last executing test programs:

3.821878794s ago: executing program 2 (id=3595):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x56}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[], 0x48)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/38, 0x26}, {0x0}], 0x3, &(0x7f0000001f80)=""/4096, 0x1000}, 0x2)

3.475798763s ago: executing program 0 (id=3597):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="bb", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0)

3.414516974s ago: executing program 2 (id=3599):
r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r4, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000c40)=[0x0, 0x0], <r6=>0x0, 0x6c, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d80), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x9, &(0x7f0000000180)=[{&(0x7f0000000080)="ba", 0x1}, {&(0x7f00000000c0)="5b0ac91183c6d146f005b006", 0xc}], 0x2}, 0x4008804)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002200)={&(0x7f0000001040)="562561cbca796c46550e94c4e35bebb9829a29fb81dd23df68735dba7e57df0f2de50bcc96d81f9a29742e6970c8b1c62180437ebdf52c86b35a8d2166ff90c3e73461052c7b3849f02a6e47e35c98e1f7da6366", &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)="b7015ae5dc021583e11aca836c5c69b5cf101e738f97accfed13", &(0x7f0000002100)="d4b4fe96890a1bf046eb9c9e2748650f7dcc32c254467dc535118e766e8e0242798f34552b67626fb9249715e2d812c4f59fe0fe42c6c3364c2dd0d60c5d2070dc1ba4", 0xffff827b}, 0x38)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002680)={@cgroup=r8, 0x10, 0x1, 0x2, &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000025c0)=[0x0, 0x0, 0x0], &(0x7f0000002600), &(0x7f0000002640)=[0x0, 0x0, 0x0]}, 0x40)
r9 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x7, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @mcast2, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x3, 0x10, &(0x7f0000002c80)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000515f3bfab7a58b1acaa9adac521b3d08f1f1fe7f9105260fa4bfc2bd5e0da3885979ceed7efc0a26949d9a922d89d7ee363fb1fc2dd33d6045c2d2d8168dda574be743457dba67580f7808e18bb570f2488661a61844"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000003280)={r4, &(0x7f00000003c0)="f771924becd74732264741cd704b75cda3b00ae0dee3fed8a37ef4024380ddc4a196e75c"}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000022c0)={r4, 0x58, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0xa, 0x0, 0x0, 0x12, 0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x0]}}, &(0x7f0000002340)=""/118, 0x37, 0x76, 0x1, 0x5a31, 0x10000, @value=r10}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x6, '\x00', r12, r13, 0x2, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x3, 0x16, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000003240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r14)
syz_clone(0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.360647555s ago: executing program 0 (id=3600):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000f61d40f299b258276b0896800"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x910, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0}, 0x18011, 0x0, 0xfffffffc, 0x3, 0xac, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(0x0, 0x0, 0x1004, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f00000009c0)={'wlan1\x00', @random='\x00\x00  \x00'})
perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200010000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x6, 0x100000, 0x1, 0x2, 0x0, 0x84}, 0x0, 0xffffff7fffefffff, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x400, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xe, 0xe, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006300000095"], &(0x7f0000000f40)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000cc0)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpid()
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000090000002f4900000500000041000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000010000005cd3ef79c4c3f182aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0xca, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000980)={r6, &(0x7f00000009c0), &(0x7f0000000a00)=""/16}, 0x20)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001240), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r7, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500))
recvmsg$unix(r3, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x12000)
socketpair(0x1e, 0x1, 0x0, &(0x7f00000015c0)={0x0, <r10=>0x0})
setsockopt$sock_attach_bpf(r10, 0x10f, 0x8a, &(0x7f0000001600)=r9, 0x4)

2.533471436s ago: executing program 4 (id=3604):
r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x86}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x5, 0x252, &(0x7f0000000e00)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, r0, 0x0, 0x8, &(0x7f0000000f00)='.[)@[[{\x00'}, 0x30)

2.409335759s ago: executing program 4 (id=3607):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004d9fbbdb62836a9f89d2561f8574069258eb5f362c0bedd469da73034ff7c1f9288cd092a540a98fbd62a71924d04ba25e2d9d136aafb680dfbb216723485d97d67d215d8d3dd7281afce27101d70569ac07b1ec92f07a898b18bb29d3c6a5bf235bb1848ce5e3e3e58ce70f7cae4ec0f7c73509d050d3f934491c60f57ae833db51fc814a589e4c0e5820269a94e3bea2c25b8e7d4ca89257fd17d036654fff5895e410b1ba7cd6433e3a4946fec4a658f153815c55f4fe0bbccd4f2f642a1e246435a80fb16487a71378f57ef9e500"/246], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000640)={r5})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x80000000001}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1600000002000000ffffff7f0700000000120000", @ANYRES32=0x1, @ANYBLOB="9100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0xb, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000003400000000000000e205000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000eaff0000850000000c000000b7000000000000004cc6f8ff1000b70018460000fbffffffe075a9edf13fd59e8c8076cfc2bee100"], &(0x7f0000001b40)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x79dd3cd0c550a4e5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x1, 0x7, 0x17f, 0x27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[r8], &(0x7f0000001c00)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x7}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c40)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305828, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20)
ioctl$TUNGETIFF(r9, 0x800454d2, &(0x7f0000001d40)={'veth1_to_bridge\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="f8aa000004000030000000000a00008aa3000000", @ANYRES32=r10, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="01000000040000000300"/28], 0x50)
openat$cgroup_type(r9, &(0x7f0000001e00), 0x2, 0x0)
sendmsg$tipc(r7, &(0x7f0000000e00)={0x0, 0xfffffff5, &(0x7f0000000e40)=[{&(0x7f0000000e80)="a2", 0xfffffdef}], 0x1}, 0x0)

2.408687679s ago: executing program 3 (id=3608):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41) (fail_nth: 2)

2.072852988s ago: executing program 0 (id=3609):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x56}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x5, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000640)=""/238}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[], 0x48)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/38, 0x26}, {0x0}], 0x3, &(0x7f0000001f80)=""/4096, 0x1000}, 0x2)

2.072263148s ago: executing program 3 (id=3611):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000380)='cga8:\xf0\xe6'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000400)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xd, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.067502318s ago: executing program 2 (id=3612):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x14, 0x1}, 0x20)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2a, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x514, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x8, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000500)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nf\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f\x00'/231)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3c0e39f257b8a52a72c610dc5a0767db180000000000000010000001000000dc0000000000000000"], 0x18}, 0x440c0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000"], 0x0, 0x80}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

1.96840556s ago: executing program 3 (id=3614):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2c, 0x3, 0x0)
close(r0) (fail_nth: 1)

1.833823654s ago: executing program 0 (id=3615):
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000440)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01')
perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002a40)}], 0x1, &(0x7f0000002a80)=ANY=[@ANYRES32=0x0], 0x6b}, 0x0)
close(r1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ac0), 0x4)
close(0x3)
close(0xffffffffffffffff)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000002b00)='syz0\x00', 0x1ff)
socket$kcm(0x2c, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x2d, 0xee, &(0x7f0000002cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8912, &(0x7f0000002d40))
sendmsg$inet(r0, 0x0, 0x400c040)
sendmsg$inet(r0, &(0x7f0000002d80)={&(0x7f0000002dc0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002e00)=[{&(0x7f0000002e40)="d4", 0x1}], 0x1}, 0x8001)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="b1b27edac2aaae4c8b3673f1bababf0d5a2caa41b8a24c7ae5f2ab2fefa371a4cb4cd5183033cce00e597c4d98f4df5786e971f55369ca967251c4ed751c9369e1630efea679e790ae34b440f3019e", 0x4f}, {&(0x7f00000000c0)="14e3e7bf22c72ccd8fecfca5d8c7da3fe97db8cd33e7bd598a7192270a4a9b5ee4066245f65e6250382a3e3e9b2fdc776f57cfb6f5bfc0de72734c308088f5e93a30454a26a480c029e11154661eabe08f000e43487ba41615b834a41f034d658cbf4467d695561cf7ab9f3ce37f82d53fc344f341206737bf68568ebfe3515020438142a7434259a8c9b2a6b9eae31c378db9bafc513648f712289a3941e8f6bb4476105c9b32d6c77bbae6ecec498b8c45bae62775e8599f70618d25669c02ef1c5b3ee0c10178aca4d03b8f7475b284f2e17bb83556e9bfa62d61e1cc688b914c1e9f9d96becbd990854023b1760976b424e4c7d3ca3f", 0xf8}, {&(0x7f00000001c0)="4092a7fe366cd2dfa4ddf343112ecab528cf107fceb52dceed53ec45b0617bdd90e727a2ab360596cd65b99e6e70a66cae92814afadc0259b0295fc853a24b231b4e8d9e3504f62318790b2fdff65962cce4c8c2761dd9dcc98441a9f0f5a5e21ca7e75fa4b330d6eaec79119211f1d1bd2187696478eb13199276452375f35ab756079cc94b8369a12bc5249933db03945dd4cfce84de5768f86f2ee6402ee7c7db444c605f5f63a71b8cc86ceb5229b7b5a1a465cab54225aabf623a0688589baf0faaf9817c8aab173d0505b077a3d7e680b2e7ac8227c8530bc6ea1d53", 0xdf}, {&(0x7f00000002c0)="f4fc16eeb2360c0d0c9330fa7afbfd1f19b9bfadada4d6985999c471f158354021156a601244c36ffdfc226fe06cb18f44597d102e7c8ef16829b702e9847535293c290f6dd01a6839def1df501e4f35b27377c3663962ae74121abc099a4b05196bbbef2f6c24469cb08d401867b78530f1ad33aa6f0ba9283fe320e95b0123a6c1d6590499fe91b00f39ddf14bbae4812648226cfd09d2aad39b04a418db08bce54d6bda300a78f5c67d4db431f6e6327e0c211a395f60ec", 0xb9}, {&(0x7f0000000380)="800c841c52bd09ffca297e0c", 0xc}, {&(0x7f0000000580)="c751824ee68624dc616da2ac22bfa3dd241ff748bb030730240f1c18ba01dc59e6a5c53ce4ea2d0e70cccb1b9e3e7e75c46e060662bb3890d32b20e2edcc2e6557b4d0fa57ba9c1134a3a76d325d43558a422215353e08", 0x57}, {&(0x7f0000000600)="bd0171ca3060402cd745218aada1af1af86c3957579c92d16d91182c47499a6c6d5d4ff3", 0x24}], 0x7, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r3, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000003040)={0x1, 0x21, &(0x7f0000003100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003280)={r4, 0x58, &(0x7f00000032c0)}, 0x10)

1.398914235s ago: executing program 4 (id=3616):
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x66, &(0x7f0000000340)=""/102, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002900), 0x4)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000ff0f0000040000010700c7598e2c0000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32, @ANYRESDEC, @ANYBLOB="0100000003000000020000000a00"/28], 0x50)

1.398510045s ago: executing program 3 (id=3617):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d00)=[0x0, 0x0], 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000600)=ANY=[], 0x0, 0x56}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x6b, 0x0, 0x3, 0x7602, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x44, 0x10000}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, 0x100000000}, 0x0, 0x5, r0, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f0000000c80)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000cc0)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)

1.20926848s ago: executing program 2 (id=3619):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2c, 0x3, 0x0)
close(r0)

1.19415079s ago: executing program 4 (id=3620):
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0x1, &(0x7f0000000000)="2059123dca2d46e7387a156a693568b1d61ca58aa104ec48540c21883bbbb52ca1c268108190c166fdac1912d6e7012c1ea0f9e32ca6cbab9571acd2e1fe992078869754e6abb464017aa8c540f1d5204b12f44f189724973d68b029901e259b0fe8f7c5151c4e2a11763aa3ea8c85670b9c9193542412ec67f3c8ed810dc666", &(0x7f0000000080)=""/197}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xf8, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x81004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x80000000, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$kcm(0x2c, 0x3, 0x0)
close(r0)

1.159633601s ago: executing program 3 (id=3621):
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000008c0)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000900)={r0}, 0x8)
close(r1) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000940)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x7, 0xc, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='devices.list\x00', 0x26e1, 0x0)
close(r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r7}, &(0x7f0000001040), &(0x7f0000001080)}, 0x20) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000010c0)={r8}, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2020) (async)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r11}, &(0x7f00000004c0), &(0x7f0000000500)=r10}, 0x20)
sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x6000, &(0x7f0000000580)=[{&(0x7f00000005c0)='U', 0xa00120}], 0x1}, 0x3) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000600)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xaf\xcc\xeeR\xf2/\x00\x00E>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xcc\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
r13 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r13, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r13, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}, 0x0)

1.089543073s ago: executing program 1 (id=3622):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41)

1.059552134s ago: executing program 2 (id=3623):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)

1.045608954s ago: executing program 4 (id=3624):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1)

1.037479054s ago: executing program 1 (id=3625):
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0))
perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x56}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x5, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000640)=""/238}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[], 0x48)
r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000380)=""/40, 0x28}, {&(0x7f00000003c0)=""/38, 0x26}, {0x0}], 0x3, &(0x7f0000001f80)=""/4096, 0x1000}, 0x2)

924.202867ms ago: executing program 2 (id=3626):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000080))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x201000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000004d9fbbdb62836a9f89d2561f8574069258eb5f362c0bedd469da73034ff7c1f9288cd092a540a98fbd62a71924d04ba25e2d9d136aafb680dfbb216723485d97d67d215d8d3dd7281afce27101d70569ac07b1ec92f07a898b18bb29d3c6a5bf235bb1848ce5e3e3e58ce70f7cae4ec0f7c73509d050d3f934491c60f57ae833db51fc814a589e4c0e5820269a94e3bea2c25b8e7d4ca89257fd17d036654fff5895e410b1ba7cd6433e3a4946fec4a658f153815c55f4fe0bbccd4f2f642a1e246435a80fb16487a71378f57ef9e500"/246], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r2, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000640)={r5})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000ac0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x80000000001}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="1600000002000000ffffff7f0700000000120000", @ANYRES32=0x1, @ANYBLOB="9100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0xb, &(0x7f0000001ac0)=ANY=[@ANYBLOB="180000003400000000000000e205000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7030000eaff0000850000000c000000b7000000000000004cc6f8ff1000b70018460000fbffffffe075a9edf13fd59e8c8076cfc2bee100"], &(0x7f0000001b40)='GPL\x00', 0x401, 0x0, 0x0, 0x41100, 0x79dd3cd0c550a4e5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b80)={0x1, 0x7, 0x17f, 0x27}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001bc0)=[r9], &(0x7f0000001c00)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x7}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c40)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40305828, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20)
ioctl$TUNGETIFF(r10, 0x800454d2, &(0x7f0000001d40)={'veth1_to_bridge\x00'})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="f8aa000004000030000000000a00008aa3000000", @ANYRES32=r11, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="01000000040000000300"/28], 0x50)
recvmsg(r7, &(0x7f0000000b80)={&(0x7f0000000bc0)=@hci, 0x19, &(0x7f0000000c40)=[{&(0x7f0000000c80)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r8, &(0x7f0000000e00)={0x0, 0xfffffff5, &(0x7f0000000e40)=[{&(0x7f0000000e80)="a2", 0xfffffdef}], 0x1}, 0x0)

