactive_anon:22492kB active_file:75988kB inactive_file:147068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118868kB dirty:656kB writeback:0kB shmem:4516kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10304kB pagetables:2292kB all_unreclaimable? no
[  194.095959][ T7831] netlink: 'syz.4.1234': attribute type 4 has an invalid length.
[  194.135820][ T7831] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1234'.
[  194.167431][ T7829] netlink: 'syz.3.1233': attribute type 2 has an invalid length.
[  194.186371][ T7786] Node 1 active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  194.187035][ T7829] netlink: 152492 bytes leftover after parsing attributes in process `syz.3.1233'.
[  194.279256][ T7786] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  194.378950][ T7786] lowmem_reserve[]: 0 2539 2540 2540 2540
[  194.384896][ T7786] Node 0 DMA32 free:1554428kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1048kB inactive_anon:22816kB active_file:75988kB inactive_file:147068kB unevictable:1536kB writepending:680kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:42124kB local_pcp:20960kB free_cma:0kB
[  194.456669][ T7786] lowmem_reserve[]: 0 0 0 0 0
[  194.488702][ T7786] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  194.617098][ T7854] netlink: 'syz.3.1238': attribute type 10 has an invalid length.
[  194.631762][ T7786] lowmem_reserve[]: 0 0 0 0 0
[  194.645964][ T7786] Node 1 Normal free:3910032kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:6716kB local_pcp:3136kB free_cma:0kB
[  194.695279][ T1426] ieee802154 phy0 wpan0: encryption failed: -22
[  194.701787][ T1426] ieee802154 phy1 wpan1: encryption failed: -22
[  194.804144][ T7786] lowmem_reserve[]: 0 0 0 0 0
[  194.812605][ T7786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  194.887573][ T7786] Node 0 DMA32: 2052*4kB (UM) 1730*8kB (UME) 578*16kB (UME) 1442*32kB (UME) 333*64kB (UME) 113*128kB (UME) 71*256kB (UME) 30*512kB (UM) 6*1024kB (UM) 1*2048kB (M) 342*4096kB (M) = 1555776kB
[  194.985669][ T7786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  195.032100][ T7786] Node 1 Normal: 126*4kB (UME) 31*8kB (UME) 24*16kB (UME) 147*32kB (UME) 63*64kB (UME) 22*128kB (UME) 6*256kB (U) 3*512kB (U) 1*1024kB (U) 3*2048kB (UME) 949*4096kB (M) = 3910032kB
[  195.086512][ T7869] netlink: 'syz.4.1244': attribute type 15 has an invalid length.
[  195.115890][ T7869] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1244'.
[  195.143014][ T7786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  195.193872][ T7786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  195.256264][ T7786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  195.265926][ T7786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  195.360750][ T7786] 57446 total pagecache pages
[  195.385431][ T7786] 0 pages in swap cache
[  195.401493][ T7786] Swap cache stats: add 0, delete 0, find 0/0
[  195.421494][ T7786] Free swap  = 124996kB
[  195.426023][ T7786] Total swap = 124996kB
[  195.476399][ T7786] 2097051 pages RAM
[  195.480908][ T7786] 0 pages HighMem/MovableOnly
[  195.485606][ T7786] 411490 pages reserved
[  195.492843][ T7786] 0 pages cma reserved
[  196.118631][ T7907] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1254'.
[  196.186639][ T7912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1257'.
[  196.195879][ T7912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1257'.
[  196.225461][ T7907] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  196.256529][ T6185] wlan1: Trigger new scan to find an IBSS to join
[  196.311506][ T7912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1257'.
[  196.518070][ T7914] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1259'.
[  196.537044][ T7926] A link change request failed with some changes committed already. Interface Q'Y]cÊRݘOC‰ÿ may have been left with an inconsistent configuration, please check.
[  196.879686][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'.
[  196.959822][ T7934] netlink: 'syz.0.1267': attribute type 10 has an invalid length.
[  197.011643][ T7934] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  197.670680][ T7962] netlink: 'syz.2.1277': attribute type 1 has an invalid length.
[  197.678791][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.686152][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.256456][ T6131] wlan1: Creating new IBSS network, BSSID ba:4f:11:7e:20:33
[  198.280166][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  198.359860][ T7996] netlink: 'syz.3.1287': attribute type 10 has an invalid length.
[  198.969396][ T8022] __nla_validate_parse: 8 callbacks suppressed
[  198.969417][ T8022] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1298'.
[  199.098822][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1299'.
[  199.137241][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1299'.
[  199.188477][ T8029] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1299'.
[  199.218834][ T8028] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1300'.
[  199.251645][ T8026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1299'.
[  199.277066][ T8033] netlink: 'syz.4.1302': attribute type 10 has an invalid length.
[  199.311842][ T8028] netlink: 'syz.0.1300': attribute type 11 has an invalid length.
[  199.368271][ T8034] netlink: 'syz.0.1300': attribute type 10 has an invalid length.
[  199.402823][ T8034] team0: Device wlan1 is up. Set it down before adding it as a team port
[  199.503452][ T8039] netlink: 'syz.4.1305': attribute type 10 has an invalid length.
[  201.127986][ T8075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  201.184388][ T8075] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  201.276480][ T8084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  201.323640][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1315'.
[  201.717270][ T8099] netlink: 'syz.2.1324': attribute type 10 has an invalid length.
[  201.956472][ T8110] netlink: 'syz.4.1328': attribute type 29 has an invalid length.
[  202.018220][ T8110] netlink: 'syz.4.1328': attribute type 3 has an invalid length.
[  202.249109][ T8121] netlink: 'syz.0.1332': attribute type 15 has an invalid length.
[  202.793795][ T8141] netlink: 'syz.1.1339': attribute type 10 has an invalid length.
[  203.112713][ T8151] netlink: 'syz.1.1343': attribute type 21 has an invalid length.
[  204.047594][ T8194] delete_channel: no stack
[  204.077251][ T8194] delete_channel: no stack
[  204.083907][ T8197] __nla_validate_parse: 18 callbacks suppressed
[  204.083924][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1359'.
[  204.167576][ T8203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1360'.
[  204.177864][ T8197] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1359'.
[  204.189161][ T8205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1359'.
[  204.236237][ T8204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1359'.
[  204.637178][ T8225] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1366'.
[  204.862650][ T8235] device lo entered promiscuous mode
[  204.973737][ T8242] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  205.194797][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1372'.
[  205.543440][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1375'.
[  205.624647][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1375'.
[  205.655830][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1375'.
[  205.971780][ T8271] validate_nla: 4 callbacks suppressed
[  205.971795][ T8271] netlink: 'syz.3.1383': attribute type 3 has an invalid length.
[  207.283264][ T8317] device syzkaller0 left promiscuous mode
[  207.299163][ T6131] wlan1: Trigger new scan to find an IBSS to join
[  210.290520][ T6192] wlan1: Trigger new scan to find an IBSS to join
[  211.035208][ T8320] netlink: 'syz.2.1396': attribute type 10 has an invalid length.
[  211.056412][ T8332] __nla_validate_parse: 7 callbacks suppressed
[  211.056433][ T8332] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1401'.
[  211.116307][ T8332] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1401'.
[  211.125465][ T8332] tc_dump_action: action bad kind
[  211.157977][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1405'.
[  211.167205][ T8338] netlink: 'syz.0.1402': attribute type 10 has an invalid length.
[  211.196609][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1405'.
[  211.217443][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1405'.
[  211.228986][ T8343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1405'.