845.519969ms ago: executing program 4 (id=3627):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x14, 0x1}, 0x20)
socket$kcm(0x2, 0x1000000000000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2a, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x514, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x41cf, 0xffffffffffffe6ff}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x8, 0x1, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000500)='\x02;\xe5\b\x00\x00\x9c\x00\xe4c\xbf\x00\x00\x00\x00PbS\xf2\"j\x88\xe7\xe1\x04\xd8\x92yJ\xba\xe0\xaf(\xda}\xb6p\xcb\xbd\f&\xb3]\t\x81\xd3\x0f\x18\xc9X\xba:\x1f\x94!\x8f\xd6F\xbar\xa8\xb8\xfc\x92\xc0\xfb\xdbd*f\x9c\ap\xd6\x1c,\x99\x8fWn\x16\xb9\x1el\xf4\xc8\x16\xc3\x05\x01\x9c\xa8\xd2\xe7J\xd0\xa5\xa8\xf4\xc0DL\x85ju\xe6\xdc\t\x15b\x12\xda\x83\xc5\xafQ\xed\x11\xda\x03\x05K|~B\xfe\xb6U\xae\xb1J\xc8\xe6\"t\x11N\x7f=\x9e\xbd\xd1\x8d\x90I\xbeb\xf6\x0f]\xa5\xad\xb3\xd0\x80[\x92_\xca^8\x80\xa8\xd1\x9d\xe0Zu\x9f\xeb\xb7\xceM ;`37+P\xbc\xcafTT\xf7\x0f\xf1\xa7c<\x87\xf6\nf\x06\xdc\xb7\xf8\x12n)\x8df\xb3\xa8l\x92\xdcz]\x1c/\xa5/\x1f\x00'/231)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3c0e39f257b8a52a72c610dc5a0767db180000000000000010000001000000dc0000000000000000"], 0x18}, 0x440c0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8906, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x400, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x5, 0xc3, &(0x7f0000000780)=""/195}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x6, 0x8, &(0x7f0000000340)=r4, 0x4)
sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000"], 0x0, 0x80}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000100)=r5, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

691.078063ms ago: executing program 1 (id=3628):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00100000000000000000180000000000751699d004d485722cee2c46ff549557e3596104320400"/59, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000140)=r1, 0x4)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000080)=r2, 0x4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup=r2, r2, 0x21, 0xb, r2, @void, @value=r2}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0xffffff5e, &(0x7f0000000540)=[{&(0x7f0000000580)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312d"], &(0x7f0000001440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r5, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000001500)="b9fb0307683a06", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="99", 0x1}], 0x1}, 0x844)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0xeafbff3, &(0x7f00000002c0)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

511.151107ms ago: executing program 0 (id=3629):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffd, 0x8, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffff01, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x54)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x100)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x1, 0x4, 0x8, 0x4, 0x0, 0x3, 0x200, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3e00, 0x0, @perf_config_ext={0x1f94, 0x8000000000000000}, 0x1004a0, 0xe, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8, 0x0, 0x7}, r4, 0x1, r3, 0x4)

400.16266ms ago: executing program 1 (id=3630):
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x1, 0x66, &(0x7f0000000340)=""/102, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10}, 0x94)
r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002900), 0x4)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000ff0f0000040000010700c7598e2c0000", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32, @ANYRESDEC, @ANYBLOB="0100000003000000020000000a00"/28], 0x50)

252.038384ms ago: executing program 0 (id=3631):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d00)=[0x0, 0x0], 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000600)=ANY=[], 0x0, 0x56}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x13, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x0, 0x10, 0xfffffef3, &(0x7f0000000c80)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000cc0)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x36}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)

225.517534ms ago: executing program 1 (id=3632):
r0 = getpid()
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x5, 0x252, &(0x7f0000000e00)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={r0, r1, 0x0, 0x8, &(0x7f0000000f00)='.[)@[[{\x00'}, 0x30)

40.097769ms ago: executing program 1 (id=3633):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0], 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6}, 0x94) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000ac0)={'gre0\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000b40)) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (rerun: 32)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x9, 0x0, &(0x7f0000000700)="000000000000000002", 0x0}, 0x50) (async, rerun: 64)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000022c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739a00fe00000000b50a0200550d0000639af8ff00000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b6090300080000004608f0ff760000001801000020756c2500000000002020207b94f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff85000000060000007f9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 3 (id=3634):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000500)='GPL\x00'}, 0x65)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x3, 0x0, &(0x7f0000000f00)='GPL\x00', 0x5}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000f40)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000fc0))
sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000b40)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="80", 0x26892}], 0x1}, 0xfc)
sendmsg$inet(r1, &(0x7f0000000d40)={&(0x7f0000000d80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000e00)='Q', 0x1}], 0x1}, 0x4000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xf2, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x145, 0x145, 0x5, [@enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0x6, 0x7}, {0xc, 0x800}, {0x7, 0x5}, {0x3, 0xfffff8e7}, {0xe, 0x7fff}, {0x1, 0x2}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x2, [{0x1, 0xdfe6, 0x23c}, {0x3, 0xbecaf6b}, {0x5, 0x10, 0x4}, {0x3, 0x0, 0x7}, {0x3, 0x101, 0x6}], "c2d9"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xcbe}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @datasec={0x10, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x2, 0xfffffff8}], "db65b7"}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x7, [{0x1, 0x2, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x8d59}}, @union={0xa, 0x4, 0x0, 0x5, 0x0, 0x7, [{0xa, 0x0, 0xf0b}, {0x5, 0x4, 0x63}, {0x10, 0x5, 0x6}, {0x9, 0x1, 0x2}]}, @func={0xa, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f00000008c0)=""/157, 0x165, 0x9d, 0x0, 0x5}, 0x28)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffff00, 0x18}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000c00)=r8, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x174}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xef, &(0x7f0000000140)=""/239, 0x40f00, 0x2, '\x00', r3, 0x17, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x1, 0x9, 0x44a, 0x6}, 0x10, 0x29a83, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[r5, r6, r5], &(0x7f0000000b00)=[{0x3, 0x2, 0xb, 0x5}], 0x10, 0xffffff01}, 0x94)

kernel console output (not intermixed with test programs):