[  211.594158][ T8350] delete_channel: no stack
[  211.842886][ T8360] device syzkaller0 entered promiscuous mode
[  211.893816][ T8377] netlink: 'syz.0.1417': attribute type 21 has an invalid length.
[  212.081968][ T8382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'.
[  212.172259][ T8385] netlink: 'syz.4.1419': attribute type 10 has an invalid length.
[  212.189532][ T8382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'.
[  212.242232][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'.
[  212.257293][  T144] wlan1: Creating new IBSS network, BSSID 46:1a:fe:af:fe:b8
[  212.301869][ T8389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'.
[  212.518823][ T8400] netlink: 'syz.2.1425': attribute type 21 has an invalid length.
[  212.565955][ T8400] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  212.992629][ T8427] netlink: 'syz.3.1433': attribute type 10 has an invalid length.
[  215.707134][ T8430] netlink: 'syz.1.1434': attribute type 15 has an invalid length.
[  215.832971][ T8436] FAULT_INJECTION: forcing a failure.
[  215.832971][ T8436] name failslab, interval 1, probability 0, space 0, times 0
[  215.853566][ T8436] CPU: 0 PID: 8436 Comm: syz.2.1435 Not tainted syzkaller #0
[  215.861079][ T8436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  215.871157][ T8436] Call Trace:
[  215.874448][ T8436]  <TASK>
[  215.877392][ T8436]  dump_stack_lvl+0x188/0x250
[  215.882179][ T8436]  ? show_regs_print_info+0x20/0x20
[  215.887502][ T8436]  ? load_image+0x400/0x400
[  215.892051][ T8436]  ? __might_sleep+0xf0/0xf0
[  215.896640][ T8436]  ? __lock_acquire+0x7d10/0x7d10
[  215.901695][ T8436]  should_fail+0x38c/0x4c0
[  215.906565][ T8436]  should_failslab+0x5/0x20
[  215.911082][ T8436]  slab_pre_alloc_hook+0x51/0xc0
[  215.916082][ T8436]  __kmalloc+0x6b/0x330
[  215.920270][ T8436]  ? bpf_test_init+0xf8/0x1b0
[  215.924963][ T8436]  ? __lock_acquire+0x7d10/0x7d10
[  215.930008][ T8436]  bpf_test_init+0xf8/0x1b0
[  215.934544][ T8436]  bpf_prog_test_run_skb+0x181/0x1180
[  215.940057][ T8436]  ? __fget_files+0x40f/0x480
[  215.944764][ T8436]  ? cpu_online+0x60/0x60
[  215.949199][ T8436]  bpf_prog_test_run+0x31e/0x390
[  215.954380][ T8436]  __sys_bpf+0x5a5/0x6f0
[  215.958654][ T8436]  ? bpf_link_show_fdinfo+0x380/0x380
[  215.964108][ T8436]  __x64_sys_bpf+0x78/0x90
[  215.968546][ T8436]  do_syscall_64+0x4c/0xa0
[  215.972982][ T8436]  ? clear_bhb_loop+0x30/0x80
[  215.977771][ T8436]  ? clear_bhb_loop+0x30/0x80
[  215.982639][ T8436]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.988551][ T8436] RIP: 0033:0x7f5e8b48f799
[  215.993064][ T8436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.012683][ T8436] RSP: 002b:00007f5e896e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  216.021127][ T8436] RAX: ffffffffffffffda RBX: 00007f5e8b708fa0 RCX: 00007f5e8b48f799
[  216.029205][ T8436] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  216.037368][ T8436] RBP: 00007f5e896e9090 R08: 0000000000000000 R09: 0000000000000000
[  216.045358][ T8436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.053435][ T8436] R13: 00007f5e8b709038 R14: 00007f5e8b708fa0 R15: 00007ffde0db2f98
[  216.061443][ T8436]  </TASK>
[  216.084044][ T8441] netlink: 'syz.1.1440': attribute type 3 has an invalid length.
[  216.134332][ T8441] __nla_validate_parse: 7 callbacks suppressed
[  216.134351][ T8441] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1440'.
[  216.193025][ T8448] netlink: 'syz.0.1442': attribute type 10 has an invalid length.
[  216.206714][ T8448] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  216.404414][ T6187] tipc: Subscription rejected, illegal request
[  216.880859][ T8471] netlink: 'syz.3.1448': attribute type 15 has an invalid length.
[  216.897966][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1448'.
[  218.080609][ T6131] tipc: Subscription rejected, illegal request
[  218.111932][ T8504] netlink: 'syz.1.1461': attribute type 15 has an invalid length.
[  218.183934][ T8504] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1461'.
[  218.606236][ T8507] netlink: 'syz.0.1462': attribute type 10 has an invalid length.
[  218.758358][ T8525] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1470'.
[  218.814439][ T8525] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  218.838769][ T8527] netlink: 'syz.2.1468': attribute type 10 has an invalid length.
[  218.864750][ T8527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.893877][ T8525] openvswitch: netlink: Message has 1 unknown bytes.
[  219.029769][ T8527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.299468][ T8527] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  219.319712][ T8523] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1468'.
[  219.340063][ T8529] netlink: 'syz.0.1471': attribute type 10 has an invalid length.
[  219.353967][ T8529] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1471'.
[  219.579621][ T8539] device syzkaller0 entered promiscuous mode
[  219.607743][ T8545] netlink: 'syz.2.1476': attribute type 10 has an invalid length.
[  219.832346][ T8552] device wlan0 entered promiscuous mode
[  219.947736][ T8557] delete_channel: no stack
[  219.956649][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'.
[  220.004009][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'.
[  220.085873][ T8563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'.
[  220.182536][ T8559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1478'.
[  220.252407][ T8564] netlink: 'syz.4.1482': attribute type 10 has an invalid length.
[  220.472974][ T8569] netlink: 'syz.3.1483': attribute type 10 has an invalid length.
[  220.555317][ T8573] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  221.314929][ T8590] netlink: 'syz.4.1491': attribute type 21 has an invalid length.
[  221.328568][ T8590] __nla_validate_parse: 2 callbacks suppressed
[  221.328586][ T8590] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1491'.
[  221.682470][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'.
[  221.711312][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'.
[  221.798186][ T8615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.850223][ T8613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'.
[  221.864663][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'.
[  221.916273][ T8621] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1499'.
[  222.373927][ T8639] bond0: (slave geneve0): Error: Slave device does not support XDP
[  222.409152][ T8639] netlink: 'syz.2.1505': attribute type 10 has an invalid length.
[  222.495113][ T8644] netlink: 'syz.1.1503': attribute type 10 has an invalid length.
[  222.692376][ T8652] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1507'.
[  222.966722][ T8652] netlink: 'syz.4.1507': attribute type 29 has an invalid length.
[  223.073177][ T8652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1507'.
[  224.311952][ T8671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.536195][ T8679] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1516'.
[  225.063007][ T8694] netlink: 'syz.4.1520': attribute type 3 has an invalid length.
[  225.134335][ T8694] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1520'.
[  225.739171][ T8741] netlink: 'syz.0.1539': attribute type 1 has an invalid length.
[  227.842843][ T8810] __nla_validate_parse: 3 callbacks suppressed
[  227.842880][ T8810] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1567'.
[  228.287994][ T8832] netlink: 'syz.1.1573': attribute type 3 has an invalid length.
[  228.569299][ T8836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1578'.