.
[  273.125855][T10644] netlink: 'syz.3.2327': attribute type 10 has an invalid length.
[  273.133781][T10624] can: request_module (can-proto-3) failed.
[  273.192580][T10624] can: request_module (can-proto-3) failed.
[  273.243232][T10624] can: request_module (can-proto-3) failed.
[  273.272399][T10653] netlink: 'syz.4.2326': attribute type 3 has an invalid length.
[  273.294805][T10653] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2326'.
[  273.336661][T10624] can: request_module (can-proto-3) failed.
[  273.435866][T10624] can: request_module (can-proto-3) failed.
[  273.951201][T10676] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2338'.
[  276.613458][T10689] FAULT_INJECTION: forcing a failure.
[  276.613458][T10689] name failslab, interval 1, probability 0, space 0, times 0
[  276.639700][T10689] CPU: 1 PID: 10689 Comm: syz.4.2342 Not tainted syzkaller #0
[  276.647241][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  276.657329][T10689] Call Trace:
[  276.660632][T10689]  <TASK>
[  276.663595][T10689]  dump_stack_lvl+0x188/0x250
[  276.668310][T10689]  ? show_regs_print_info+0x20/0x20
[  276.673538][T10689]  ? load_image+0x410/0x410
[  276.678070][T10689]  ? __lock_acquire+0x7d40/0x7d40
[  276.683141][T10689]  should_fail+0x383/0x4b0
[  276.687595][T10689]  should_failslab+0x5/0x20
[  276.692128][T10689]  slab_pre_alloc_hook+0x51/0xc0
[  276.697100][T10689]  ? __alloc_file+0x25/0x240
[  276.701718][T10689]  kmem_cache_alloc+0x3d/0x280
[  276.706526][T10689]  __alloc_file+0x25/0x240
[  276.710978][T10689]  alloc_empty_file+0x90/0x180
[  276.715772][T10689]  alloc_file+0x5c/0x510
[  276.720047][T10689]  ? do_raw_spin_unlock+0x11d/0x230
[  276.725275][T10689]  alloc_file_pseudo+0x180/0x200
[  276.730239][T10689]  ? alloc_empty_file_noaccount+0x80/0x80
[  276.735987][T10689]  ? __lock_acquire+0x7d40/0x7d40
[  276.741032][T10689]  ? __local_bh_enable_ip+0x136/0x1c0
[  276.746427][T10689]  ? _local_bh_enable+0xa0/0xa0
[  276.751296][T10689]  anon_inode_getfile+0xc1/0x1a0
[  276.756256][T10689]  bpf_link_prime+0x125/0x270
[  276.760954][T10689]  bpf_xdp_link_attach+0x1f2/0x480
[  276.766091][T10689]  ? dev_xdp_prog_id+0xe0/0xe0
[  276.770890][T10689]  link_create+0x4e4/0x660
[  276.775335][T10689]  __sys_bpf+0x645/0x6f0
[  276.779630][T10689]  ? bpf_link_show_fdinfo+0x380/0x380
[  276.785039][T10689]  ? perf_trace_preemptirq_template+0x2bc/0x360
[  276.791312][T10689]  __x64_sys_bpf+0x78/0x90
[  276.795757][T10689]  do_syscall_64+0x4c/0xa0
[  276.800185][T10689]  ? clear_bhb_loop+0x30/0x80
[  276.804879][T10689]  ? clear_bhb_loop+0x30/0x80
[  276.809579][T10689]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  276.815506][T10689] RIP: 0033:0x7fa6ccee5559
[  276.819942][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  276.840031][T10689] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  276.848599][T10689] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  276.856600][T10689] RDX: 0000000000000040 RSI: 0000200000000a40 RDI: 000000000000001c
[  276.864595][T10689] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  276.872725][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.880728][T10689] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  276.888740][T10689]  </TASK>
[  277.238428][T10704] netlink: 'syz.3.2348': attribute type 3 has an invalid length.
[  277.339691][T10704] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2348'.
[  277.930722][T10708] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2350'.
[  277.952204][T10710] netlink: 'syz.4.2351': attribute type 21 has an invalid length.
[  277.963040][T10710] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2351'.
[  278.034412][T10710] netlink: 'syz.4.2351': attribute type 4 has an invalid length.
[  278.052351][T10710] netlink: 'syz.4.2351': attribute type 3 has an invalid length.
[  278.064756][T10710] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2351'.
[  278.092428][T10714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2350'.
[  278.137552][T10717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.167722][T10713] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2351'.
[  279.273650][T10727] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2356'.
[  279.489706][T10745] netlink: 'syz.0.2364': attribute type 21 has an invalid length.
[  279.498484][T10745] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2364'.
[  279.512956][T10745] netlink: 'syz.0.2364': attribute type 4 has an invalid length.
[  279.521072][T10745] netlink: 'syz.0.2364': attribute type 3 has an invalid length.
[  279.534337][T10745] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2364'.
[  279.550949][T10751] netlink: 'syz.3.2365': attribute type 3 has an invalid length.
[  279.567070][T10751] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2365'.
[  280.382943][T10763] netlink: 'syz.2.2369': attribute type 1 has an invalid length.
[  282.703859][T10778] __nla_validate_parse: 3 callbacks suppressed
[  282.703880][T10778] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2373'.
[  282.805030][T10776] netlink: 'syz.0.2375': attribute type 5 has an invalid length.
[  282.996888][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.108487][T10782] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2376'.
[  285.560097][T10791] FAULT_INJECTION: forcing a failure.
[  285.560097][T10791] name failslab, interval 1, probability 0, space 0, times 0
[  285.642543][T10791] CPU: 1 PID: 10791 Comm: syz.3.2379 Not tainted syzkaller #0
[  285.650122][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.660655][T10791] Call Trace:
[  285.663993][T10791]  <TASK>
[  285.666970][T10791]  dump_stack_lvl+0x188/0x250
[  285.671875][T10791]  ? show_regs_print_info+0x20/0x20
[  285.677215][T10791]  ? load_image+0x410/0x410
[  285.681784][T10791]  ? __might_sleep+0xf0/0xf0
[  285.686579][T10791]  ? __lock_acquire+0x7d40/0x7d40
[  285.691644][T10791]  should_fail+0x383/0x4b0
[  285.696103][T10791]  should_failslab+0x5/0x20
[  285.700637][T10791]  slab_pre_alloc_hook+0x51/0xc0
[  285.705615][T10791]  __kmalloc_node_track_caller+0x68/0x3a0
[  285.711366][T10791]  ? netlink_sendmsg+0x654/0xbe0
[  285.716316][T10791]  ? __alloc_skb+0xf4/0x750
[  285.720838][T10791]  ? netlink_sendmsg+0x654/0xbe0
[  285.725795][T10791]  __alloc_skb+0x22c/0x750
[  285.730238][T10791]  netlink_sendmsg+0x654/0xbe0
[  285.735029][T10791]  ? netlink_getsockopt+0x570/0x570
[  285.740256][T10791]  ? aa_sock_msg_perm+0x94/0x150
[  285.745330][T10791]  ? apparmor_socket_sendmsg+0x173/0x230
[  285.751030][T10791]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  285.756428][T10791]  ? security_socket_sendmsg+0x7c/0xa0
[  285.762091][T10791]  ? netlink_getsockopt+0x570/0x570
[  285.767500][T10791]  ____sys_sendmsg+0x5be/0x8f0
[  285.772367][T10791]  ? __sys_sendmsg_sock+0x30/0x30
[  285.777609][T10791]  ? import_iovec+0x6f/0xa0
[  285.782322][T10791]  ___sys_sendmsg+0x236/0x2e0
[  285.787034][T10791]  ? __sys_sendmsg+0x290/0x290
[  285.791858][T10791]  __se_sys_sendmsg+0x1b7/0x2a0
[  285.796763][T10791]  ? __x64_sys_sendmsg+0x80/0x80
[  285.801721][T10791]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  285.807734][T10791]  ? lockdep_hardirqs_on+0x94/0x140
[  285.812964][T10791]  do_syscall_64+0x4c/0xa0
[  285.817403][T10791]  ? clear_bhb_loop+0x30/0x80
[  285.822102][T10791]  ? clear_bhb_loop+0x30/0x80
[  285.826806][T10791]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  285.832733][T10791] RIP: 0033:0x7fa3f9453559
[  285.837187][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.857947][T10791] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.866406][T10791] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  285.874398][T10791] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003
[  285.882386][T10791] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  285.890391][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.898377][T10791] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  285.906383][T10791]  </TASK>
[  285.923077][T10796] netlink: 'syz.4.2382': attribute type 21 has an invalid length.
[  285.932501][T10796] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2382'.
[  285.947140][T10796] netlink: 'syz.4.2382': attribute type 4 has an invalid length.
[  285.956658][T10796] netlink: 'syz.4.2382': attribute type 3 has an invalid length.
[  285.968466][T10796] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2382'.
[  286.013549][T10796] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2382'.
[  286.383670][T10815] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2385'.
[  286.616995][T10826] FAULT_INJECTION: forcing a failure.
[  286.616995][T10826] name failslab, interval 1, probability 0, space 0, times 0
[  286.649122][T10826] CPU: 0 PID: 10826 Comm: syz.2.2390 Not tainted syzkaller #0
[  286.656672][T10826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  286.666892][T10826] Call Trace:
[  286.670211][T10826]  <TASK>
[  286.673275][T10826]  dump_stack_lvl+0x188/0x250
[  286.678021][T10826]  ? show_regs_print_info+0x20/0x20
[  286.683276][T10826]  ? load_image+0x410/0x410
[  286.687830][T10826]  ? __might_sleep+0xf0/0xf0
[  286.692458][T10826]  ? __lock_acquire+0x7d40/0x7d40
[  286.697572][T10826]  should_fail+0x383/0x4b0
[  286.702034][T10826]  should_failslab+0x5/0x20
[  286.706562][T10826]  slab_pre_alloc_hook+0x51/0xc0
[  286.711652][T10826]  __kmalloc+0x6b/0x340
[  286.715844][T10826]  ? tomoyo_encode+0x28a/0x550
[  286.721220][T10826]  tomoyo_encode+0x28a/0x550
[  286.725901][T10826]  tomoyo_realpath_from_path+0x5a2/0x5e0
[  286.731610][T10826]  tomoyo_path_number_perm+0x251/0x6b0
[  286.737176][T10826]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  286.742702][T10826]  ? ksys_write+0x1d4/0x260
[  286.747312][T10826]  security_file_ioctl+0x6c/0xa0
[  286.752306][T10826]  __se_sys_ioctl+0x48/0x170
[  286.756987][T10826]  do_syscall_64+0x4c/0xa0
[  286.761585][T10826]  ? clear_bhb_loop+0x30/0x80
[  286.766324][T10826]  ? clear_bhb_loop+0x30/0x80
[  286.771311][T10826]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  286.777273][T10826] RIP: 0033:0x7fa0d39aa559
[  286.781751][T10826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.801573][T10826] RSP: 002b:00007fa0d1be1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  286.810026][T10826] RAX: ffffffffffffffda RBX: 00007fa0d3c32090 RCX: 00007fa0d39aa559
[  286.818045][T10826] RDX: 0000200000000100 RSI: 000000000000541b RDI: 0000000000000003
[  286.826087][T10826] RBP: 00007fa0d1be1090 R08: 0000000000000000 R09: 0000000000000000
[  286.834278][T10826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.842305][T10826] R13: 00007fa0d3c32128 R14: 00007fa0d3c32090 R15: 00007ffe9a75e8e8
[  286.850361][T10826]  </TASK>
[  286.887096][T10826] ERROR: Out of memory at tomoyo_realpath_from_path.
[  287.179246][T10836] netlink: 'syz.2.2393': attribute type 3 has an invalid length.
[  287.287365][T10836] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2393'.
[  287.392526][T10847] netlink: 'syz.4.2395': attribute type 21 has an invalid length.
[  287.473203][T10847] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2395'.
[  287.564974][T10847] netlink: 'syz.4.2395': attribute type 4 has an invalid length.
[  287.603567][T10847] netlink: 'syz.4.2395': attribute type 3 has an invalid length.
[  287.627526][T10847] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2395'.
[  287.644656][T10848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2395'.
[  288.657519][T10891] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2405'.
[  288.706023][T10890] netlink: 'syz.4.2407': attribute type 3 has an invalid length.
[  288.722817][T10890] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2407'.
[  289.682820][T10922] netlink: 'syz.4.2420': attribute type 9 has an invalid length.
[  289.732163][T10922] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2420'.
[  289.750378][T10928] FAULT_INJECTION: forcing a failure.
[  289.750378][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.804562][T10932] netlink: 'syz.3.2425': attribute type 10 has an invalid length.
[  289.846333][T10928] CPU: 1 PID: 10928 Comm: syz.1.2424 Not tainted syzkaller #0
[  289.850709][T10932] device bridge_slave_1 left promiscuous mode
[  289.853976][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.853996][T10928] Call Trace:
[  289.854012][T10928]  <TASK>
[  289.854024][T10928]  dump_stack_lvl+0x188/0x250
[  289.854066][T10928]  ? show_regs_print_info+0x20/0x20
[  289.886590][T10928]  ? load_image+0x410/0x410
[  289.891180][T10928]  ? __lock_acquire+0x7d40/0x7d40
[  289.896286][T10928]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  289.902008][T10928]  should_fail+0x383/0x4b0
[  289.906529][T10928]  _copy_from_user+0x2e/0x170
[  289.911289][T10928]  wext_handle_ioctl+0xc4/0x1d0
[  289.916235][T10928]  ? call_commit_handler+0xf0/0xf0
[  289.921478][T10928]  sock_ioctl+0x143/0x700
[  289.925891][T10928]  ? sock_poll+0x420/0x420
[  289.927857][T10932] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.930402][T10928]  ? bpf_lsm_file_ioctl+0x5/0x10
[  289.942504][T10928]  ? security_file_ioctl+0x7c/0xa0
[  289.947690][T10928]  ? sock_poll+0x420/0x420
[  289.952311][T10928]  __se_sys_ioctl+0xfa/0x170
[  289.957087][T10928]  do_syscall_64+0x4c/0xa0
[  289.961673][T10928]  ? clear_bhb_loop+0x30/0x80
[  289.966526][T10928]  ? clear_bhb_loop+0x30/0x80
[  289.971290][T10928]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  289.977257][T10928] RIP: 0033:0x7f25f5847559
[  289.981830][T10928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.002024][T10928] RSP: 002b:00007f25f3a9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  290.010568][T10928] RAX: ffffffffffffffda RBX: 00007f25f5acefa0 RCX: 00007f25f5847559
[  290.018622][T10928] RDX: 0000200000000580 RSI: 0000000000008b04 RDI: 0000000000000005
[  290.026768][T10928] RBP: 00007f25f3a9f090 R08: 0000000000000000 R09: 0000000000000000
[  290.035095][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.043127][T10928] R13: 00007f25f5acf038 R14: 00007f25f5acefa0 R15: 00007fffebc67368
[  290.051197][T10928]  </TASK>
[  290.251036][T10937] netlink: 'syz.3.2426': attribute type 3 has an invalid length.
[  290.302200][T10937] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2426'.
[  290.557423][T10952] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2430'.
[  290.704871][T10956] netlink: 'syz.0.2444': attribute type 3 has an invalid length.
[  290.757017][T10956] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2444'.
[  291.185174][T10973] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2438'.
[  291.659249][T10996] netlink: 'syz.2.2448': attribute type 3 has an invalid length.
[  291.696504][T10996] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2448'.
[  291.797676][T11002] netlink: 'syz.0.2450': attribute type 30 has an invalid length.
[  291.865271][T11008] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2450'.
[  293.107919][T11049] netlink: 'syz.2.2463': attribute type 3 has an invalid length.
[  293.144731][T11049] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2463'.
[  293.358100][T11056] netlink: 'syz.3.2465': attribute type 21 has an invalid length.
[  293.376475][T11056] netlink: 'syz.3.2465': attribute type 4 has an invalid length.
[  294.753972][T11092] tun0: tun_chr_ioctl cmd 1074025694
[  295.063328][T11106] validate_nla: 1 callbacks suppressed
[  295.063350][T11106] netlink: 'syz.2.2485': attribute type 3 has an invalid length.
[  295.084882][T11106] __nla_validate_parse: 3 callbacks suppressed
[  295.084904][T11106] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2485'.
[  298.089785][T11126] FAULT_INJECTION: forcing a failure.
[  298.089785][T11126] name failslab, interval 1, probability 0, space 0, times 0
[  298.102983][T11126] CPU: 1 PID: 11126 Comm: syz.1.2492 Not tainted syzkaller #0
[  298.107310][T11121] netlink: 'syz.2.2489': attribute type 9 has an invalid length.
[  298.110492][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.118829][T11121] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2489'.
[  298.128303][T11126] Call Trace:
[  298.128315][T11126]  <TASK>
[  298.128326][T11126]  dump_stack_lvl+0x188/0x250
[  298.128355][T11126]  ? show_regs_print_info+0x20/0x20
[  298.128377][T11126]  ? load_image+0x410/0x410
[  298.128394][T11126]  ? __lock_acquire+0x12df/0x7d40
[  298.128420][T11126]  ? __kasan_slab_alloc+0xa9/0xc0
[  298.128444][T11126]  ? dst_alloc+0x101/0x160
[  298.128468][T11126]  should_fail+0x383/0x4b0
[  298.177485][T11126]  should_failslab+0x5/0x20
[  298.182017][T11126]  slab_pre_alloc_hook+0x51/0xc0
[  298.182046][T11126]  ? dst_alloc+0x101/0x160
[  298.182065][T11126]  kmem_cache_alloc+0x3d/0x280
[  298.182085][T11126]  ? verify_lock_unused+0x140/0x140
[  298.182120][T11126]  dst_alloc+0x101/0x160
[  298.206026][T11126]  ip_route_input_rcu+0x212e/0x30e0
[  298.211278][T11126]  ? ip_route_input_noref+0x250/0x250
[  298.216734][T11126]  ip_route_input_noref+0x15c/0x250
[  298.221982][T11126]  ? ip_handle_martian_source+0x320/0x320
[  298.227753][T11126]  ? ip_route_output_key_hash+0x258/0x300
[  298.233521][T11126]  ? ip_route_input_rcu+0x30e0/0x30e0
[  298.238956][T11126]  ip_route_input+0xba/0x530
[  298.243589][T11126]  icmp_route_lookup+0x6d6/0x930
[  298.248574][T11126]  ? rcu_read_unlock+0x90/0x90
[  298.253408][T11126]  __icmp_send+0xbf4/0x1140
[  298.257950][T11126]  ? verify_lock_unused+0x140/0x140
[  298.263201][T11126]  ? icmp_out_count+0x90/0x90
[  298.267945][T11126]  ? rcu_lock_release+0x9/0x20
[  298.272751][T11126]  ? ip_options_fragment+0x290/0x290
[  298.278066][T11126]  ? xfrm_expand_policies+0xc7/0x690
[  298.283400][T11126]  ipv4_link_failure+0x5e0/0x980
[  298.288383][T11126]  ? ipv4_negative_advice+0x1a0/0x1a0
[  298.293793][T11126]  ? bpf_lsm_xfrm_decode_session+0x5/0x10
[  298.299560][T11126]  ? ipv4_negative_advice+0x1a0/0x1a0
[  298.304961][T11126]  xfrmi_xmit+0x92e/0x1400
[  298.309420][T11126]  ? ___skb_get_hash+0x3f2/0x680
[  298.314406][T11126]  ? __skb_get_hash+0x10d/0x270
[  298.319302][T11126]  ? xfrmi_dev_uninit+0x190/0x190