[  229.029309][ T8844] device bridge_slave_1 left promiscuous mode
[  229.035646][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.142658][ T8844] device bridge_slave_0 left promiscuous mode
[  229.169413][ T8844] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.027498][ T8922] netlink: 'syz.3.1596': attribute type 3 has an invalid length.
[  234.035588][ T8922] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1596'.
[  234.083336][ T8919] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1603'.
[  234.591385][ T8943] netlink: 'syz.0.1611': attribute type 10 has an invalid length.
[  234.625359][ T8943] device wlan1 left promiscuous mode
[  234.671777][ T8943] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  235.679386][ T8970] delete_channel: no stack
[  236.278452][ T9002] device bridge_slave_1 left promiscuous mode
[  236.331761][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.371944][ T9002] device bridge_slave_0 left promiscuous mode
[  236.404576][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.939537][ T9027] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.1639'.
[  236.979580][ T9031] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1641'.
[  237.011222][ T9033] netlink: 'syz.2.1642': attribute type 10 has an invalid length.
[  237.026691][ T9031] netlink: 'syz.0.1641': attribute type 11 has an invalid length.
[  237.050073][ T9031] netlink: 'syz.0.1641': attribute type 10 has an invalid length.
[  237.107285][ T9031] bond0: (slave wlan1): Releasing backup interface
[  237.235474][ T9031] team0: Port device wlan1 added
[  237.546929][ T9055] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1648'.
[  237.861546][ T9057] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1649'.
[  238.057185][ T9059] device bridge_slave_1 left promiscuous mode
[  238.081321][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.165985][ T9059] device bridge_slave_0 left promiscuous mode
[  238.223558][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.427812][ T9059] bond0: (slave bridge0): Releasing backup interface
[  238.504821][ T9059] device bridge0 left promiscuous mode
[  238.579130][ T9071] netlink: 'syz.0.1656': attribute type 10 has an invalid length.
[  238.616820][ T9071] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1656'.
[  238.686860][ T9076] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1654'.
[  238.895731][ T9083] netlink: 'syz.2.1658': attribute type 29 has an invalid length.
[  239.144713][ T9083] netlink: 'syz.2.1658': attribute type 29 has an invalid length.
[  239.307362][ T9090] netlink: 'syz.3.1660': attribute type 1 has an invalid length.
[  239.335849][ T9090] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1660'.
[  239.361414][ T9093] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1661'.
[  240.493268][ T9134] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1675'.
[  240.775543][ T9145] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.1680'.
[  240.871131][ T9146] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1679'.
[  241.969475][ T9179] netlink: 'syz.1.1687': attribute type 3 has an invalid length.
[  242.033119][ T9179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1687'.
[  242.503478][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1691'.
[  242.525952][ T9197] netlink: 'syz.0.1693': attribute type 9 has an invalid length.
[  242.543775][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1691'.
[  242.559470][ T9197] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1693'.
[  242.576608][ T9199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1691'.
[  242.746270][ T9201] netlink: 'syz.2.1694': attribute type 10 has an invalid length.
[  242.979293][ T9209] openvswitch: netlink: IP tunnel dst address not specified
[  243.531729][ T9235] netlink: 'syz.2.1705': attribute type 10 has an invalid length.
[  243.784101][ T9239] netlink: 'syz.4.1708': attribute type 10 has an invalid length.
[  244.377210][ T9246] __nla_validate_parse: 13 callbacks suppressed
[  244.377229][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'.
[  244.516605][ T9253] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'.
[  244.877319][ T9266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'.
[  244.936309][ T9266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'.
[  244.990129][ T9270] netlink: 'syz.2.1718': attribute type 3 has an invalid length.
[  245.028926][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1718'.
[  245.166285][ T9268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'.
[  245.188697][ T9273] netlink: 'syz.4.1719': attribute type 10 has an invalid length.
[  245.407173][ T9271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1717'.
[  245.628927][ T9277] netlink: 'syz.0.1721': attribute type 10 has an invalid length.
[  246.225559][ T9306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1732'.
[  246.283829][ T9306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1732'.
[  246.348445][ T9309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1732'.
[  246.411231][ T9305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  246.414001][ T9311] netlink: 'syz.1.1730': attribute type 2 has an invalid length.
[  246.419359][ T9305] IPv6: NLM_F_CREATE should be set when creating new route
[  246.435462][ T9305] IPv6: NLM_F_CREATE should be set when creating new route
[  246.443424][ T9305] IPv6: NLM_F_CREATE should be set when creating new route
[  247.277679][ T9322] netlink: 'syz.1.1737': attribute type 10 has an invalid length.
[  247.620717][ T9332] netlink: 'syz.0.1736': attribute type 3 has an invalid length.
[  247.677325][ T9336] netlink: 'syz.2.1743': attribute type 11 has an invalid length.
[  247.755601][ T9336] netlink: 'syz.2.1743': attribute type 10 has an invalid length.
[  248.299499][ T9349] netlink: 'syz.4.1745': attribute type 2 has an invalid length.
[  248.376511][ T9349] netlink: 'syz.4.1745': attribute type 8 has an invalid length.
[  249.395149][ T9382] __nla_validate_parse: 12 callbacks suppressed
[  249.395173][ T9382] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1757'.
[  249.676374][ T9392] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1760'.
[  249.756316][ T9392] device dummy0 entered promiscuous mode
[  249.778157][ T9392] bridge0: port 3(dummy0) entered blocking state
[  249.847991][ T9392] bridge0: port 3(dummy0) entered disabled state
[  249.889572][ T9400] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1761'.
[  249.968136][ T9400] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1761'.
[  250.006285][ T9400] validate_nla: 2 callbacks suppressed
[  250.006315][ T9400] netlink: 'syz.0.1761': attribute type 2 has an invalid length.
[  250.058111][ T9392] bridge0: port 3(dummy0) entered blocking state
[  250.064600][ T9392] bridge0: port 3(dummy0) entered forwarding state
[  250.127604][ T9395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  250.135460][ T9395] IPv6: NLM_F_CREATE should be set when creating new route
[  250.143417][ T9395] IPv6: NLM_F_CREATE should be set when creating new route
[  250.151276][ T9395] IPv6: NLM_F_CREATE should be set when creating new route
[  250.438635][ T9407] netlink: 'syz.2.1764': attribute type 9 has an invalid length.
[  250.466502][ T9407] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1764'.
[  250.762917][ T9428] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1772'.
[  251.501322][ T9453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.509102][ T9453] IPv6: NLM_F_CREATE should be set when creating new route
[  251.516553][ T9453] IPv6: NLM_F_CREATE should be set when creating new route
[  251.524604][ T9453] IPv6: NLM_F_CREATE should be set when creating new route
[  251.584480][ T9453] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1778'.
[  251.661278][ T9459] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1781'.
[  251.713744][ T9453] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1778'.
[  251.731845][ T9453] netlink: 'syz.2.1778': attribute type 2 has an invalid length.
[  251.976764][ T9473] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1786'.
[  252.078598][ T9472] bond0: (slave geneve0): Error: Slave device does not support XDP
[  252.172976][ T9480] netlink: 'syz.2.1790': attribute type 10 has an invalid length.
[  252.338174][ T9488] netlink: 'syz.3.1793': attribute type 3 has an invalid length.
[  252.961407][ T9527] netlink: 'syz.1.1808': attribute type 10 has an invalid length.
[  253.010316][ T6187] tipc: Subscription rejected, illegal request
[  253.250812][ T9529] netlink: 'syz.4.1807': attribute type 9 has an invalid length.
[  253.262089][ T9546] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8
[  254.242070][ T9553] netlink: 'syz.3.1818': attribute type 2 has an invalid length.
[  254.276873][ T9553] netlink: 'syz.3.1818': attribute type 8 has an invalid length.
[  254.359527][ T9559] netlink: 'syz.1.1819': attribute type 21 has an invalid length.
[  254.425463][ T9569] team0: Device hsr_slave_0 failed to register rx_handler
[  254.622243][ T9575] __nla_validate_parse: 21 callbacks suppressed
[  254.622265][ T9575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1825'.
[  254.823606][ T9575] device dummy0 entered promiscuous mode
[  254.911275][ T9575] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  255.264808][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'.
[  255.312375][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'.
[  255.391370][ T9599] validate_nla: 3 callbacks suppressed
[  255.391421][ T9599] netlink: 'syz.3.1833': attribute type 9 has an invalid length.
[  255.415452][ T9599] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1833'.
[  255.426561][ T9601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'.
[  255.465798][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1835'.
[  255.511750][ T9611] netlink: 'syz.1.1838': attribute type 10 has an invalid length.
[  255.533362][ T9611] team0: Device hsr_slave_0 failed to register rx_handler
[  255.617245][ T9613] netlink: 'syz.0.1839': attribute type 10 has an invalid length.
[  255.743193][ T9624] netlink: 'syz.1.1844': attribute type 13 has an invalid length.
[  255.776287][ T9624] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1844'.
[  256.097956][ T1426] ieee802154 phy0 wpan0: encryption failed: -22
[  256.104326][ T1426] ieee802154 phy1 wpan1: encryption failed: -22
[  256.118109][ T9637] netlink: 'syz.2.1847': attribute type 21 has an invalid length.
[  256.212108][ T9637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1847'.
[  256.707717][ T9653] netlink: 'syz.1.1852': attribute type 9 has an invalid length.
[  256.730263][ T9653] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1852'.
[  256.935795][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1853'.
[  257.053298][ T9659] FAULT_INJECTION: forcing a failure.
[  257.053298][ T9659] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.096367][ T9659] CPU: 0 PID: 9659 Comm: syz.2.1856 Not tainted syzkaller #0
[  257.103794][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  257.113953][ T9659] Call Trace:
[  257.117416][ T9659]  <TASK>
[  257.120449][ T9659]  dump_stack_lvl+0x188/0x250
[  257.125165][ T9659]  ? show_regs_print_info+0x20/0x20
[  257.130483][ T9659]  ? load_image+0x400/0x400
[  257.135012][ T9659]  ? __lock_acquire+0x7d10/0x7d10
[  257.140159][ T9659]  should_fail+0x38c/0x4c0
[  257.144698][ T9659]  _copy_from_user+0x2e/0x170
[  257.149395][ T9659]  map_update_elem+0x3c3/0x770
[  257.154277][ T9659]  __sys_bpf+0x46b/0x6f0
[  257.158542][ T9659]  ? bpf_link_show_fdinfo+0x380/0x380
[  257.163968][ T9659]  __x64_sys_bpf+0x78/0x90
[  257.168408][ T9659]  do_syscall_64+0x4c/0xa0
[  257.172837][ T9659]  ? clear_bhb_loop+0x30/0x80
[  257.177522][ T9659]  ? clear_bhb_loop+0x30/0x80
[  257.182217][ T9659]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.188130][ T9659] RIP: 0033:0x7f5e8b48f799
[  257.192557][ T9659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.212176][ T9659] RSP: 002b:00007f5e896e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  257.220619][ T9659] RAX: ffffffffffffffda RBX: 00007f5e8b708fa0 RCX: 00007f5e8b48f799
[  257.228615][ T9659] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000002
[  257.236614][ T9659] RBP: 00007f5e896e9090 R08: 0000000000000000 R09: 0000000000000000
[  257.244594][ T9659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.252571][ T9659] R13: 00007f5e8b709038 R14: 00007f5e8b708fa0 R15: 00007ffde0db2f98
[  257.260665][ T9659]  </TASK>
[  258.115664][ T9698] netlink: 'syz.1.1865': attribute type 10 has an invalid length.
[  258.963894][ T9714] openvswitch: netlink: Duplicate key (type 0).
[  259.107229][ T9717] netlink: 'syz.2.1875': attribute type 10 has an invalid length.
[  259.631410][ T9733] Ÿë
: port 1(gretap0) entered blocking state
[  259.649464][ T9733] Ÿë
: port 1(gretap0) entered disabled state
[  259.707175][ T9733] device gretap0 entered promiscuous mode
[  259.832418][ T9749] netlink: 'syz.1.1885': attribute type 39 has an invalid length.
[  260.319335][ T9763] netlink: 'syz.3.1889': attribute type 10 has an invalid length.
[  260.390010][ T9764] __nla_validate_parse: 16 callbacks suppressed
[  260.390030][ T9764] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1890'.
[  260.522684][ T9768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1891'.
[  260.612236][ T9768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1891'.
[  260.686377][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1891'.
[  260.770306][ T9771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1891'.
[  261.100332][ T9783] netlink: 'syz.1.1896': attribute type 2 has an invalid length.
[  261.141025][ T9783] netlink: 'syz.1.1896': attribute type 8 has an invalid length.
[  261.150486][ T9783] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1896'.
[  261.160284][ T9785] ref_ctr_offset mismatch. inode: 0x7f1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  261.718933][ T9800] device syzkaller0 entered promiscuous mode
[  261.998561][ T9804] netlink: 'syz.2.1905': attribute type 5 has an invalid length.
[  262.030925][ T9803] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1904'.
[  262.361208][ T9819] netlink: 'syz.4.1911': attribute type 2 has an invalid length.
[  262.402165][ T9819] netlink: 'syz.4.1911': attribute type 8 has an invalid length.
[  262.446001][ T9819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1911'.
[  262.506283][ T9820] netlink: 'syz.0.1910': attribute type 10 has an invalid length.
[  262.579691][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1910'.
[  262.754026][ T9826] bond0: (slave geneve0): Error: Slave device does not support XDP
[  262.883496][ T9831] netlink: 'syz.2.1913': attribute type 10 has an invalid length.
[  263.015454][ T9834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1914'.
[  263.534721][ T9853] FAULT_INJECTION: forcing a failure.