[  298.324387][T11126]  dev_hard_start_xmit+0x297/0x7d0
[  298.329565][T11126]  __dev_queue_xmit+0x195d/0x2e50
[  298.334654][T11126]  ? dev_queue_xmit+0x20/0x20
[  298.339365][T11126]  ? packet_parse_headers+0x8a2/0xa90
[  298.344817][T11126]  ? __check_object_size+0x30c/0x410
[  298.350153][T11126]  ? skb_setup_tx_timestamp+0x1f0/0x1f0
[  298.355745][T11126]  ? skb_put+0x10e/0x200
[  298.360034][T11126]  packet_sendmsg+0x3b4f/0x4de0
[  298.364986][T11126]  ? aa_sk_perm+0x7dc/0x910
[  298.369531][T11126]  ? packet_getsockopt+0x9a0/0x9a0
[  298.374682][T11126]  ? aa_setprocattr_changehat+0x310/0x580
[  298.380442][T11126]  ? apparmor_socket_sendmsg+0x88/0x230
[  298.386026][T11126]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  298.391367][T11126]  ? security_socket_sendmsg+0x7c/0xa0
[  298.396861][T11126]  ? packet_getsockopt+0x9a0/0x9a0
[  298.402054][T11126]  ____sys_sendmsg+0x5be/0x8f0
[  298.406865][T11126]  ? __sys_sendmsg_sock+0x30/0x30
[  298.411930][T11126]  ? import_iovec+0x6f/0xa0
[  298.416467][T11126]  ___sys_sendmsg+0x236/0x2e0
[  298.421188][T11126]  ? __sys_sendmsg+0x290/0x290
[  298.426020][T11126]  __se_sys_sendmsg+0x1b7/0x2a0
[  298.430891][T11126]  ? __x64_sys_sendmsg+0x80/0x80
[  298.435843][T11126]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  298.441853][T11126]  ? lockdep_hardirqs_on+0x94/0x140
[  298.447076][T11126]  do_syscall_64+0x4c/0xa0
[  298.451510][T11126]  ? clear_bhb_loop+0x30/0x80
[  298.456205][T11126]  ? clear_bhb_loop+0x30/0x80
[  298.460897][T11126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  298.466806][T11126] RIP: 0033:0x7f25f5847559
[  298.471239][T11126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.490853][T11126] RSP: 002b:00007f25f3a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.499303][T11126] RAX: ffffffffffffffda RBX: 00007f25f5acefa0 RCX: 00007f25f5847559
[  298.507299][T11126] RDX: 00000000000480c0 RSI: 0000200000000680 RDI: 0000000000000003
[  298.515285][T11126] RBP: 00007f25f3a9f090 R08: 0000000000000000 R09: 0000000000000000
[  298.523271][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  298.531256][T11126] R13: 00007f25f5acf038 R14: 00007f25f5acefa0 R15: 00007fffebc67368
[  298.539252][T11126]  </TASK>
[  298.591812][T11123] netlink: 'syz.4.2490': attribute type 10 has an invalid length.
[  298.636248][T11123] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.718565][T11123] bond0: (slave bridge0): Releasing backup interface
[  298.742474][T11123] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.749895][T11123] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.803322][T11123] team0: Port device bridge0 added
[  298.816495][T11133] netlink: 'syz.1.2494': attribute type 6 has an invalid length.
[  299.176796][T11156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2503'.
[  299.445343][T11156] device hsr_slave_0 left promiscuous mode
[  299.502210][T11156] device hsr_slave_1 left promiscuous mode
[  300.029409][T11187] netlink: 'syz.1.2514': attribute type 4 has an invalid length.
[  300.066727][T11186] netlink: 'syz.2.2513': attribute type 10 has an invalid length.
[  300.107011][T11186] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.114550][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.226065][T11186] team0: Port device bridge0 added
[  300.266849][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  300.293123][T11196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2525'.
[  300.336909][T11196] device hsr_slave_0 left promiscuous mode
[  300.388864][T11196] device hsr_slave_1 left promiscuous mode
[  300.717454][T11213] netlink: 'syz.4.2523': attribute type 21 has an invalid length.
[  300.734224][T11213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2523'.
[  300.763118][T11213] netlink: 'syz.4.2523': attribute type 4 has an invalid length.
[  300.771134][T11213] netlink: 'syz.4.2523': attribute type 3 has an invalid length.
[  300.779115][T11213] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2523'.
[  300.834405][T11213] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2523'.
[  300.964301][T11229] netlink: 60823 bytes leftover after parsing attributes in process `syz.0.2529'.
[  300.979999][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'.
[  301.104628][T11235] netlink: 'syz.1.2531': attribute type 10 has an invalid length.
[  301.305458][T11248] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2538'.
[  301.551610][T11252] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2540'.
[  301.751408][T11261] netlink: 'syz.4.2543': attribute type 21 has an invalid length.
[  301.760772][T11261] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2543'.
[  301.770100][T11261] netlink: 'syz.4.2543': attribute type 4 has an invalid length.
[  301.778000][T11261] netlink: 'syz.4.2543': attribute type 3 has an invalid length.
[  301.785950][T11261] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2543'.
[  301.877888][T11265] FAULT_INJECTION: forcing a failure.
[  301.877888][T11265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  301.934945][T11265] CPU: 1 PID: 11265 Comm: syz.3.2545 Not tainted syzkaller #0
[  301.942559][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  301.952647][T11265] Call Trace:
[  301.955958][T11265]  <TASK>
[  301.958930][T11265]  dump_stack_lvl+0x188/0x250
[  301.963643][T11265]  ? show_regs_print_info+0x20/0x20
[  301.968877][T11265]  ? load_image+0x410/0x410
[  301.973466][T11265]  ? __lock_acquire+0x7d40/0x7d40
[  301.978536][T11265]  should_fail+0x383/0x4b0
[  301.982997][T11265]  _copy_from_iter+0x234/0x1160
[  301.987999][T11265]  ? __lock_acquire+0x7d40/0x7d40
[  301.993070][T11265]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  301.998515][T11265]  ? __virt_addr_valid+0x3c6/0x470
[  302.003660][T11265]  ? __phys_addr_symbol+0x2b/0x70
[  302.008713][T11265]  ? __check_object_size+0x30c/0x410
[  302.014032][T11265]  netlink_sendmsg+0x758/0xbe0
[  302.018837][T11265]  ? netlink_getsockopt+0x570/0x570
[  302.024065][T11265]  ? aa_sock_msg_perm+0x94/0x150
[  302.029058][T11265]  ? apparmor_socket_sendmsg+0x88/0x230
[  302.034737][T11265]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  302.040058][T11265]  ? security_socket_sendmsg+0x7c/0xa0
[  302.045546][T11265]  ? netlink_getsockopt+0x570/0x570
[  302.050794][T11265]  ____sys_sendmsg+0x5be/0x8f0
[  302.055598][T11265]  ? __sys_sendmsg_sock+0x30/0x30
[  302.060662][T11265]  ? import_iovec+0x6f/0xa0
[  302.065218][T11265]  ___sys_sendmsg+0x236/0x2e0
[  302.069935][T11265]  ? __sys_sendmsg+0x290/0x290
[  302.074778][T11265]  __se_sys_sendmsg+0x1b7/0x2a0
[  302.079665][T11265]  ? __x64_sys_sendmsg+0x80/0x80
[  302.084637][T11265]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  302.090676][T11265]  ? lockdep_hardirqs_on+0x94/0x140
[  302.095920][T11265]  do_syscall_64+0x4c/0xa0
[  302.100372][T11265]  ? clear_bhb_loop+0x30/0x80
[  302.105090][T11265]  ? clear_bhb_loop+0x30/0x80
[  302.109803][T11265]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  302.115750][T11265] RIP: 0033:0x7fa3f9453559
[  302.120193][T11265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.139830][T11265] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.148289][T11265] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  302.156295][T11265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  302.164305][T11265] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  302.172304][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.180306][T11265] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  302.188341][T11265]  </TASK>
[  302.758358][T11286] netlink: 'syz.1.2554': attribute type 3 has an invalid length.
[  302.767749][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.142317][T11311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.295940][T11322] netlink: 'syz.1.2568': attribute type 3 has an invalid length.
[  303.956963][T11357] FAULT_INJECTION: forcing a failure.
[  303.956963][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  304.052096][T11357] CPU: 1 PID: 11357 Comm: syz.4.2583 Not tainted syzkaller #0
[  304.059650][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  304.069726][T11357] Call Trace:
[  304.073024][T11357]  <TASK>
[  304.075977][T11357]  dump_stack_lvl+0x188/0x250
[  304.080710][T11357]  ? show_regs_print_info+0x20/0x20
[  304.085928][T11357]  ? load_image+0x410/0x410
[  304.090448][T11357]  ? __lock_acquire+0x7d40/0x7d40
[  304.095494][T11357]  should_fail+0x383/0x4b0
[  304.099936][T11357]  _copy_from_user+0x2e/0x170
[  304.104629][T11357]  bpf_test_init+0x136/0x1b0
[  304.109242][T11357]  bpf_prog_test_run_xdp+0x1ca/0x910
[  304.114556][T11357]  ? dev_put+0x70/0x70
[  304.118655][T11357]  ? dev_put+0x70/0x70
[  304.122738][T11357]  bpf_prog_test_run+0x31c/0x390
[  304.127698][T11357]  __sys_bpf+0x5a5/0x6f0
[  304.131960][T11357]  ? bpf_link_show_fdinfo+0x380/0x380
[  304.137365][T11357]  __x64_sys_bpf+0x78/0x90
[  304.141800][T11357]  do_syscall_64+0x4c/0xa0
[  304.146232][T11357]  ? clear_bhb_loop+0x30/0x80
[  304.150921][T11357]  ? clear_bhb_loop+0x30/0x80
[  304.155615][T11357]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  304.161527][T11357] RIP: 0033:0x7fa6ccee5559
[  304.165957][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  304.185576][T11357] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  304.194010][T11357] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  304.201994][T11357] RDX: 000000000000003e RSI: 00002000000003c0 RDI: 000000000000000a
[  304.209976][T11357] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  304.217954][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  304.225923][T11357] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  304.233916][T11357]  </TASK>
[  305.163544][T11391] validate_nla: 3 callbacks suppressed
[  305.163560][T11391] netlink: 'syz.2.2595': attribute type 21 has an invalid length.
[  305.215561][T11391] netlink: 'syz.2.2595': attribute type 4 has an invalid length.
[  305.239471][T11396] netlink: 'syz.3.2597': attribute type 3 has an invalid length.
[  305.275499][T11391] netlink: 'syz.2.2595': attribute type 3 has an invalid length.
[  305.305342][T11391] __nla_validate_parse: 9 callbacks suppressed
[  305.305359][T11391] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2595'.
[  305.404661][T11401] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2595'.
[  305.585349][T11404] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2599'.
[  305.710678][T11415] netlink: 'syz.4.2603': attribute type 46 has an invalid length.
[  305.743433][T11415] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2603'.
[  305.879419][T11420] FAULT_INJECTION: forcing a failure.
[  305.879419][T11420] name failslab, interval 1, probability 0, space 0, times 0
[  305.933159][T11420] CPU: 1 PID: 11420 Comm: syz.2.2616 Not tainted syzkaller #0
[  305.940705][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  305.950782][T11420] Call Trace:
[  305.954085][T11420]  <TASK>
[  305.957052][T11420]  dump_stack_lvl+0x188/0x250
[  305.961797][T11420]  ? show_regs_print_info+0x20/0x20
[  305.967031][T11420]  ? load_image+0x410/0x410
[  305.971610][T11420]  should_fail+0x383/0x4b0
[  305.976071][T11420]  should_failslab+0x5/0x20
[  305.980595][T11420]  slab_pre_alloc_hook+0x51/0xc0
[  305.985557][T11420]  kmem_cache_alloc_node+0x47/0x2c0
[  305.990786][T11420]  ? __alloc_skb+0xf4/0x750
[  305.995324][T11420]  __alloc_skb+0xf4/0x750
[  305.999686][T11420]  netlink_sendmsg+0x654/0xbe0
[  306.004484][T11420]  ? lockdep_hardirqs_on+0x94/0x140
[  306.009712][T11420]  ? netlink_getsockopt+0x570/0x570
[  306.014941][T11420]  ? netlink_getsockopt+0x570/0x570
[  306.020173][T11420]  ____sys_sendmsg+0x5be/0x8f0
[  306.024975][T11420]  ? __sys_sendmsg_sock+0x30/0x30
[  306.030049][T11420]  ? import_iovec+0x6f/0xa0
[  306.034584][T11420]  ___sys_sendmsg+0x236/0x2e0
[  306.039311][T11420]  ? __sys_sendmsg+0x290/0x290
[  306.044327][T11420]  __se_sys_sendmsg+0x1b7/0x2a0
[  306.049215][T11420]  ? __x64_sys_sendmsg+0x80/0x80
[  306.054196][T11420]  ? syscall_enter_from_user_mode+0x2a/0x70
[  306.060281][T11420]  do_syscall_64+0x4c/0xa0
[  306.064747][T11420]  ? clear_bhb_loop+0x30/0x80
[  306.069447][T11420]  ? clear_bhb_loop+0x30/0x80
[  306.074140][T11420]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  306.080056][T11420] RIP: 0033:0x7fa0d39aa559
[  306.084483][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.104210][T11420] RSP: 002b:00007fa0d1c02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.112644][T11420] RAX: ffffffffffffffda RBX: 00007fa0d3c31fa0 RCX: 00007fa0d39aa559
[  306.120629][T11420] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  306.128608][T11420] RBP: 00007fa0d1c02090 R08: 0000000000000000 R09: 0000000000000000
[  306.136601][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.144579][T11420] R13: 00007fa0d3c32038 R14: 00007fa0d3c31fa0 R15: 00007ffe9a75e8e8
[  306.152581][T11420]  </TASK>
[  306.279523][T11427] netlink: 'syz.3.2608': attribute type 9 has an invalid length.
[  306.307786][T11427] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2608'.
[  306.508160][T11434] netlink: 'syz.3.2611': attribute type 3 has an invalid length.
[  306.540851][T11434] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2611'.
[  306.662143][T11436] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2612'.
[  306.775865][T11440] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2615'.
[  307.761603][T11470] netlink: 'syz.0.2627': attribute type 3 has an invalid length.
[  307.802963][T11470] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2627'.
[  307.839926][T11473] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2628'.
[  309.053224][T11512] FAULT_INJECTION: forcing a failure.
[  309.053224][T11512] name failslab, interval 1, probability 0, space 0, times 0
[  309.116241][T11512] CPU: 0 PID: 11512 Comm: syz.3.2641 Not tainted syzkaller #0
[  309.123774][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.133850][T11512] Call Trace:
[  309.137159][T11512]  <TASK>
[  309.140116][T11512]  dump_stack_lvl+0x188/0x250
[  309.144829][T11512]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  309.151015][T11512]  ? show_regs_print_info+0x20/0x20
[  309.156244][T11512]  ? load_image+0x410/0x410
[  309.160797][T11512]  should_fail+0x383/0x4b0
[  309.165256][T11512]  should_failslab+0x5/0x20
[  309.169783][T11512]  slab_pre_alloc_hook+0x51/0xc0
[  309.174752][T11512]  ? __pmd_alloc+0x116/0x750
[  309.179370][T11512]  kmem_cache_alloc+0x3d/0x280
[  309.184159][T11512]  __pmd_alloc+0x116/0x750
[  309.188604][T11512]  ? __pud_alloc+0x140/0x140
[  309.193221][T11512]  ? count_memcg_event_mm+0x324/0x370
[  309.198617][T11512]  ? remove_device_exclusive_entry+0xac0/0xac0
[  309.204800][T11512]  ? mark_lock+0x94/0x320
[  309.209208][T11512]  handle_mm_fault+0xbd3/0x4440
[  309.214100][T11512]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  309.220296][T11512]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  309.226487][T11512]  ? get_page+0xe0/0xe0
[  309.230685][T11512]  ? vmacache_find+0x4e3/0x590
[  309.235474][T11512]  ? vmacache_update+0xa0/0x100
[  309.240375][T11512]  ? find_vma+0x1df/0x230
[  309.244737][T11512]  do_user_addr_fault+0x494/0xc90
[  309.249806][T11512]  exc_page_fault+0x60/0x100
[  309.254428][T11512]  asm_exc_page_fault+0x22/0x30
[  309.259308][T11512] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0
[  309.265900][T11512] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10
[  309.285545][T11512] RSP: 0018:ffffc900031ffa80 EFLAGS: 00050202
[  309.291639][T11512] RAX: ffffffff83e93a01 RBX: 0000000000000020 RCX: 0000000000000004
[  309.299636][T11512] RDX: 0000000000000000 RSI: 000000110c230000 RDI: ffff88805fc577c0
[  309.307630][T11512] RBP: 0000000000000000 R08: ffff88805fc577df R09: 1ffff1100bf8aefb
[  309.315623][T11512] R10: dffffc0000000000 R11: ffffed100bf8aefc R12: 00007ffffffff000
[  309.323617][T11512] R13: 000000110c230020 R14: ffff88805fc577c0 R15: 000000110c230000
[  309.331631][T11512]  ? _copy_from_user+0x71/0x170
[  309.336524][T11512]  _copy_from_user+0xfa/0x170
[  309.341233][T11512]  ioctl_standard_iw_point+0x5f4/0xd50
[  309.346741][T11512]  ? __cfg80211_wext_giwscan+0x30/0x30
[  309.352235][T11512]  ? iw_handler_get_iwstats+0x240/0x240
[  309.357813][T11512]  ? lockdep_hardirqs_on+0x94/0x140
[  309.363049][T11512]  ? mutex_lock_io_nested+0x60/0x60
[  309.368372][T11512]  ? full_name_hash+0x8e/0xe0
[  309.373085][T11512]  ioctl_standard_call+0xaa/0x250
[  309.378163][T11512]  ? __cfg80211_wext_giwscan+0x30/0x30
[  309.383650][T11512]  ? __cfg80211_wext_giwscan+0x30/0x30
[  309.389145][T11512]  wext_ioctl_dispatch+0x3da/0x470
[  309.394306][T11512]  ? wext_ioctl_dispatch+0x470/0x470
[  309.399628][T11512]  ? iw_handler_get_private+0x1e0/0x1e0
[  309.405224][T11512]  wext_handle_ioctl+0x114/0x1d0
[  309.410195][T11512]  ? call_commit_handler+0xf0/0xf0
[  309.415361][T11512]  sock_ioctl+0x143/0x700
[  309.419721][T11512]  ? sock_poll+0x420/0x420
[  309.424171][T11512]  ? bpf_lsm_file_ioctl+0x5/0x10
[  309.429128][T11512]  ? security_file_ioctl+0x7c/0xa0
[  309.434271][T11512]  ? sock_poll+0x420/0x420
[  309.438740][T11512]  __se_sys_ioctl+0xfa/0x170
[  309.443376][T11512]  do_syscall_64+0x4c/0xa0
[  309.447822][T11512]  ? clear_bhb_loop+0x30/0x80
[  309.452526][T11512]  ? clear_bhb_loop+0x30/0x80
[  309.457239][T11512]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  309.463174][T11512] RIP: 0033:0x7fa3f9453559
[  309.467621][T11512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.487246][T11512] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  309.495788][T11512] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  309.503789][T11512] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000004
[  309.511792][T11512] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  309.519789][T11512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.527782][T11512] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  309.535799][T11512]  </TASK>