[  263.534721][ T9853] name failslab, interval 1, probability 0, space 0, times 0
[  263.593036][ T9853] CPU: 1 PID: 9853 Comm: syz.4.1923 Not tainted syzkaller #0
[  263.600478][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  263.610648][ T9853] Call Trace:
[  263.613932][ T9853]  <TASK>
[  263.616969][ T9853]  dump_stack_lvl+0x188/0x250
[  263.621666][ T9853]  ? show_regs_print_info+0x20/0x20
[  263.626895][ T9853]  ? load_image+0x400/0x400
[  263.631522][ T9853]  ? __might_sleep+0xf0/0xf0
[  263.636133][ T9853]  ? __lock_acquire+0x7d10/0x7d10
[  263.641284][ T9853]  ? lockdep_init_map_type+0x98/0x900
[  263.646687][ T9853]  should_fail+0x38c/0x4c0
[  263.651125][ T9853]  should_failslab+0x5/0x20
[  263.655663][ T9853]  slab_pre_alloc_hook+0x51/0xc0
[  263.660614][ T9853]  ? security_inode_alloc+0x30/0x110
[  263.665912][ T9853]  kmem_cache_alloc+0x3d/0x290
[  263.670696][ T9853]  security_inode_alloc+0x30/0x110
[  263.676011][ T9853]  inode_init_always+0x8f4/0xcb0
[  263.681070][ T9853]  ? memset+0x1e/0x40
[  263.685166][ T9853]  new_inode_pseudo+0x8e/0x210
[  263.689958][ T9853]  new_inode+0x25/0x1c0
[  263.694224][ T9853]  proc_pid_make_inode+0x20/0x1c0
[  263.699270][ T9853]  proc_ns_dir_lookup+0x6a0/0x7c0
[  263.704419][ T9853]  ? proc_ns_dir_readdir+0x440/0x440
[  263.709769][ T9853]  path_openat+0x1022/0x2fa0
[  263.714398][ T9853]  ? slab_post_alloc_hook+0x4c/0x380
[  263.719711][ T9853]  ? do_filp_open+0x410/0x410
[  263.724517][ T9853]  do_filp_open+0x1e2/0x410
[  263.729331][ T9853]  ? vfs_tmpfile+0x300/0x300
[  263.733945][ T9853]  ? noop_direct_IO+0x10/0x10
[  263.738636][ T9853]  ? _raw_spin_unlock+0x24/0x40
[  263.743524][ T9853]  ? alloc_fd+0x598/0x630
[  263.747949][ T9853]  do_sys_openat2+0x150/0x4b0
[  263.752656][ T9853]  ? rcu_nmi_exit+0x6f/0xf0
[  263.757343][ T9853]  ? do_sys_open+0xe0/0xe0
[  263.761749][ T9853]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  263.767733][ T9853]  ? lock_chain_count+0x20/0x20
[  263.772582][ T9853]  ? vtime_user_exit+0x2c8/0x3e0
[  263.777512][ T9853]  __x64_sys_openat+0x135/0x160
[  263.782370][ T9853]  do_syscall_64+0x4c/0xa0
[  263.786777][ T9853]  ? clear_bhb_loop+0x30/0x80
[  263.791441][ T9853]  ? clear_bhb_loop+0x30/0x80
[  263.796116][ T9853]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  263.802087][ T9853] RIP: 0033:0x7f6b1f9cbfce
[  263.806507][ T9853] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  263.826208][ T9853] RSP: 002b:00007f6b1dc64ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  263.834741][ T9853] RAX: ffffffffffffffda RBX: 00007f6b1dc656c0 RCX: 00007f6b1f9cbfce
[  263.842726][ T9853] RDX: 0000000000000002 RSI: 00007f6b1dc64f90 RDI: ffffffffffffff9c
[  263.850694][ T9853] RBP: 00007f6b1dc65090 R08: 0000000000000000 R09: 0000000000000000
[  263.858655][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  263.866614][ T9853] R13: 00007f6b1fc85038 R14: 00007f6b1fc84fa0 R15: 00007fff3835e4c8
[  263.874605][ T9853]  </TASK>
[  264.119414][ T9868] bridge_slave_1: default FDB implementation only supports local addresses
[  264.953181][ T9894] netlink: 'syz.1.1938': attribute type 10 has an invalid length.
[  265.744176][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.802197][ T9915] __nla_validate_parse: 3 callbacks suppressed
[  267.802219][ T9915] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1944'.
[  267.866374][ T9918] netlink: 'syz.1.1945': attribute type 10 has an invalid length.
[  267.908276][ T9918] device hsr0 entered promiscuous mode
[  268.039093][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'.
[  268.052937][ T9918] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  268.152677][ T9918] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  268.198247][ T9918] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  268.241280][ T9918] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  268.272052][ T9928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'.
[  268.323237][ T9933] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'.
[  268.361174][ T9935] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'.
[  268.731596][ T9953] netlink: 'syz.2.1958': attribute type 6 has an invalid length.
[  268.753170][ T9953] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.1958'.
[  269.199867][ T9965] netlink: 'syz.1.1963': attribute type 2 has an invalid length.
[  269.215076][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1965'.
[  269.232446][ T9965] netlink: 'syz.1.1963': attribute type 8 has an invalid length.
[  269.262529][ T9965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1963'.
[  269.317682][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1965'.
[  269.355326][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1965'.
[  269.713312][ T9981] netlink: 'syz.0.1970': attribute type 15 has an invalid length.
[  269.778437][ T9982] netlink: 'syz.2.1968': attribute type 2 has an invalid length.
[  269.818041][ T9983] netlink: 'syz.2.1968': attribute type 21 has an invalid length.
[  272.278091][T10007] netlink: 'syz.4.1976': attribute type 23 has an invalid length.
[  272.496644][T10015] netlink: 'syz.4.1980': attribute type 2 has an invalid length.
[  272.504862][T10015] netlink: 'syz.4.1980': attribute type 8 has an invalid length.
[  272.815429][T10028] syz.0.1985[10028] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  272.815580][T10028] syz.0.1985[10028] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  272.953114][T10039] validate_nla: 1 callbacks suppressed
[  272.953132][T10039] netlink: 'syz.3.1990': attribute type 10 has an invalid length.
[  273.353584][T10058] netlink: 'syz.2.1997': attribute type 15 has an invalid length.
[  273.362456][T10058] __nla_validate_parse: 12 callbacks suppressed
[  273.362474][T10058] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1997'.
[  274.355650][T10070] netlink: 'syz.0.1999': attribute type 2 has an invalid length.
[  274.411361][T10070] netlink: 'syz.0.1999': attribute type 8 has an invalid length.
[  274.450137][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1999'.
[  274.532631][T10089] netlink: 'syz.3.2008': attribute type 10 has an invalid length.
[  274.694905][T10094] netlink: 'syz.0.2011': attribute type 10 has an invalid length.
[  274.696971][T10095] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2010'.
[  274.721083][T10095] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  274.735643][T10094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.829589][T10091] netlink: 'syz.1.2009': attribute type 9 has an invalid length.
[  274.912960][T10094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.947283][T10091] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2009'.
[  275.029985][T10094] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  275.702528][T10125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.993657][T10123] device syzkaller0 entered promiscuous mode
[  276.275150][T10152] device syzkaller0 left promiscuous mode
[  276.778976][T10172] netlink: 'syz.1.2040': attribute type 2 has an invalid length.
[  276.843614][T10172] netlink: 'syz.1.2040': attribute type 8 has an invalid length.
[  276.857042][T10172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2040'.
[  276.985954][T10181] netlink: 'syz.4.2043': attribute type 10 has an invalid length.
[  277.146941][T10188] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2046'.
[  277.243129][T10188] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  277.309983][T10188] CPU: 0 PID: 10188 Comm: syz.3.2046 Not tainted syzkaller #0
[  277.317528][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  277.327609][T10188] Call Trace:
[  277.331003][T10188]  <TASK>
[  277.333959][T10188]  dump_stack_lvl+0x188/0x250
[  277.338780][T10188]  ? show_regs_print_info+0x20/0x20
[  277.344059][T10188]  ? load_image+0x400/0x400
[  277.348615][T10188]  sysfs_warn_dup+0x8a/0xa0
[  277.353290][T10188]  sysfs_do_create_link_sd+0xc0/0x110
[  277.358889][T10188]  device_add+0x7ed/0xfb0
[  277.363322][T10188]  wiphy_register+0x1e81/0x2c30
[  277.368277][T10188]  ? cfg80211_event_work+0x40/0x40
[  277.373386][T10188]  ? minstrel_ht_alloc+0x808/0x980
[  277.378502][T10188]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  277.384662][T10188]  ieee80211_register_hw+0x2aa1/0x3af0
[  277.390224][T10188]  ? ieee80211_tasklet_handler+0x20/0x20
[  277.395854][T10188]  ? rcu_is_watching+0x11/0xa0
[  277.400617][T10188]  ? memset+0x1e/0x40
[  277.404591][T10188]  ? hrtimer_init+0x10c/0x220
[  277.409268][T10188]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  277.415165][T10188]  hwsim_new_radio_nl+0xa6f/0xc40
[  277.420212][T10188]  genl_rcv_msg+0xcea/0xf90
[  277.424972][T10188]  ? lock_chain_count+0x20/0x20
[  277.429823][T10188]  ? genl_bind+0x380/0x380
[  277.434243][T10188]  ? verify_lock_unused+0x140/0x140
[  277.439536][T10188]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  277.446361][T10188]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  277.453000][T10188]  netlink_rcv_skb+0x1f5/0x440
[  277.457878][T10188]  ? genl_bind+0x380/0x380
[  277.462316][T10188]  ? netlink_ack+0xb50/0xb50
[  277.467015][T10188]  ? __lock_acquire+0x7d10/0x7d10
[  277.472040][T10188]  ? down_read+0x1aa/0x2e0
[  277.476456][T10188]  genl_rcv+0x24/0x40
[  277.480434][T10188]  netlink_unicast+0x774/0x920
[  277.485203][T10188]  netlink_sendmsg+0x8ba/0xbe0
[  277.489973][T10188]  ? netlink_getsockopt+0x570/0x570
[  277.495162][T10188]  ? aa_sock_msg_perm+0x94/0x150
[  277.500093][T10188]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  277.505456][T10188]  ? security_socket_sendmsg+0x7c/0xa0
[  277.511006][T10188]  ? netlink_getsockopt+0x570/0x570
[  277.516283][T10188]  ____sys_sendmsg+0x5b7/0x8f0
[  277.521066][T10188]  ? __sys_sendmsg_sock+0x30/0x30
[  277.526196][T10188]  ? import_iovec+0x6f/0xa0
[  277.530779][T10188]  ___sys_sendmsg+0x236/0x2e0
[  277.535620][T10188]  ? __sys_sendmsg+0x2a0/0x2a0
[  277.540416][T10188]  ? percpu_counter_add_batch+0x13b/0x160
[  277.546289][T10188]  __se_sys_sendmsg+0x1af/0x290
[  277.551172][T10188]  ? __x64_sys_sendmsg+0x80/0x80
[  277.556121][T10188]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  277.562207][T10188]  ? lockdep_hardirqs_on+0x94/0x140
[  277.567580][T10188]  do_syscall_64+0x4c/0xa0
[  277.572011][T10188]  ? clear_bhb_loop+0x30/0x80
[  277.576681][T10188]  ? clear_bhb_loop+0x30/0x80
[  277.581476][T10188]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  277.587379][T10188] RIP: 0033:0x7fbbd36f2799
[  277.591807][T10188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.611679][T10188] RSP: 002b:00007fbbd194c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.620274][T10188] RAX: ffffffffffffffda RBX: 00007fbbd396bfa0 RCX: 00007fbbd36f2799
[  277.628249][T10188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  277.636230][T10188] RBP: 00007fbbd3788c99 R08: 0000000000000000 R09: 0000000000000000
[  277.644207][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.652179][T10188] R13: 00007fbbd396c038 R14: 00007fbbd396bfa0 R15: 00007ffe3c2edb98
[  277.660339][T10188]  </TASK>
[  277.674658][T10191] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2047'.
[  277.722862][T10191] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  277.760292][T10191] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.098831][T10204] netlink: 'syz.1.2052': attribute type 3 has an invalid length.
[  278.112864][T10204] netlink: 'syz.1.2052': attribute type 1 has an invalid length.
[  278.136588][T10204] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2052'.
[  278.203239][T10210] netlink: 'syz.4.2056': attribute type 2 has an invalid length.
[  278.266509][T10210] netlink: 'syz.4.2056': attribute type 8 has an invalid length.
[  278.276738][T10210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2056'.
[  278.319932][T10213] netlink: 'syz.0.2057': attribute type 10 has an invalid length.
[  278.741232][T10225] netlink: 'syz.0.2060': attribute type 9 has an invalid length.
[  278.759478][T10225] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2060'.
[  279.750961][T10254] netlink: 'syz.1.2070': attribute type 10 has an invalid length.
[  280.078848][T10265] netlink: 'syz.4.2072': attribute type 2 has an invalid length.
[  280.113470][T10265] netlink: 'syz.4.2072': attribute type 8 has an invalid length.
[  280.149501][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2072'.
[  280.723971][T10281] netlink: 'syz.1.2076': attribute type 25 has an invalid length.
[  280.756249][T10281] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2076'.
[  280.776223][T10288] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2080'.
[  281.448385][T10314] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2086'.
[  281.557024][T10314] netlink: zone id is out of range
[  281.614092][T10314] netlink: zone id is out of range
[  281.637537][T10314] netlink: zone id is out of range
[  281.643960][T10314] netlink: zone id is out of range
[  281.652062][T10314] netlink: zone id is out of range
[  281.658464][T10314] netlink: zone id is out of range
[  281.665112][T10314] netlink: zone id is out of range
[  281.678300][T10314] netlink: zone id is out of range
[  281.695121][T10314] netlink: zone id is out of range
[  281.718057][T10314] netlink: zone id is out of range
[  282.018721][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2093'.
[  282.199576][T10331] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2095'.
[  282.682963][T10347] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2100'.
[  282.830796][T10347] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2100'.
[  283.696241][    C1] ------------[ cut here ]------------
[  283.702515][    C1] WARNING: CPU: 1 PID: 4262 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0
[  283.705361][T10369] validate_nla: 6 callbacks suppressed
[  283.705374][T10369] netlink: 'syz.1.2109': attribute type 10 has an invalid length.