[  309.852599][T11512] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  310.212903][T11538] FAULT_INJECTION: forcing a failure.
[  310.212903][T11538] name failslab, interval 1, probability 0, space 0, times 0
[  310.274152][T11538] CPU: 1 PID: 11538 Comm: syz.4.2652 Not tainted syzkaller #0
[  310.281764][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  310.291845][T11538] Call Trace:
[  310.295144][T11538]  <TASK>
[  310.298103][T11538]  dump_stack_lvl+0x188/0x250
[  310.302819][T11538]  ? show_regs_print_info+0x20/0x20
[  310.308043][T11538]  ? load_image+0x410/0x410
[  310.312567][T11538]  ? __lock_acquire+0x7d40/0x7d40
[  310.317604][T11538]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  310.324209][T11538]  should_fail+0x383/0x4b0
[  310.328650][T11538]  should_failslab+0x5/0x20
[  310.333171][T11538]  slab_pre_alloc_hook+0x51/0xc0
[  310.338129][T11538]  __kmalloc+0x6b/0x340
[  310.342290][T11538]  ? bpf_prog_test_run_flow_dissector+0x29f/0x630
[  310.348716][T11538]  ? xdp_convert_buff_to_md+0x1e0/0x1e0
[  310.354279][T11538]  bpf_prog_test_run_flow_dissector+0x29f/0x630
[  310.360530][T11538]  ? __lock_acquire+0x7d40/0x7d40
[  310.365615][T11538]  ? xdp_convert_buff_to_md+0x1e0/0x1e0
[  310.371184][T11538]  ? __fget_files+0x402/0x470
[  310.375888][T11538]  ? xdp_convert_buff_to_md+0x1e0/0x1e0
[  310.381471][T11538]  bpf_prog_test_run+0x31c/0x390
[  310.386418][T11538]  __sys_bpf+0x5a5/0x6f0
[  310.390684][T11538]  ? bpf_link_show_fdinfo+0x380/0x380
[  310.396077][T11538]  __x64_sys_bpf+0x78/0x90
[  310.400510][T11538]  do_syscall_64+0x4c/0xa0
[  310.404940][T11538]  ? clear_bhb_loop+0x30/0x80
[  310.409622][T11538]  ? clear_bhb_loop+0x30/0x80
[  310.414356][T11538]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  310.420260][T11538] RIP: 0033:0x7fa6ccee5559
[  310.424689][T11538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.444308][T11538] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  310.452737][T11538] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  310.460721][T11538] RDX: 0000000000000050 RSI: 0000200000000fc0 RDI: 000000000000000a
[  310.468724][T11538] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  310.476702][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.484677][T11538] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  310.492677][T11538]  </TASK>
[  310.649361][T11543] netlink: 'syz.0.2654': attribute type 2 has an invalid length.
[  310.658442][T11543] __nla_validate_parse: 1 callbacks suppressed
[  310.658525][T11543] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2654'.
[  310.858431][T11553] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2657'.
[  311.231561][T11573] netlink: 'syz.0.2665': attribute type 25 has an invalid length.
[  311.248425][T11575] FAULT_INJECTION: forcing a failure.
[  311.248425][T11575] name failslab, interval 1, probability 0, space 0, times 0
[  311.267484][T11575] CPU: 0 PID: 11575 Comm: syz.2.2667 Not tainted syzkaller #0
[  311.275085][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.275490][T11573] netlink: 'syz.0.2665': attribute type 29 has an invalid length.
[  311.285245][T11575] Call Trace:
[  311.285256][T11575]  <TASK>
[  311.285266][T11575]  dump_stack_lvl+0x188/0x250
[  311.285307][T11575]  ? show_regs_print_info+0x20/0x20
[  311.285328][T11575]  ? load_image+0x410/0x410
[  311.313750][T11575]  ? __might_sleep+0xf0/0xf0
[  311.318374][T11575]  ? __lock_acquire+0x7d40/0x7d40
[  311.323433][T11575]  should_fail+0x383/0x4b0
[  311.327886][T11575]  should_failslab+0x5/0x20
[  311.332511][T11575]  slab_pre_alloc_hook+0x51/0xc0
[  311.337480][T11575]  __kmalloc+0x6b/0x340
[  311.343400][T11575]  ? security_sk_alloc+0x47/0x130
[  311.348444][T11575]  ? sk_prot_alloc+0x57/0x210
[  311.353156][T11575]  security_sk_alloc+0x47/0x130
[  311.358044][T11575]  sk_prot_alloc+0x101/0x210
[  311.362664][T11575]  sk_alloc+0x2f/0x310
[  311.366764][T11575]  kcm_ioctl+0x20f/0xfd0
[  311.371056][T11575]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  311.377244][T11575]  ? kcm_release+0x590/0x590
[  311.381875][T11575]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  311.388078][T11575]  sock_do_ioctl+0xfb/0x320
[  311.392617][T11575]  ? sock_show_fdinfo+0xb0/0xb0
[  311.397517][T11575]  sock_ioctl+0x48a/0x700
[  311.402064][T11575]  ? sock_poll+0x420/0x420
[  311.406516][T11575]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  311.412715][T11575]  ? bpf_lsm_file_ioctl+0x5/0x10
[  311.417686][T11575]  ? security_file_ioctl+0x7c/0xa0
[  311.422831][T11575]  ? sock_poll+0x420/0x420
[  311.427272][T11575]  __se_sys_ioctl+0xfa/0x170
[  311.431996][T11575]  do_syscall_64+0x4c/0xa0
[  311.436440][T11575]  ? clear_bhb_loop+0x30/0x80
[  311.441144][T11575]  ? clear_bhb_loop+0x30/0x80
[  311.445860][T11575]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  311.451785][T11575] RIP: 0033:0x7fa0d39aa559
[  311.456245][T11575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  311.475874][T11575] RSP: 002b:00007fa0d1c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  311.484311][T11575] RAX: ffffffffffffffda RBX: 00007fa0d3c31fa0 RCX: 00007fa0d39aa559
[  311.492306][T11575] RDX: 0000200000000380 RSI: 00000000000089e2 RDI: 0000000000000005
[  311.500288][T11575] RBP: 00007fa0d1c02090 R08: 0000000000000000 R09: 0000000000000000
[  311.508358][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.516336][T11575] R13: 00007fa0d3c32038 R14: 00007fa0d3c31fa0 R15: 00007ffe9a75e8e8
[  311.524352][T11575]  </TASK>
[  311.598801][T11581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2664'.
[  311.744223][T11588] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2670'.
[  311.807604][T11591] netlink: 'syz.4.2671': attribute type 3 has an invalid length.
[  311.830996][T11591] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2671'.
[  311.914807][T11586] netlink: 'syz.1.2668': attribute type 2 has an invalid length.
[  311.923547][T11586] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2668'.
[  311.990075][T11594] netlink: 'syz.0.2673': attribute type 3 has an invalid length.
[  312.039681][T11594] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2673'.
[  312.524091][T11621] netlink: 'syz.1.2684': attribute type 3 has an invalid length.
[  312.544356][T11621] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2684'.
[  313.229925][T11660] netlink: 'syz.4.2694': attribute type 10 has an invalid length.
[  313.550198][T11660] bond0: (slave wlan1): Releasing backup interface
[  313.600991][T11660] team0: Port device wlan1 added
[  313.609243][T11672] netlink: 'syz.1.2697': attribute type 3 has an invalid length.
[  313.623686][T11672] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2697'.
[  313.641064][T11666] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  313.651849][T11666] device syzkaller0 entered promiscuous mode
[  313.741492][T11676] FAULT_INJECTION: forcing a failure.
[  313.741492][T11676] name failslab, interval 1, probability 0, space 0, times 0
[  313.759575][T11676] CPU: 0 PID: 11676 Comm: syz.3.2699 Not tainted syzkaller #0
[  313.767082][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.777253][T11676] Call Trace:
[  313.780571][T11676]  <TASK>
[  313.783520][T11676]  dump_stack_lvl+0x188/0x250
[  313.788233][T11676]  ? show_regs_print_info+0x20/0x20
[  313.793492][T11676]  ? load_image+0x410/0x410
[  313.798318][T11676]  should_fail+0x383/0x4b0
[  313.802777][T11676]  should_failslab+0x5/0x20
[  313.807330][T11676]  slab_pre_alloc_hook+0x51/0xc0
[  313.812310][T11676]  __kmalloc_node_track_caller+0x68/0x3a0
[  313.818067][T11676]  ? rtmsg_ifinfo_build_skb+0x80/0x180
[  313.823553][T11676]  ? __alloc_skb+0xf4/0x750
[  313.828091][T11676]  ? rtmsg_ifinfo_build_skb+0x80/0x180
[  313.833598][T11676]  __alloc_skb+0x22c/0x750
[  313.838057][T11676]  rtmsg_ifinfo_build_skb+0x80/0x180
[  313.843394][T11676]  rtmsg_ifinfo+0x71/0x120
[  313.847860][T11676]  __dev_notify_flags+0xdc/0x300
[  313.852837][T11676]  ? __dev_change_flags+0x6a0/0x6a0
[  313.858063][T11676]  ? __dev_change_flags+0x518/0x6a0
[  313.863289][T11676]  ? do_raw_spin_unlock+0x11d/0x230
[  313.868506][T11676]  ? dev_get_flags+0x1c0/0x1c0
[  313.873290][T11676]  ? __mutex_lock_common+0x147b/0x2400
[  313.878775][T11676]  dev_change_flags+0xda/0x1a0
[  313.883563][T11676]  dev_ifsioc+0x130/0xd50
[  313.887911][T11676]  ? dev_ioctl+0xe30/0xe30
[  313.892351][T11676]  ? apparmor_capable+0x12c/0x190
[  313.897390][T11676]  ? full_name_hash+0x8e/0xe0
[  313.902099][T11676]  dev_ioctl+0x545/0xe30
[  313.906372][T11676]  ? _copy_from_user+0x111/0x170
[  313.911326][T11676]  sock_do_ioctl+0x245/0x320
[  313.915937][T11676]  ? sock_show_fdinfo+0xb0/0xb0
[  313.920818][T11676]  sock_ioctl+0x48a/0x700
[  313.925158][T11676]  ? sock_poll+0x420/0x420
[  313.929604][T11676]  ? bpf_lsm_file_ioctl+0x5/0x10
[  313.934561][T11676]  ? security_file_ioctl+0x7c/0xa0
[  313.939692][T11676]  ? sock_poll+0x420/0x420
[  313.944123][T11676]  __se_sys_ioctl+0xfa/0x170
[  313.948726][T11676]  do_syscall_64+0x4c/0xa0
[  313.953159][T11676]  ? clear_bhb_loop+0x30/0x80
[  313.957850][T11676]  ? clear_bhb_loop+0x30/0x80
[  313.962541][T11676]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  313.968448][T11676] RIP: 0033:0x7fa3f9453559
[  313.972879][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.992494][T11676] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  314.000920][T11676] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  314.008905][T11676] RDX: 0000200000000bc0 RSI: 0000000000008914 RDI: 0000000000000004
[  314.016888][T11676] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  314.024864][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.032845][T11676] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  314.040837][T11676]  </TASK>
[  314.203260][T11687] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2704'.
[  314.519152][T11703] netlink: 'syz.4.2711': attribute type 3 has an invalid length.
[  315.881512][T11749] netlink: 'syz.4.2729': attribute type 3 has an invalid length.
[  315.904716][T11749] __nla_validate_parse: 6 callbacks suppressed
[  315.904753][T11749] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2729'.
[  315.951920][T11755] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2732'.
[  316.855909][T11794] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2748'.
[  316.983290][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  316.989669][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  317.211929][T11814] FAULT_INJECTION: forcing a failure.
[  317.211929][T11814] name failslab, interval 1, probability 0, space 0, times 0
[  317.225725][T11814] CPU: 0 PID: 11814 Comm: syz.3.2757 Not tainted syzkaller #0
[  317.233306][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  317.243381][T11814] Call Trace:
[  317.246679][T11814]  <TASK>
[  317.249628][T11814]  dump_stack_lvl+0x188/0x250
[  317.254334][T11814]  ? show_regs_print_info+0x20/0x20
[  317.259553][T11814]  ? load_image+0x410/0x410
[  317.264056][T11814]  ? __might_sleep+0xf0/0xf0
[  317.268780][T11814]  ? __lock_acquire+0x7d40/0x7d40
[  317.273810][T11814]  should_fail+0x383/0x4b0
[  317.278232][T11814]  should_failslab+0x5/0x20
[  317.282742][T11814]  slab_pre_alloc_hook+0x51/0xc0
[  317.287710][T11814]  __kmalloc_node_track_caller+0x68/0x3a0
[  317.293454][T11814]  ? netlink_sendmsg+0x654/0xbe0
[  317.298413][T11814]  ? __alloc_skb+0xf4/0x750
[  317.302942][T11814]  ? netlink_sendmsg+0x654/0xbe0
[  317.307901][T11814]  __alloc_skb+0x22c/0x750
[  317.312351][T11814]  netlink_sendmsg+0x654/0xbe0
[  317.317162][T11814]  ? netlink_getsockopt+0x570/0x570
[  317.322386][T11814]  ? aa_sock_msg_perm+0x94/0x150
[  317.327357][T11814]  ? apparmor_socket_sendmsg+0x88/0x230
[  317.332958][T11814]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  317.338272][T11814]  ? security_socket_sendmsg+0x7c/0xa0
[  317.343762][T11814]  ? netlink_getsockopt+0x570/0x570
[  317.348989][T11814]  ____sys_sendmsg+0x5be/0x8f0
[  317.353792][T11814]  ? __sys_sendmsg_sock+0x30/0x30
[  317.358879][T11814]  ? import_iovec+0x6f/0xa0
[  317.363423][T11814]  ___sys_sendmsg+0x236/0x2e0
[  317.368139][T11814]  ? __sys_sendmsg+0x290/0x290
[  317.373037][T11814]  ? lock_chain_count+0x20/0x20
[  317.377945][T11814]  __se_sys_sendmsg+0x1b7/0x2a0
[  317.382829][T11814]  ? __x64_sys_sendmsg+0x80/0x80
[  317.387795][T11814]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  317.393818][T11814]  ? lockdep_hardirqs_on+0x94/0x140
[  317.399046][T11814]  do_syscall_64+0x4c/0xa0
[  317.403484][T11814]  ? clear_bhb_loop+0x30/0x80
[  317.408189][T11814]  ? clear_bhb_loop+0x30/0x80
[  317.412899][T11814]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  317.418821][T11814] RIP: 0033:0x7fa3f9453559
[  317.423254][T11814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.443005][T11814] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  317.451473][T11814] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  317.459485][T11814] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000006
[  317.467490][T11814] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  317.475488][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.483503][T11814] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  317.491522][T11814]  </TASK>
[  317.689808][T11830] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2759'.
[  317.875851][T11838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2765'.
[  318.803893][T11852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.835080][T11852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.871137][T11852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.888139][T11852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.165161][T11874] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2781'.
[  319.736008][T11900] netlink: 163688 bytes leftover after parsing attributes in process `syz.3.2790'.
[  319.762694][T11900] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  319.867323][T11907] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2793'.
[  319.941160][T11912] netlink: 'syz.2.2796': attribute type 3 has an invalid length.
[  319.980278][T11912] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2796'.
[  320.108642][T11925] device pim6reg1 entered promiscuous mode
[  320.466777][T11946] netlink: 'syz.2.2804': attribute type 10 has an invalid length.
[  320.523936][T11943] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2807'.
[  320.623593][T11955] FAULT_INJECTION: forcing a failure.
[  320.623593][T11955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  320.637510][T11955] CPU: 0 PID: 11955 Comm: syz.4.2811 Not tainted syzkaller #0
[  320.645016][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  320.655096][T11955] Call Trace:
[  320.658405][T11955]  <TASK>
[  320.661353][T11955]  dump_stack_lvl+0x188/0x250
[  320.666063][T11955]  ? show_regs_print_info+0x20/0x20
[  320.671287][T11955]  ? load_image+0x410/0x410
[  320.675822][T11955]  ? __lock_acquire+0x7d40/0x7d40
[  320.680888][T11955]  should_fail+0x383/0x4b0
[  320.685339][T11955]  _copy_from_iter+0x234/0x1160
[  320.690225][T11955]  ? __lock_acquire+0x7d40/0x7d40
[  320.695285][T11955]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  320.700687][T11955]  ? __virt_addr_valid+0x3c6/0x470
[  320.705822][T11955]  ? __phys_addr_symbol+0x2b/0x70
[  320.710860][T11955]  ? __check_object_size+0x30c/0x410
[  320.716163][T11955]  netlink_sendmsg+0x758/0xbe0
[  320.720959][T11955]  ? netlink_getsockopt+0x570/0x570
[  320.726195][T11955]  ? aa_sock_msg_perm+0x94/0x150
[  320.731159][T11955]  ? apparmor_socket_sendmsg+0x173/0x230
[  320.736814][T11955]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  320.742128][T11955]  ? security_socket_sendmsg+0x7c/0xa0
[  320.747695][T11955]  ? netlink_getsockopt+0x570/0x570
[  320.752927][T11955]  ____sys_sendmsg+0x5be/0x8f0
[  320.757730][T11955]  ? __sys_sendmsg_sock+0x30/0x30
[  320.762788][T11955]  ? import_iovec+0x6f/0xa0
[  320.767323][T11955]  ___sys_sendmsg+0x236/0x2e0
[  320.772052][T11955]  ? __sys_sendmsg+0x290/0x290
[  320.776888][T11955]  __se_sys_sendmsg+0x1b7/0x2a0
[  320.781794][T11955]  ? __x64_sys_sendmsg+0x80/0x80
[  320.786763][T11955]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  320.792810][T11955]  ? lockdep_hardirqs_on+0x94/0x140
[  320.798049][T11955]  do_syscall_64+0x4c/0xa0
[  320.802492][T11955]  ? clear_bhb_loop+0x30/0x80
[  320.807190][T11955]  ? clear_bhb_loop+0x30/0x80
[  320.811908][T11955]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  320.817848][T11955] RIP: 0033:0x7fa6ccee5559
[  320.822292][T11955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.841924][T11955] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  320.850371][T11955] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  320.858365][T11955] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000003
[  320.866396][T11955] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  320.874388][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.882385][T11955] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  320.890399][T11955]  </TASK>
[  321.095066][T11962] netlink: 'syz.0.2813': attribute type 3 has an invalid length.
[  321.120368][T11962] __nla_validate_parse: 1 callbacks suppressed
[  321.120382][T11962] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2813'.
[  321.183440][T11967] netlink: 'syz.2.2816': attribute type 19 has an invalid length.
[  321.237755][T11969] netlink: 'syz.1.2818': attribute type 10 has an invalid length.
[  321.304593][T11969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2818'.
[  321.339081][T11969] batman_adv: batadv0: Adding interface: virt_wifi0
[  321.384884][T11969] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.504834][T11969] batman_adv: batadv0: Interface activated: virt_wifi0
[  321.589806][T11977] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2821'.
[  321.791002][T11988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.826290][T11988] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.867194][T11988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.908897][T11988] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.943573][T11988] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  321.961643][T11988] batman_adv: batadv0: Removing interface: virt_wifi0