[  283.712108][    C1] Modules linked in:
[  283.730023][    C1] CPU: 1 PID: 4262 Comm: kworker/u4:6 Not tainted syzkaller #0
[  283.737629][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  283.747804][    C1] Workqueue: bat_events batadv_nc_worker
[  283.753577][    C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[  283.759868][    C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[  283.759890][    C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246
[  283.759913][    C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff888021f91dc0
[  283.759931][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  283.759944][    C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4
[  283.810688][    C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff888021f93548
[  283.818739][    C1] R13: ffffc90001199030 R14: ffffc90000dcff28 R15: 0000000000000000
[  283.826842][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  283.835810][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  283.842479][    C1] CR2: 0000200000124000 CR3: 0000000066b08000 CR4: 00000000003506e0
[  283.850719][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  283.858846][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[  283.866896][    C1] Call Trace:
[  283.870207][    C1]  <IRQ>
[  283.873077][    C1]  bpf_probe_read_user+0x26/0x70
[  283.878198][    C1]  bpf_prog_f2594087b0f175cc+0x32/0x7d8
[  283.883778][    C1]  bpf_flow_dissect+0x12b/0x3f0
[  283.888713][    C1]  __skb_flow_dissect+0x792/0x60b0
[  283.894041][    C1]  ? __lock_acquire+0x13bc/0x7d10
[  283.899161][    C1]  ? mark_lock+0x94/0x320
[  283.903529][    C1]  ? __lock_acquire+0x12e8/0x7d10
[  283.908645][    C1]  ? bpf_flow_dissect+0x3f0/0x3f0
[  283.913724][    C1]  ? perf_swevent_get_recursion_context+0xda/0x150
[  283.920396][    C1]  ? perf_trace_buf_alloc+0x12c/0x300
[  283.925898][    C1]  ? verify_lock_unused+0x140/0x140
[  283.931178][    C1]  ? perf_trace_lock_acquire+0x1a0/0x3e0
[  283.936891][    C1]  ? ___might_sleep+0x610/0x610
[  283.941856][    C1]  ? mark_lock+0x94/0x320
[  283.946265][    C1]  ? mark_lock+0x94/0x320
[  283.950624][    C1]  ? __lock_acquire+0x12e8/0x7d10
[  283.955712][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  283.961621][    C1]  ? verify_lock_unused+0x140/0x140
[  283.967022][    C1]  ? perf_trace_lock_acquire+0x340/0x3e0
[  283.972709][    C1]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  283.979562][    C1]  ? verify_lock_unused+0x140/0x140
[  283.984802][    C1]  ___skb_get_hash+0x55/0x680
[  283.989695][    C1]  __skb_get_hash+0xd2/0x270
[  283.994326][    C1]  ? __skb_get_hash_symmetric+0x3b0/0x3b0
[  284.000154][    C1]  ? rcu_lock_release+0x9/0x20
[  284.005051][    C1]  netdev_pick_tx+0x335/0xad0
[  284.010007][    C1]  netdev_core_pick_tx+0x12e/0x2e0
[  284.015288][    C1]  __dev_queue_xmit+0x756/0x2f80
[  284.020406][    C1]  ? dev_queue_xmit+0x20/0x20
[  284.025129][    C1]  ? memcpy+0x3c/0x60
[  284.029231][    C1]  ? __copy_skb_header+0x3ba/0x4f0
[  284.034398][    C1]  ? __skb_clone+0x480/0x790
[  284.039114][    C1]  ? hsr_addr_subst_dest+0x1d5/0x500
[  284.044436][    C1]  ? skb_clone+0x1f1/0x350
[  284.048971][    C1]  hsr_forward_skb+0xfd2/0x1700
[  284.053874][    C1]  ? prp_fill_frame_info+0x660/0x660
[  284.059276][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[  284.064333][    C1]  ? memset+0x1e/0x40
[  284.068463][    C1]  ? __skb_pad+0x407/0x620
[  284.072924][    C1]  send_hsr_supervision_frame+0x5f7/0xb80
[  284.078760][    C1]  hsr_announce+0x168/0x310
[  284.083288][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.088433][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.093578][    C1]  call_timer_fn+0x17b/0x540
[  284.098389][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.103469][    C1]  ? __run_timers+0x800/0x800
[  284.108361][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  284.113587][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  284.118890][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.124036][    C1]  __run_timers+0x53e/0x800
[  284.128829][    C1]  ? detach_timer+0x2b0/0x2b0
[  284.133537][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  284.139650][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  284.144532][    C1]  ? ktime_get_real_ts64+0x440/0x440
[  284.149938][    C1]  run_timer_softirq+0x63/0xf0
[  284.154730][    C1]  handle_softirqs+0x339/0x830
[  284.159913][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  284.164812][    C1]  ? do_softirq+0x210/0x210
[  284.169451][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  284.174698][    C1]  __irq_exit_rcu+0x13b/0x230
[  284.179493][    C1]  ? irq_exit_rcu+0x20/0x20
[  284.184055][    C1]  irq_exit_rcu+0x5/0x20
[  284.188389][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  284.194047][    C1]  </IRQ>
[  284.197067][    C1]  <TASK>
[  284.200017][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  284.206097][    C1] RIP: 0010:lock_acquire+0x208/0x400
[  284.211419][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04
[  284.231128][    C1] RSP: 0018:ffffc9000321f6e0 EFLAGS: 00000206
[  284.237272][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ddb660f728bd2700
[  284.245273][    C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980
[  284.253378][    C1] RBP: ffffc9000321f800 R08: dffffc0000000000 R09: 1ffffffff203a818
[  284.261432][    C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c31eaa0
[  284.269512][    C1] R13: 1ffff92000643ee8 R14: 0000000000000246 R15: dffffc0000000000
[  284.277839][    C1]  ? rcu_lock_release+0x5/0x20
[  284.282642][    C1]  ? read_lock_is_recursive+0x10/0x10
[  284.288105][    C1]  ? ___might_sleep+0x610/0x610
[  284.292998][    C1]  rcu_lock_acquire+0x2a/0x30
[  284.297748][    C1]  ? rcu_lock_acquire+0x5/0x30
[  284.302536][    C1]  trace_call_bpf+0xf9/0x5b0
[  284.307229][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  284.313255][    C1]  ? mark_lock+0x94/0x320
[  284.317694][    C1]  perf_trace_run_bpf_submit+0x79/0x1c0
[  284.323463][    C1]  perf_trace_lock_acquire+0x340/0x3e0
[  284.329020][    C1]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  284.335644][    C1]  ? sync_rcu_exp_done_unlocked+0x140/0x140
[  284.341743][    C1]  lock_acquire+0x3d7/0x400
[  284.346367][    C1]  ? rcu_lock_acquire+0x5/0x30
[  284.351175][    C1]  ? rcu_lock_release+0x5/0x20
[  284.356121][    C1]  ? read_lock_is_recursive+0x10/0x10
[  284.361623][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  284.366765][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  284.372794][    C1]  rcu_lock_acquire+0x2a/0x30
[  284.377576][    C1]  ? rcu_lock_acquire+0x5/0x30
[  284.382362][    C1]  batadv_nc_worker+0xc9/0x5c0
[  284.387233][    C1]  process_one_work+0x85f/0x1010
[  284.392231][    C1]  ? worker_detach_from_pool+0x240/0x240
[  284.397983][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  284.403391][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  284.408501][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  284.414080][    C1]  ? wq_worker_running+0x97/0x170
[  284.419226][    C1]  worker_thread+0xaa6/0x1290
[  284.423967][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  284.429254][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  284.435295][    C1]  kthread+0x436/0x520
[  284.439445][    C1]  ? rcu_lock_release+0x20/0x20
[  284.444755][    C1]  ? kthread_blkcg+0xd0/0xd0
[  284.449424][    C1]  ret_from_fork+0x1f/0x30
[  284.453963][    C1]  </TASK>