[  322.240547][T12004] netlink: 'syz.4.2831': attribute type 3 has an invalid length.
[  322.253059][T12004] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2831'.
[  322.264916][T12010] FAULT_INJECTION: forcing a failure.
[  322.264916][T12010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.334621][T12010] CPU: 1 PID: 12010 Comm: syz.2.2832 Not tainted syzkaller #0
[  322.342134][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  322.352240][T12010] Call Trace:
[  322.355553][T12010]  <TASK>
[  322.358502][T12010]  dump_stack_lvl+0x188/0x250
[  322.363216][T12010]  ? show_regs_print_info+0x20/0x20
[  322.368708][T12010]  ? load_image+0x410/0x410
[  322.373240][T12010]  ? __lock_acquire+0x7d40/0x7d40
[  322.378326][T12010]  should_fail+0x383/0x4b0
[  322.382889][T12010]  _copy_from_user+0x2e/0x170
[  322.387605][T12010]  ___sys_recvmsg+0x173/0x5c0
[  322.392323][T12010]  ? __sys_recvmsg+0x280/0x280
[  322.397130][T12010]  ? __lock_acquire+0x7d40/0x7d40
[  322.402183][T12010]  ? vfs_write+0xaa6/0xd70
[  322.406646][T12010]  ? __fget_files+0x402/0x470
[  322.411378][T12010]  __x64_sys_recvmsg+0x201/0x2d0
[  322.416351][T12010]  ? ___sys_recvmsg+0x5c0/0x5c0
[  322.421233][T12010]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  322.427257][T12010]  ? lockdep_hardirqs_on+0x94/0x140
[  322.432495][T12010]  do_syscall_64+0x4c/0xa0
[  322.436945][T12010]  ? clear_bhb_loop+0x30/0x80
[  322.441650][T12010]  ? clear_bhb_loop+0x30/0x80
[  322.446370][T12010]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  322.452307][T12010] RIP: 0033:0x7fa0d39aa559
[  322.456760][T12010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.476410][T12010] RSP: 002b:00007fa0d1be1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  322.484856][T12010] RAX: ffffffffffffffda RBX: 00007fa0d3c32090 RCX: 00007fa0d39aa559
[  322.492859][T12010] RDX: 0000000000000100 RSI: 0000200000000c00 RDI: 0000000000000008
[  322.500858][T12010] RBP: 00007fa0d1be1090 R08: 0000000000000000 R09: 0000000000000000
[  322.508855][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.516848][T12010] R13: 00007fa0d3c32128 R14: 00007fa0d3c32090 R15: 00007ffe9a75e8e8
[  322.524850][T12010]  </TASK>
[  322.638805][T12004] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2831'.
[  322.805636][T12021] FAULT_INJECTION: forcing a failure.
[  322.805636][T12021] name failslab, interval 1, probability 0, space 0, times 0
[  323.026806][T12021] CPU: 0 PID: 12021 Comm: syz.2.2835 Not tainted syzkaller #0
[  323.034372][T12021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  323.044494][T12021] Call Trace:
[  323.047848][T12021]  <TASK>
[  323.050922][T12021]  dump_stack_lvl+0x188/0x250
[  323.055693][T12021]  ? show_regs_print_info+0x20/0x20
[  323.060964][T12021]  ? load_image+0x410/0x410
[  323.065553][T12021]  ? __might_sleep+0xf0/0xf0
[  323.070213][T12021]  ? __lock_acquire+0x7d40/0x7d40
[  323.075338][T12021]  should_fail+0x383/0x4b0
[  323.079862][T12021]  should_failslab+0x5/0x20
[  323.084430][T12021]  slab_pre_alloc_hook+0x51/0xc0
[  323.089451][T12021]  kmem_cache_alloc_trace+0x47/0x290
[  323.094788][T12021]  ? rtnl_newlink+0x17f/0x1920
[  323.099652][T12021]  rtnl_newlink+0x17f/0x1920
[  323.104352][T12021]  ? tracing_gen_ctx_irq_test+0xb3/0x130
[  323.110064][T12021]  ? perf_trace_buf_update+0xa8/0x230
[  323.115519][T12021]  ? rtnl_setlink+0x500/0x500
[  323.120259][T12021]  ? mark_lock+0x94/0x320
[  323.124678][T12021]  ? __lock_acquire+0x13b3/0x7d40
[  323.129798][T12021]  ? perf_tp_event+0xa7e/0xbe0
[  323.134772][T12021]  ? verify_lock_unused+0x140/0x140
[  323.140288][T12021]  ? __mutex_trylock_common+0x15c/0x260
[  323.145931][T12021]  ? rcu_lock_release+0x20/0x20
[  323.150859][T12021]  ? perf_trace_lock+0x301/0x390
[  323.155955][T12021]  ? __mutex_lock_common+0x435/0x2400
[  323.161460][T12021]  ? rtnetlink_rcv_msg+0x79f/0xf10
[  323.166680][T12021]  ? mutex_lock_io_nested+0x60/0x60
[  323.172114][T12021]  ? rtnl_setlink+0x500/0x500
[  323.176881][T12021]  rtnetlink_rcv_msg+0x7f1/0xf10
[  323.181968][T12021]  ? rtnetlink_bind+0x80/0x80
[  323.186795][T12021]  ? __local_bh_enable_ip+0x136/0x1c0
[  323.192250][T12021]  ? _local_bh_enable+0xa0/0xa0
[  323.197239][T12021]  ? __dev_queue_xmit+0x1b64/0x2e50
[  323.202541][T12021]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  323.208376][T12021]  ? perf_trace_lock+0x301/0x390
[  323.213432][T12021]  ? trace_event_raw_event_lock+0x250/0x250
[  323.219406][T12021]  ? __copy_skb_header+0x3ba/0x4f0
[  323.224660][T12021]  netlink_rcv_skb+0x1e9/0x430
[  323.229525][T12021]  ? rtnetlink_bind+0x80/0x80
[  323.234290][T12021]  ? netlink_ack+0xb10/0xb10
[  323.239073][T12021]  netlink_unicast+0x78f/0x940
[  323.243993][T12021]  netlink_sendmsg+0x8ba/0xbe0
[  323.248880][T12021]  ? netlink_getsockopt+0x570/0x570
[  323.254133][T12021]  ? aa_sock_msg_perm+0x94/0x150
[  323.259157][T12021]  ? apparmor_socket_sendmsg+0x88/0x230
[  323.264774][T12021]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  323.270122][T12021]  ? security_socket_sendmsg+0x7c/0xa0
[  323.275642][T12021]  ? netlink_getsockopt+0x570/0x570
[  323.280927][T12021]  ____sys_sendmsg+0x5be/0x8f0
[  323.285812][T12021]  ? __sys_sendmsg_sock+0x30/0x30
[  323.290955][T12021]  ? import_iovec+0x6f/0xa0
[  323.295554][T12021]  ___sys_sendmsg+0x236/0x2e0
[  323.300364][T12021]  ? __sys_sendmsg+0x290/0x290
[  323.305267][T12021]  ? trace_event_raw_event_lock+0x250/0x250
[  323.311391][T12021]  __se_sys_sendmsg+0x1b7/0x2a0
[  323.316325][T12021]  ? __x64_sys_sendmsg+0x80/0x80
[  323.321317][T12021]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  323.327444][T12021]  ? lockdep_hardirqs_on+0x94/0x140
[  323.332741][T12021]  do_syscall_64+0x4c/0xa0
[  323.337217][T12021]  ? clear_bhb_loop+0x30/0x80
[  323.341950][T12021]  ? clear_bhb_loop+0x30/0x80
[  323.346714][T12021]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  323.352669][T12021] RIP: 0033:0x7fa0d39aa559
[  323.357163][T12021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  323.376852][T12021] RSP: 002b:00007fa0d1c02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  323.385349][T12021] RAX: ffffffffffffffda RBX: 00007fa0d3c31fa0 RCX: 00007fa0d39aa559
[  323.393388][T12021] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  323.401426][T12021] RBP: 00007fa0d1c02090 R08: 0000000000000000 R09: 0000000000000000
[  323.409455][T12021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  323.417482][T12021] R13: 00007fa0d3c32038 R14: 00007fa0d3c31fa0 R15: 00007ffe9a75e8e8
[  323.425603][T12021]  </TASK>
[  323.752182][T12024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2836'.
[  324.055022][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.107570][T12045] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.140290][T12045] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.152580][T12045] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.208314][T12045] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  324.265901][T12045] batman_adv: batadv0: Removing interface: virt_wifi0
[  324.300886][T12055] netlink: 'syz.1.2848': attribute type 3 has an invalid length.
[  324.330772][T12055] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2848'.
[  324.362863][T12061] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2848'.
[  324.629212][T12072] FAULT_INJECTION: forcing a failure.
[  324.629212][T12072] name failslab, interval 1, probability 0, space 0, times 0
[  324.642686][T12072] CPU: 0 PID: 12072 Comm: syz.3.2852 Not tainted syzkaller #0
[  324.650246][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  324.660373][T12072] Call Trace:
[  324.663724][T12072]  <TASK>
[  324.666738][T12072]  dump_stack_lvl+0x188/0x250
[  324.671602][T12072]  ? show_regs_print_info+0x20/0x20
[  324.676915][T12072]  ? load_image+0x410/0x410
[  324.681547][T12072]  ? vxlan_switchdev_event+0x1b3/0xa70
[  324.687193][T12072]  should_fail+0x383/0x4b0
[  324.691760][T12072]  should_failslab+0x5/0x20
[  324.696380][T12072]  slab_pre_alloc_hook+0x51/0xc0
[  324.701443][T12072]  kmem_cache_alloc_node+0x47/0x2c0
[  324.706749][T12072]  ? __alloc_skb+0xf4/0x750
[  324.711402][T12072]  __alloc_skb+0xf4/0x750
[  324.715892][T12072]  fdb_notify+0xa6/0x160
[  324.720297][T12072]  fdb_insert+0x14e/0x240
[  324.724761][T12072]  br_fdb_changeaddr+0x2c2/0x410
[  324.729855][T12072]  br_device_event+0x45b/0x8e0
[  324.734773][T12072]  ? br_switchdev_event+0x490/0x490
[  324.740118][T12072]  ? packet_notifier+0x9d8/0x9f0
[  324.745163][T12072]  ? ipv6_mc_netdev_event+0xc6/0x5f0
[  324.750577][T12072]  raw_notifier_call_chain+0xcb/0x160
[  324.756099][T12072]  call_netdevice_notifiers+0x8d/0xd0
[  324.761570][T12072]  ? netdev_adjacent_rename_links+0x4f0/0x4f0
[  324.767770][T12072]  ? dev_ifsioc+0x527/0xd50
[  324.772418][T12072]  dev_ifsioc+0x534/0xd50
[  324.776882][T12072]  ? dev_ioctl+0xe30/0xe30
[  324.781432][T12072]  ? apparmor_capable+0x12c/0x190
[  324.786546][T12072]  ? full_name_hash+0x8e/0xe0
[  324.791436][T12072]  dev_ioctl+0x545/0xe30
[  324.795786][T12072]  ? _copy_from_user+0x111/0x170
[  324.800848][T12072]  sock_do_ioctl+0x245/0x320
[  324.805566][T12072]  ? sock_show_fdinfo+0xb0/0xb0
[  324.810679][T12072]  sock_ioctl+0x48a/0x700
[  324.815151][T12072]  ? sock_poll+0x420/0x420
[  324.819777][T12072]  ? bpf_lsm_file_ioctl+0x5/0x10
[  324.824901][T12072]  ? security_file_ioctl+0x7c/0xa0
[  324.830124][T12072]  ? sock_poll+0x420/0x420
[  324.834657][T12072]  __se_sys_ioctl+0xfa/0x170
[  324.839391][T12072]  do_syscall_64+0x4c/0xa0
[  324.843895][T12072]  ? clear_bhb_loop+0x30/0x80
[  324.848664][T12072]  ? clear_bhb_loop+0x30/0x80
[  324.853466][T12072]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  324.859440][T12072] RIP: 0033:0x7fa3f9453559
[  324.863959][T12072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.883640][T12072] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.892136][T12072] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  324.900186][T12072] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000005
[  324.908213][T12072] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  324.916255][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  324.924283][T12072] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  324.932440][T12072]  </TASK>
[  324.951688][T12075] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2853'.
[  325.209324][T12084] FAULT_INJECTION: forcing a failure.
[  325.209324][T12084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  325.243891][T12084] CPU: 0 PID: 12084 Comm: syz.0.2857 Not tainted syzkaller #0
[  325.251417][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  325.261528][T12084] Call Trace:
[  325.264839][T12084]  <TASK>
[  325.267794][T12084]  dump_stack_lvl+0x188/0x250
[  325.272511][T12084]  ? show_regs_print_info+0x20/0x20
[  325.277778][T12084]  ? load_image+0x410/0x410
[  325.282312][T12084]  ? __lock_acquire+0x7d40/0x7d40
[  325.287367][T12084]  ? __lock_acquire+0x7d40/0x7d40
[  325.292433][T12084]  should_fail+0x383/0x4b0
[  325.296892][T12084]  _copy_from_user+0x2e/0x170
[  325.301603][T12084]  ____sys_sendmsg+0x313/0x8f0
[  325.306412][T12084]  ? __sys_sendmsg_sock+0x30/0x30
[  325.311495][T12084]  ? perf_trace_lock+0xe4/0x390
[  325.316382][T12084]  ? import_iovec+0x6f/0xa0
[  325.320923][T12084]  ___sys_sendmsg+0x236/0x2e0
[  325.325639][T12084]  ? __sys_sendmsg+0x290/0x290
[  325.330453][T12084]  ? trace_event_raw_event_lock+0x250/0x250
[  325.336433][T12084]  __se_sys_sendmsg+0x1b7/0x2a0
[  325.341325][T12084]  ? __x64_sys_sendmsg+0x80/0x80
[  325.346294][T12084]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  325.352319][T12084]  ? lockdep_hardirqs_on+0x94/0x140
[  325.357557][T12084]  do_syscall_64+0x4c/0xa0
[  325.362018][T12084]  ? clear_bhb_loop+0x30/0x80
[  325.366732][T12084]  ? clear_bhb_loop+0x30/0x80
[  325.371457][T12084]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  325.377400][T12084] RIP: 0033:0x7f0736777559
[  325.381847][T12084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.401481][T12084] RSP: 002b:00007f07349cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  325.409930][T12084] RAX: ffffffffffffffda RBX: 00007f07369fefa0 RCX: 00007f0736777559
[  325.417931][T12084] RDX: 000000000400c844 RSI: 0000200000000240 RDI: 0000000000000008
[  325.425929][T12084] RBP: 00007f07349cf090 R08: 0000000000000000 R09: 0000000000000000
[  325.433947][T12084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.441939][T12084] R13: 00007f07369ff038 R14: 00007f07369fefa0 R15: 00007ffee72bf788
[  325.449964][T12084]  </TASK>
[  325.525544][T12105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2859'.
[  326.260457][T12120] FAULT_INJECTION: forcing a failure.
[  326.260457][T12120] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  326.303909][T12120] CPU: 0 PID: 12120 Comm: syz.3.2865 Not tainted syzkaller #0
[  326.311516][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  326.321656][T12120] Call Trace:
[  326.325013][T12120]  <TASK>
[  326.328051][T12120]  dump_stack_lvl+0x188/0x250
[  326.332866][T12120]  ? show_regs_print_info+0x20/0x20
[  326.338180][T12120]  ? load_image+0x410/0x410
[  326.342823][T12120]  ? __lock_acquire+0x7d40/0x7d40
[  326.348024][T12120]  should_fail+0x383/0x4b0
[  326.352595][T12120]  _copy_from_user+0x2e/0x170
[  326.357408][T12120]  iovec_from_user+0x142/0x370
[  326.362336][T12120]  __import_iovec+0x70/0x490
[  326.367141][T12120]  import_iovec+0x6f/0xa0
[  326.371625][T12120]  ___sys_sendmsg+0x1fd/0x2e0
[  326.376503][T12120]  ? __sys_sendmsg+0x290/0x290
[  326.381817][T12120]  __se_sys_sendmsg+0x1b7/0x2a0
[  326.386809][T12120]  ? __x64_sys_sendmsg+0x80/0x80
[  326.391836][T12120]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  326.398055][T12120]  ? lockdep_hardirqs_on+0x94/0x140
[  326.403391][T12120]  do_syscall_64+0x4c/0xa0
[  326.407879][T12120]  ? clear_bhb_loop+0x30/0x80
[  326.412787][T12120]  ? clear_bhb_loop+0x30/0x80
[  326.417544][T12120]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  326.423481][T12120] RIP: 0033:0x7fa3f9453559
[  326.427951][T12120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.447602][T12120] RSP: 002b:00007fa3f76ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.456095][T12120] RAX: ffffffffffffffda RBX: 00007fa3f96dafa0 RCX: 00007fa3f9453559
[  326.464121][T12120] RDX: 0000000000000000 RSI: 00002000000021c0 RDI: 0000000000000004
[  326.472145][T12120] RBP: 00007fa3f76ab090 R08: 0000000000000000 R09: 0000000000000000
[  326.480190][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.488205][T12120] R13: 00007fa3f96db038 R14: 00007fa3f96dafa0 R15: 00007ffdf05c2dc8
[  326.496348][T12120]  </TASK>
[  326.590323][T12124] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2867'.
[  327.548538][T12168] FAULT_INJECTION: forcing a failure.
[  327.548538][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.565539][T12168] CPU: 1 PID: 12168 Comm: syz.0.2881 Not tainted syzkaller #0
[  327.573089][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  327.583209][T12168] Call Trace:
[  327.586554][T12168]  <TASK>
[  327.589554][T12168]  dump_stack_lvl+0x188/0x250
[  327.594349][T12168]  ? show_regs_print_info+0x20/0x20
[  327.599629][T12168]  ? load_image+0x410/0x410
[  327.604276][T12168]  ? __lock_acquire+0x7d40/0x7d40
[  327.609378][T12168]  ? trace_call_bpf+0x515/0x5b0
[  327.614370][T12168]  should_fail+0x383/0x4b0
[  327.618912][T12168]  _copy_from_user+0x2e/0x170
[  327.623701][T12168]  __copy_msghdr_from_user+0x48a/0x630
[  327.629308][T12168]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  327.634802][T12168]  ___sys_sendmsg+0x19a/0x2e0
[  327.639628][T12168]  ? __sys_sendmsg+0x290/0x290
[  327.644557][T12168]  ? trace_event_raw_event_lock+0x250/0x250
[  327.650827][T12168]  __se_sys_sendmsg+0x1b7/0x2a0
[  327.655800][T12168]  ? __x64_sys_sendmsg+0x80/0x80
[  327.660805][T12168]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  327.666976][T12168]  ? lockdep_hardirqs_on+0x94/0x140
[  327.672280][T12168]  do_syscall_64+0x4c/0xa0
[  327.676762][T12168]  ? clear_bhb_loop+0x30/0x80
[  327.681486][T12168]  ? clear_bhb_loop+0x30/0x80
[  327.686246][T12168]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  327.692215][T12168] RIP: 0033:0x7f0736777559
[  327.696679][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  327.716352][T12168] RSP: 002b:00007f07349cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.724830][T12168] RAX: ffffffffffffffda RBX: 00007f07369fefa0 RCX: 00007f0736777559
[  327.732864][T12168] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000003
[  327.740909][T12168] RBP: 00007f07349cf090 R08: 0000000000000000 R09: 0000000000000000
[  327.748983][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.757098][T12168] R13: 00007f07369ff038 R14: 00007f07369fefa0 R15: 00007ffee72bf788
[  327.765223][T12168]  </TASK>
[  327.954334][T12171] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2883'.
[  328.443754][T12197] netlink: 'syz.1.2892': attribute type 21 has an invalid length.
[  328.457971][T12197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2892'.
[  328.541394][T12203] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2896'.
[  328.594443][T12205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2907'.
[  329.629679][T12237] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2910'.
[  329.794067][T12244] netlink: 'syz.4.2914': attribute type 21 has an invalid length.
[  329.814167][T12244] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2914'.
[  329.832210][T12244] netlink: set zone limit has 8 unknown bytes
[  329.843602][T12244] FAULT_INJECTION: forcing a failure.
[  329.843602][T12244] name failslab, interval 1, probability 0, space 0, times 0
[  329.867085][T12244] CPU: 1 PID: 12244 Comm: syz.4.2914 Not tainted syzkaller #0
[  329.874694][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  329.884800][T12244] Call Trace:
[  329.888125][T12244]  <TASK>
[  329.891107][T12244]  dump_stack_lvl+0x188/0x250
[  329.895856][T12244]  ? show_regs_print_info+0x20/0x20
[  329.901116][T12244]  ? load_image+0x410/0x410
[  329.905695][T12244]  ? __might_sleep+0xf0/0xf0
[  329.910339][T12244]  ? __lock_acquire+0x7d40/0x7d40
[  329.915444][T12244]  should_fail+0x383/0x4b0
[  329.919951][T12244]  should_failslab+0x5/0x20
[  329.924495][T12244]  slab_pre_alloc_hook+0x51/0xc0
[  329.929507][T12244]  __kmalloc_node_track_caller+0x68/0x3a0
[  329.935272][T12244]  ? netlink_sendmsg+0x654/0xbe0
[  329.940261][T12244]  ? __alloc_skb+0xf4/0x750
[  329.944814][T12244]  ? netlink_sendmsg+0x654/0xbe0
[  329.949817][T12244]  __alloc_skb+0x22c/0x750
[  329.954303][T12244]  netlink_sendmsg+0x654/0xbe0
[  329.959137][T12244]  ? netlink_getsockopt+0x570/0x570
[  329.964362][T12244]  ? aa_sock_msg_perm+0x94/0x150
[  329.969340][T12244]  ? apparmor_socket_sendmsg+0x88/0x230
[  329.974942][T12244]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  329.980254][T12244]  ? security_socket_sendmsg+0x7c/0xa0
[  329.985742][T12244]  ? netlink_getsockopt+0x570/0x570
[  329.991014][T12244]  ____sys_sendmsg+0x5be/0x8f0
[  329.995879][T12244]  ? __sys_sendmsg_sock+0x30/0x30
[  330.000968][T12244]  ? import_iovec+0x6f/0xa0
[  330.005528][T12244]  ___sys_sendmsg+0x236/0x2e0
[  330.010352][T12244]  ? __sys_sendmsg+0x290/0x290
[  330.015336][T12244]  __se_sys_sendmsg+0x1b7/0x2a0
[  330.020249][T12244]  ? __x64_sys_sendmsg+0x80/0x80
[  330.025216][T12244]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  330.031274][T12244]  ? lockdep_hardirqs_on+0x94/0x140
[  330.036538][T12244]  do_syscall_64+0x4c/0xa0
[  330.041006][T12244]  ? clear_bhb_loop+0x30/0x80
[  330.045718][T12244]  ? clear_bhb_loop+0x30/0x80
[  330.050545][T12244]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  330.056481][T12244] RIP: 0033:0x7fa6ccee5559
[  330.060943][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.080609][T12244] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  330.089083][T12244] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  330.097104][T12244] RDX: 0000000014044040 RSI: 0000200000000000 RDI: 0000000000000003
[  330.105122][T12244] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  330.113139][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  330.121154][T12244] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  330.129216][T12244]  </TASK>
[  330.260478][T12250] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2917'.
[  330.286731][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.642758][T12272] netlink: 'syz.0.2922': attribute type 21 has an invalid length.
[  330.651749][T12272] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2922'.
[  330.692043][T12256] rxe_eth0 speed is unknown, defaulting to 1000
[  330.706791][T12274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2924'.
[  330.868786][T12278] netlink: 'syz.4.2925': attribute type 21 has an invalid length.
[  331.177130][T12256] chnl_net:caif_netlink_parms(): no params data found
[  331.325606][T12256] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.333539][T12256] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.352080][T12256] device bridge_slave_0 entered promiscuous mode
[  331.370013][T12256] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.389639][T12256] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.402676][T12256] device bridge_slave_1 entered promiscuous mode
[  331.435442][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.449751][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  331.460671][T12307] FAULT_INJECTION: forcing a failure.
[  331.460671][T12307] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  331.481229][T12307] CPU: 0 PID: 12307 Comm: syz.4.2937 Not tainted syzkaller #0
[  331.488801][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  331.498939][T12307] Call Trace:
[  331.502304][T12307]  <TASK>
[  331.505316][T12307]  dump_stack_lvl+0x188/0x250
[  331.510122][T12307]  ? show_regs_print_info+0x20/0x20
[  331.515440][T12307]  ? load_image+0x410/0x410
[  331.520068][T12307]  ? __lock_acquire+0x7d40/0x7d40
[  331.525263][T12307]  should_fail+0x383/0x4b0
[  331.529833][T12307]  prepare_alloc_pages+0x1e3/0x5b0
[  331.535117][T12307]  __alloc_pages+0x11b/0x480
[  331.539824][T12307]  ? zone_statistics+0x170/0x170
[  331.544999][T12307]  bpf_ringbuf_alloc+0x232/0x4d0
[  331.550080][T12307]  ringbuf_map_alloc+0x1d1/0x300
[  331.555133][T12307]  map_create+0x481/0x2330
[  331.559652][T12307]  ? bpf_lsm_bpf+0x5/0x10
[  331.564102][T12307]  __sys_bpf+0x30a/0x6f0
[  331.568460][T12307]  ? bpf_link_show_fdinfo+0x380/0x380
[  331.573907][T12307]  ? rcu_nmi_exit+0x6f/0xf0
[  331.578695][T12307]  __x64_sys_bpf+0x78/0x90
[  331.583300][T12307]  do_syscall_64+0x4c/0xa0
[  331.587807][T12307]  ? clear_bhb_loop+0x30/0x80
[  331.592558][T12307]  ? clear_bhb_loop+0x30/0x80
[  331.597331][T12307]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  331.603300][T12307] RIP: 0033:0x7fa6ccee5559
[  331.607806][T12307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.627483][T12307] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  331.635991][T12307] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  331.644056][T12307] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000
[  331.652107][T12307] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  331.660163][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.668202][T12307] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  331.676405][T12307]  </TASK>
[  331.708020][T12306] netlink: 'syz.2.2936': attribute type 21 has an invalid length.
[  331.729069][T12306] __nla_validate_parse: 2 callbacks suppressed
[  331.729084][T12306] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2936'.
[  331.758481][T12256] team0: Port device team_slave_0 added
[  331.767134][T12256] team0: Port device team_slave_1 added
[  331.830454][T12311] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2938'.
[  331.858846][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.874802][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  331.962741][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  331.975923][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1
[  331.982905][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.044513][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.084980][T12312] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2939'.
[  332.094442][T12312] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  332.252640][T12256] device hsr_slave_0 entered promiscuous mode
[  332.285140][T12256] device hsr_slave_1 entered promiscuous mode
[  332.494558][ T4174] Bluetooth: hci5: command 0x0409 tx timeout
[  332.719831][T12256] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.765138][T12347] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2953'.
[  332.878211][T12256] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.008016][T12256] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.156152][T12256] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.190427][T12356] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2964'.
[  333.265543][T12345] delete_channel: no stack
[  333.329152][T12363] netlink: 'syz.1.2958': attribute type 33 has an invalid length.
[  333.346808][T12363] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2958'.
[  333.366000][T12363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.513718][T12256] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  333.558476][T12256] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  333.608040][T12256] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  333.662343][T12256] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  333.910726][T12256] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.939221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  333.952587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  333.973614][T12256] 8021q: adding VLAN 0 to HW filter on device team0
[  334.002446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  334.016337][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  334.027577][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.034725][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  334.059629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  334.069258][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  334.081346][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  334.096252][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.103384][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  334.115758][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  334.150928][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.168024][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.188044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.210720][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.221921][T12390] netlink: 'syz.2.2969': attribute type 3 has an invalid length.
[  334.228496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.241933][T12390] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2969'.
[  334.280159][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.308717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.328200][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.365775][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.403022][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.442560][T12389] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2970'.
[  334.527786][T12256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.574623][ T8045] Bluetooth: hci5: command 0x041b tx timeout
[  334.662268][T12407] FAULT_INJECTION: forcing a failure.
[  334.662268][T12407] name failslab, interval 1, probability 0, space 0, times 0
[  334.676188][T12406] FAULT_INJECTION: forcing a failure.
[  334.676188][T12406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  334.697405][T12407] CPU: 1 PID: 12407 Comm: syz.4.2973 Not tainted syzkaller #0
[  334.704905][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  334.714982][T12407] Call Trace:
[  334.718281][T12407]  <TASK>
[  334.721245][T12407]  dump_stack_lvl+0x188/0x250
[  334.725979][T12407]  ? show_regs_print_info+0x20/0x20
[  334.731217][T12407]  ? load_image+0x410/0x410
[  334.735753][T12407]  ? perf_trace_lock+0xe4/0x390
[  334.740637][T12407]  ? perf_trace_lock+0xe4/0x390
[  334.745531][T12407]  should_fail+0x383/0x4b0
[  334.749993][T12407]  should_failslab+0x5/0x20
[  334.754520][T12407]  slab_pre_alloc_hook+0x51/0xc0
[  334.759495][T12407]  ? skb_clone+0x1bd/0x350
[  334.764100][T12407]  kmem_cache_alloc+0x3d/0x280
[  334.768909][T12407]  skb_clone+0x1bd/0x350
[  334.773196][T12407]  __netlink_deliver_tap+0x3cb/0x7c0
[  334.778551][T12407]  netlink_deliver_tap+0x16c/0x180
[  334.783697][T12407]  netlink_unicast+0x759/0x940
[  334.788508][T12407]  netlink_sendmsg+0x8ba/0xbe0
[  334.793309][T12407]  ? netlink_getsockopt+0x570/0x570
[  334.798528][T12407]  ? aa_sock_msg_perm+0x94/0x150
[  334.803504][T12407]  ? apparmor_socket_sendmsg+0x88/0x230
[  334.809082][T12407]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  334.814405][T12407]  ? security_socket_sendmsg+0x7c/0xa0
[  334.819895][T12407]  ? netlink_getsockopt+0x570/0x570
[  334.825126][T12407]  ____sys_sendmsg+0x5be/0x8f0
[  334.829926][T12407]  ? __sys_sendmsg_sock+0x30/0x30
[  334.834983][T12407]  ? import_iovec+0x6f/0xa0
[  334.839512][T12407]  ___sys_sendmsg+0x236/0x2e0
[  334.844212][T12407]  ? __sys_sendmsg+0x290/0x290
[  334.849009][T12407]  ? trace_event_raw_event_lock+0x250/0x250
[  334.854968][T12407]  __se_sys_sendmsg+0x1b7/0x2a0
[  334.859855][T12407]  ? __x64_sys_sendmsg+0x80/0x80
[  334.864814][T12407]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  334.870831][T12407]  ? lockdep_hardirqs_on+0x94/0x140
[  334.876055][T12407]  do_syscall_64+0x4c/0xa0
[  334.880494][T12407]  ? clear_bhb_loop+0x30/0x80
[  334.885195][T12407]  ? clear_bhb_loop+0x30/0x80
[  334.889897][T12407]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  334.895813][T12407] RIP: 0033:0x7fa6ccee5559
[  334.900254][T12407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.919889][T12407] RSP: 002b:00007fa6cb13d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.928346][T12407] RAX: ffffffffffffffda RBX: 00007fa6cd16cfa0 RCX: 00007fa6ccee5559
[  334.936344][T12407] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  334.944332][T12407] RBP: 00007fa6cb13d090 R08: 0000000000000000 R09: 0000000000000000
[  334.952330][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.960334][T12407] R13: 00007fa6cd16d038 R14: 00007fa6cd16cfa0 R15: 00007ffdd121c8b8
[  334.968354][T12407]  </TASK>
[  335.004629][T12406] CPU: 0 PID: 12406 Comm: syz.0.2974 Not tainted syzkaller #0
[  335.012176][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  335.022316][T12406] Call Trace:
[  335.025672][T12406]  <TASK>
[  335.028687][T12406]  dump_stack_lvl+0x188/0x250
[  335.033457][T12406]  ? show_regs_print_info+0x20/0x20
[  335.038718][T12406]  ? load_image+0x410/0x410
[  335.043287][T12406]  ? __lock_acquire+0x7d40/0x7d40
[  335.048384][T12406]  should_fail+0x383/0x4b0
[  335.052872][T12406]  _copy_from_user+0x2e/0x170
[  335.057611][T12406]  __copy_msghdr_from_user+0x48a/0x630
[  335.063118][T12406]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  335.068901][T12406]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  335.074367][T12406]  ___sys_sendmsg+0x19a/0x2e0
[  335.079122][T12406]  ? __sys_sendmsg+0x290/0x290
[  335.083978][T12406]  ? trace_event_raw_event_lock+0x250/0x250
[  335.089991][T12406]  __se_sys_sendmsg+0x1b7/0x2a0
[  335.094906][T12406]  ? __x64_sys_sendmsg+0x80/0x80
[  335.099882][T12406]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  335.105955][T12406]  ? lockdep_hardirqs_on+0x94/0x140
[  335.111220][T12406]  do_syscall_64+0x4c/0xa0
[  335.115686][T12406]  ? clear_bhb_loop+0x30/0x80
[  335.120404][T12406]  ? clear_bhb_loop+0x30/0x80
[  335.125126][T12406]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  335.131066][T12406] RIP: 0033:0x7f0736777559
[  335.135522][T12406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  335.149045][T12407] netlink: 'syz.4.2973': attribute type 10 has an invalid length.
[  335.155157][T12406] RSP: 002b:00007f07349cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.155196][T12406] RAX: ffffffffffffffda RBX: 00007f07369fefa0 RCX: 00007f0736777559
[  335.155214][T12406] RDX: 0000000000004800 RSI: 00002000000003c0 RDI: 0000000000000004
[  335.187473][T12406] RBP: 00007f07349cf090 R08: 0000000000000000 R09: 0000000000000000
[  335.195495][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.203514][T12406] R13: 00007f07369ff038 R14: 00007f07369fefa0 R15: 00007ffee72bf788
[  335.211586][T12406]  </TASK>
[  335.231340][T12411] netlink: 'syz.2.2976': attribute type 3 has an invalid length.
[  335.287305][T12411] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2976'.
[  335.304928][T12407] team0: Port device wlan1 removed
[  335.318199][T12407] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  335.353528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  335.376276][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.411993][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.484363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  335.494867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  335.550908][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  335.565622][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  335.615969][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  335.656093][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  335.676576][T12256] device veth0_vlan entered promiscuous mode
[  335.726857][T12256] device veth1_vlan entered promiscuous mode
[  335.776734][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  335.788816][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  335.815200][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  335.835821][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  335.871835][T12256] device veth0_macvtap entered promiscuous mode
[  335.912211][T12256] device veth1_macvtap entered promiscuous mode
[  335.952069][T12430] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2983'.
[  335.992744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  336.006771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  336.056117][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  336.073633][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.098398][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.120401][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  336.133736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  336.155147][T12256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.175450][T12256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.201430][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.239402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  336.251528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  336.287851][T12256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.315485][T12256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.324386][T12256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.338147][T12256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.442388][T12437] netlink: 'syz.1.2986': attribute type 3 has an invalid length.
[  336.483718][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.499936][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.534794][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  336.573718][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.582600][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.602621][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  336.655182][ T1110] Bluetooth: hci5: command 0x040f tx timeout
[  336.676495][T12438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.427282][T12452] netlink: 'syz.2.2991': attribute type 2 has an invalid length.