[  284.457031][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  284.464324][    C1] CPU: 1 PID: 4262 Comm: kworker/u4:6 Not tainted syzkaller #0
[  284.471881][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  284.482051][    C1] Workqueue: bat_events batadv_nc_worker
[  284.487868][    C1] Call Trace:
[  284.491175][    C1]  <IRQ>
[  284.494064][    C1]  dump_stack_lvl+0x188/0x250
[  284.498760][    C1]  ? show_regs_print_info+0x20/0x20
[  284.503979][    C1]  ? load_image+0x400/0x400
[  284.508521][    C1]  panic+0x2e5/0x810
[  284.512444][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  284.516980][    C1]  ? ret_from_fork+0x1f/0x30
[  284.521601][    C1]  ? copy_from_user_nofault+0x160/0x1c0
[  284.527172][    C1]  __warn+0x248/0x2b0
[  284.531304][    C1]  ? copy_from_user_nofault+0x160/0x1c0
[  284.536876][    C1]  report_bug+0x1b7/0x2e0
[  284.541249][    C1]  handle_bug+0x3a/0x70
[  284.545616][    C1]  exc_invalid_op+0x16/0x40
[  284.550135][    C1]  asm_exc_invalid_op+0x16/0x20
[  284.555101][    C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0
[  284.561281][    C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
[  284.580904][    C1] RSP: 0018:ffffc90000dcfec8 EFLAGS: 00010246
[  284.587001][    C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff888021f91dc0
[  284.595167][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  284.603153][    C1] RBP: 0000000000000000 R08: ffffc90000dd02f7 R09: ffffc90000dd02c4
[  284.611141][    C1] R10: dffffc0000000000 R11: fffff520001ba05f R12: ffff888021f93548
[  284.619220][    C1] R13: ffffc90001199030 R14: ffffc90000dcff28 R15: 0000000000000000
[  284.627308][    C1]  ? copy_from_user_nofault+0x160/0x1c0
[  284.632893][    C1]  ? copy_from_user_nofault+0x160/0x1c0
[  284.638618][    C1]  bpf_probe_read_user+0x26/0x70
[  284.643580][    C1]  ? bpf_flow_dissect+0x12b/0x3f0
[  284.648630][    C1]  ? __skb_flow_dissect+0x792/0x60b0
[  284.653943][    C1]  ? __lock_acquire+0x13bc/0x7d10
[  284.659109][    C1]  ? mark_lock+0x94/0x320
[  284.663565][    C1]  ? __lock_acquire+0x12e8/0x7d10
[  284.668664][    C1]  ? bpf_flow_dissect+0x3f0/0x3f0
[  284.673821][    C1]  ? perf_swevent_get_recursion_context+0xda/0x150
[  284.680350][    C1]  ? perf_trace_buf_alloc+0x12c/0x300
[  284.685775][    C1]  ? verify_lock_unused+0x140/0x140
[  284.690998][    C1]  ? perf_trace_lock_acquire+0x1a0/0x3e0
[  284.696741][    C1]  ? ___might_sleep+0x610/0x610
[  284.701693][    C1]  ? mark_lock+0x94/0x320
[  284.706042][    C1]  ? mark_lock+0x94/0x320
[  284.710389][    C1]  ? __lock_acquire+0x12e8/0x7d10
[  284.715458][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  284.721402][    C1]  ? verify_lock_unused+0x140/0x140
[  284.726716][    C1]  ? perf_trace_lock_acquire+0x340/0x3e0
[  284.732380][    C1]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  284.738988][    C1]  ? verify_lock_unused+0x140/0x140
[  284.744209][    C1]  ? ___skb_get_hash+0x55/0x680
[  284.749105][    C1]  ? __skb_get_hash+0xd2/0x270
[  284.753981][    C1]  ? __skb_get_hash_symmetric+0x3b0/0x3b0
[  284.759727][    C1]  ? rcu_lock_release+0x9/0x20
[  284.764550][    C1]  ? netdev_pick_tx+0x335/0xad0
[  284.769430][    C1]  ? netdev_core_pick_tx+0x12e/0x2e0
[  284.774737][    C1]  ? __dev_queue_xmit+0x756/0x2f80
[  284.779862][    C1]  ? dev_queue_xmit+0x20/0x20
[  284.784615][    C1]  ? memcpy+0x3c/0x60
[  284.788597][    C1]  ? __copy_skb_header+0x3ba/0x4f0
[  284.793732][    C1]  ? __skb_clone+0x480/0x790
[  284.798320][    C1]  ? hsr_addr_subst_dest+0x1d5/0x500
[  284.803773][    C1]  ? skb_clone+0x1f1/0x350
[  284.808181][    C1]  ? hsr_forward_skb+0xfd2/0x1700
[  284.813227][    C1]  ? prp_fill_frame_info+0x660/0x660
[  284.818616][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[  284.823654][    C1]  ? memset+0x1e/0x40
[  284.827645][    C1]  ? __skb_pad+0x407/0x620
[  284.832061][    C1]  ? send_hsr_supervision_frame+0x5f7/0xb80
[  284.837949][    C1]  ? hsr_announce+0x168/0x310
[  284.842664][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.847699][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.852717][    C1]  ? call_timer_fn+0x17b/0x540
[  284.857474][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.862493][    C1]  ? __run_timers+0x800/0x800
[  284.867169][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  284.872401][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  284.877597][    C1]  ? hsr_dev_finalize+0x870/0x870
[  284.882627][    C1]  ? __run_timers+0x53e/0x800
[  284.887327][    C1]  ? detach_timer+0x2b0/0x2b0
[  284.892094][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  284.898166][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  284.903020][    C1]  ? ktime_get_real_ts64+0x440/0x440
[  284.908306][    C1]  ? run_timer_softirq+0x63/0xf0
[  284.913338][    C1]  ? handle_softirqs+0x339/0x830
[  284.918274][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  284.923207][    C1]  ? do_softirq+0x210/0x210
[  284.927812][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  284.933044][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  284.937899][    C1]  ? irq_exit_rcu+0x20/0x20
[  284.942586][    C1]  ? irq_exit_rcu+0x5/0x20
[  284.947001][    C1]  ? sysvec_apic_timer_interrupt+0xa0/0xc0
[  284.952816][    C1]  </IRQ>
[  284.955827][    C1]  <TASK>
[  284.958749][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  284.964987][    C1]  ? lock_acquire+0x208/0x400
[  284.969668][    C1]  ? rcu_lock_release+0x5/0x20
[  284.974434][    C1]  ? read_lock_is_recursive+0x10/0x10
[  284.979887][    C1]  ? ___might_sleep+0x610/0x610
[  284.984738][    C1]  ? rcu_lock_acquire+0x2a/0x30
[  284.989754][    C1]  ? rcu_lock_acquire+0x5/0x30
[  284.994832][    C1]  ? trace_call_bpf+0xf9/0x5b0
[  284.999730][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  285.005631][    C1]  ? mark_lock+0x94/0x320
[  285.009949][    C1]  ? perf_trace_run_bpf_submit+0x79/0x1c0
[  285.015658][    C1]  ? perf_trace_lock_acquire+0x340/0x3e0
[  285.021289][    C1]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  285.027937][    C1]  ? sync_rcu_exp_done_unlocked+0x140/0x140
[  285.033945][    C1]  ? lock_acquire+0x3d7/0x400
[  285.038635][    C1]  ? rcu_lock_acquire+0x5/0x30
[  285.043418][    C1]  ? rcu_lock_release+0x5/0x20
[  285.048265][    C1]  ? read_lock_is_recursive+0x10/0x10
[  285.053731][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  285.058780][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  285.064919][    C1]  ? rcu_lock_acquire+0x2a/0x30
[  285.069861][    C1]  ? rcu_lock_acquire+0x5/0x30
[  285.074692][    C1]  ? batadv_nc_worker+0xc9/0x5c0
[  285.079639][    C1]  ? process_one_work+0x85f/0x1010
[  285.085059][    C1]  ? worker_detach_from_pool+0x240/0x240
[  285.090735][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  285.096113][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  285.101281][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  285.106998][    C1]  ? wq_worker_running+0x97/0x170
[  285.112023][    C1]  ? worker_thread+0xaa6/0x1290
[  285.116884][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  285.122096][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  285.127988][    C1]  ? kthread+0x436/0x520
[  285.132221][    C1]  ? rcu_lock_release+0x20/0x20
[  285.137159][    C1]  ? kthread_blkcg+0xd0/0xd0
[  285.141740][    C1]  ? ret_from_fork+0x1f/0x30
[  285.146356][    C1]  </TASK>
[  285.149807][    C1] Kernel Offset: disabled
[  285.154465][    C1] Rebooting in 86400 seconds..