[  338.072902][T12458] rxe_eth0 speed is unknown, defaulting to 1000
[  338.218608][T12461] __nla_validate_parse: 1 callbacks suppressed
[  338.218627][T12461] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2994'.
[  338.459022][T12318] bond0: (slave syz_tun): Releasing backup interface
[  338.525751][T12472] netlink: 'syz.1.2999': attribute type 3 has an invalid length.
[  338.544963][T12472] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2999'.
[  338.688924][T12458] chnl_net:caif_netlink_parms(): no params data found
[  338.734868][ T8045] Bluetooth: hci5: command 0x0419 tx timeout
[  338.808943][T12458] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.825179][T12458] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.834685][T12458] device bridge_slave_0 entered promiscuous mode
[  338.843594][T12458] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.853320][T12458] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.861777][T12458] device bridge_slave_1 entered promiscuous mode
[  338.895047][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.917279][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.984229][T12458] team0: Port device team_slave_0 added
[  339.036901][T12458] team0: Port device team_slave_1 added
[  339.167019][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.174022][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.343586][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.379392][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.386571][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.496207][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.625330][T12501] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3008'.
[  339.706334][T12503] FAULT_INJECTION: forcing a failure.
[  339.706334][T12503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  339.742193][T12458] device hsr_slave_0 entered promiscuous mode
[  339.753179][T12503] CPU: 1 PID: 12503 Comm: syz.2.3010 Not tainted syzkaller #0
[  339.760690][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  339.770767][T12503] Call Trace:
[  339.774066][T12503]  <TASK>
[  339.777144][T12503]  dump_stack_lvl+0x188/0x250
[  339.781862][T12503]  ? show_regs_print_info+0x20/0x20
[  339.787104][T12503]  ? load_image+0x410/0x410
[  339.791640][T12503]  ? __lock_acquire+0x7d40/0x7d40
[  339.796702][T12503]  should_fail+0x383/0x4b0
[  339.801154][T12503]  _copy_to_user+0x2e/0x130
[  339.805720][T12503]  simple_read_from_buffer+0xe3/0x150
[  339.811127][T12503]  proc_fail_nth_read+0x1a6/0x220
[  339.816185][T12503]  ? proc_fault_inject_write+0x310/0x310
[  339.821855][T12503]  ? fsnotify_perm+0x254/0x560
[  339.826654][T12503]  ? proc_fault_inject_write+0x310/0x310
[  339.832403][T12503]  vfs_read+0x2ff/0xd50
[  339.836621][T12503]  ? __lock_acquire+0x7d40/0x7d40
[  339.841677][T12503]  ? kernel_read+0x1e0/0x1e0
[  339.846311][T12503]  ? mutex_lock_nested+0x17/0x20
[  339.851271][T12503]  ? __fdget_pos+0x2bf/0x370
[  339.855891][T12503]  ? ksys_read+0x70/0x260
[  339.860255][T12503]  ksys_read+0x153/0x260
[  339.864638][T12503]  ? vfs_write+0xd70/0xd70
[  339.869128][T12503]  ? lockdep_hardirqs_on+0x94/0x140
[  339.874372][T12503]  do_syscall_64+0x4c/0xa0
[  339.878815][T12503]  ? clear_bhb_loop+0x30/0x80
[  339.883524][T12503]  ? clear_bhb_loop+0x30/0x80
[  339.888230][T12503]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  339.894156][T12503] RIP: 0033:0x7fa0d396ad8e
[  339.898606][T12503] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  339.918238][T12503] RSP: 002b:00007fa0d1c01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  339.926677][T12503] RAX: ffffffffffffffda RBX: 00007fa0d1c026c0 RCX: 00007fa0d396ad8e
[  339.934679][T12503] RDX: 000000000000000f RSI: 00007fa0d1c020a0 RDI: 0000000000000005
[  339.942684][T12503] RBP: 00007fa0d1c02090 R08: 0000000000000000 R09: 0000000000000000
[  339.950688][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  339.958694][T12503] R13: 00007fa0d3c32038 R14: 00007fa0d3c31fa0 R15: 00007ffe9a75e8e8
[  339.966706][T12503]  </TASK>
[  339.973036][T12458] device hsr_slave_1 entered promiscuous mode
[  339.981334][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.001427][T12505] netlink: 'syz.0.3011': attribute type 3 has an invalid length.
[  340.024615][T12505] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3011'.
[  340.026764][T12458] Cannot create hsr debugfs directory
[  340.094937][ T8045] Bluetooth: hci2: command 0x0409 tx timeout
[  340.420455][T12458] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.692942][T12458] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.745340][T12532] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3022'.
[  340.811905][T12458] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.882653][T12544] netlink: 'syz.3.3026': attribute type 10 has an invalid length.
[  340.891755][T12544] device syz_tun entered promiscuous mode
[  340.929134][T12548] netlink: 'syz.0.3027': attribute type 3 has an invalid length.
[  340.940087][T12548] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3027'.
[  340.942306][T12544] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  340.980532][T12458] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.036336][T12553] netlink: 'syz.2.3029': attribute type 10 has an invalid length.
[  341.045167][T12553] device syz_tun entered promiscuous mode
[  341.219833][T12458] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  341.252763][T12458] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  341.282197][T12458] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  341.308846][T12458] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  341.327958][T12565] netlink: 'syz.0.3032': attribute type 3 has an invalid length.
[  341.356162][T12565] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3032'.
[  341.528127][T12458] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.575703][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  341.584369][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  341.594259][T12574] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3034'.
[  341.610791][T12458] 8021q: adding VLAN 0 to HW filter on device team0
[  341.636479][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  341.647805][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.657691][ T2299] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.664829][ T2299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.690227][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  341.709027][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.718911][ T2299] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.726113][ T2299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.734006][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  341.761710][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  341.771988][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  341.787481][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  341.800889][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.813143][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  341.861971][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  341.879092][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.941505][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  342.022985][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  342.111046][T12579] netlink: 'syz.1.3035': attribute type 2 has an invalid length.
[  342.165109][T12458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  342.181395][ T8045] Bluetooth: hci2: command 0x041b tx timeout
[  342.195998][T12458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.204402][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  342.214213][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.456030][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  342.469085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  342.489873][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.769306][T12603] netlink: 'syz.1.3042': attribute type 21 has an invalid length.
[  342.817661][T12603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3042'.
[  342.852922][T12603] netlink: 'syz.1.3042': attribute type 1 has an invalid length.
[  342.900151][T12609] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3044'.
[  342.969170][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  343.029048][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  343.092753][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  343.126105][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  343.134206][T12619] netlink: 'syz.3.3048': attribute type 3 has an invalid length.
[  343.159893][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  343.188652][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  343.229456][T12458] device veth0_vlan entered promiscuous mode
[  343.257350][T12458] device veth1_vlan entered promiscuous mode
[  343.339932][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  343.353855][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  343.381085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  343.391351][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  343.474160][T12458] device veth0_macvtap entered promiscuous mode
[  343.554220][T12458] device veth1_macvtap entered promiscuous mode
[  343.601132][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.613715][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.644553][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.662688][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.690713][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.715987][T12636] netlink: 'syz.3.3055': attribute type 10 has an invalid length.
[  343.763329][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  343.785757][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  343.824264][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.859627][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.890182][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.928271][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.958991][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.986858][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.027870][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.045157][T12641] __nla_validate_parse: 1 callbacks suppressed
[  344.045180][T12641] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3057'.
[  344.105658][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  344.133769][T12651] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3060'.
[  344.150168][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  344.162070][T12458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.175829][T12458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.188234][T12458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.198523][T12458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.233486][T12654] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3062'.
[  344.257905][ T4300] Bluetooth: hci2: command 0x040f tx timeout
[  344.369339][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.390153][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.418850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.458770][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.469347][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.486504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  345.123913][T12687] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3071'.
[  345.192041][T12688] rxe_eth0 speed is unknown, defaulting to 1000
[  345.361852][T12692] validate_nla: 2 callbacks suppressed
[  345.361896][T12692] netlink: 'syz.4.3073': attribute type 3 has an invalid length.
[  345.369037][T12695] netlink: 'syz.0.3074': attribute type 3 has an invalid length.
[  345.369107][T12695] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3074'.
[  345.415188][T12692] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3073'.
[  345.608929][T12702] netlink: 'syz.0.3076': attribute type 3 has an invalid length.
[  345.624154][T12702] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3076'.
[  345.744043][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.753990][T12710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.766313][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.774430][T12710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.867252][T12688] chnl_net:caif_netlink_parms(): no params data found
[  345.999186][T12688] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.008868][T12688] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.025080][T12688] device bridge_slave_0 entered promiscuous mode
[  346.038527][T12688] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.048971][T12688] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.079991][T12688] device bridge_slave_1 entered promiscuous mode
[  346.191907][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.243107][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.335626][ T4300] Bluetooth: hci2: command 0x0419 tx timeout
[  346.443753][T12688] team0: Port device team_slave_0 added
[  346.455980][T12729] netlink: 'syz.2.3083': attribute type 10 has an invalid length.
[  346.467457][T12729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3083'.
[  346.496676][T12729] device dummy0 entered promiscuous mode
[  346.522407][T12729] bridge0: port 3(dummy0) entered blocking state
[  346.531006][T12729] bridge0: port 3(dummy0) entered disabled state
[  346.597757][T12729] bridge0: port 3(dummy0) entered blocking state
[  346.605059][T12729] bridge0: port 3(dummy0) entered forwarding state
[  346.648436][T12688] team0: Port device team_slave_1 added
[  346.667978][T12732] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3084'.
[  346.744247][T12738] netlink: 'syz.3.3085': attribute type 21 has an invalid length.
[  346.819281][T12688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.827262][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.853558][T12688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.878330][T12688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.888126][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.928018][T12688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  347.031973][T12688] device hsr_slave_0 entered promiscuous mode
[  347.052998][T12688] device hsr_slave_1 entered promiscuous mode
[  347.093269][T12688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  347.110341][T12688] Cannot create hsr debugfs directory
[  347.122363][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.135825][T12748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.137858][ T4300] Bluetooth: hci3: command 0x0409 tx timeout
[  347.163154][T12748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.191845][T12748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.259792][T12750] netlink: 'syz.3.3091': attribute type 3 has an invalid length.
[  347.269564][T12756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3091'.
[  347.523375][T12759] netlink: 'syz.2.3094': attribute type 3 has an invalid length.
[  347.571931][T12763] netlink: 'syz.0.3095': attribute type 3 has an invalid length.
[  347.635032][T12688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.797403][T12688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.903789][T12688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.006600][T12688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.177992][T12688] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  348.217813][T12688] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  348.266008][T12688] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  348.339087][T12792] netlink: 'syz.2.3105': attribute type 3 has an invalid length.
[  348.495251][T12688] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  348.607113][T12795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.693953][T12795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.711713][T12802] FAULT_INJECTION: forcing a failure.
[  348.711713][T12802] name failslab, interval 1, probability 0, space 0, times 0
[  348.757654][T12802] CPU: 1 PID: 12802 Comm: syz.0.3109 Not tainted syzkaller #0
[  348.765185][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  348.775272][T12802] Call Trace:
[  348.778581][T12802]  <TASK>
[  348.781543][T12802]  dump_stack_lvl+0x188/0x250
[  348.786269][T12802]  ? show_regs_print_info+0x20/0x20
[  348.791505][T12802]  ? load_image+0x410/0x410
[  348.796061][T12802]  ? __might_sleep+0xf0/0xf0
[  348.800807][T12802]  ? __lock_acquire+0x7d40/0x7d40
[  348.805907][T12802]  should_fail+0x383/0x4b0
[  348.810399][T12802]  should_failslab+0x5/0x20
[  348.814935][T12802]  slab_pre_alloc_hook+0x51/0xc0
[  348.819915][T12802]  ? __d_alloc+0x27/0x6d0
[  348.824287][T12802]  kmem_cache_alloc+0x3d/0x280
[  348.829110][T12802]  __d_alloc+0x27/0x6d0
[  348.833333][T12802]  d_alloc_parallel+0x7b/0x1320
[  348.838268][T12802]  ? __init_waitqueue_head+0xa4/0x140
[  348.843693][T12802]  __lookup_slow+0x134/0x410
[  348.848370][T12802]  ? lookup_one_len+0x2d0/0x2d0
[  348.853293][T12802]  ? down_read+0x1aa/0x2e0
[  348.857770][T12802]  lookup_slow+0x53/0x70
[  348.862163][T12802]  walk_component+0x314/0x460
[  348.866899][T12802]  link_path_walk+0x688/0xde0
[  348.871665][T12802]  ? handle_lookup_down+0x130/0x130
[  348.876937][T12802]  path_openat+0x28e/0x2fb0
[  348.881576][T12802]  ? do_filp_open+0x400/0x400
[  348.886307][T12802]  ? perf_trace_lock+0xe4/0x390
[  348.891213][T12802]  ? trace_event_raw_event_lock+0x250/0x250
[  348.897170][T12802]  do_filp_open+0x1df/0x400
[  348.901726][T12802]  ? vfs_tmpfile+0x300/0x300
[  348.906386][T12802]  ? noop_direct_IO+0x10/0x10
[  348.911122][T12802]  ? _raw_spin_unlock+0x24/0x40
[  348.916110][T12802]  ? alloc_fd+0x59e/0x650
[  348.920503][T12802]  do_sys_openat2+0x14b/0x500
[  348.925219][T12802]  ? __lock_acquire+0x7d40/0x7d40
[  348.930287][T12802]  ? do_sys_open+0xe0/0xe0
[  348.934743][T12802]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  348.940784][T12802]  ? lock_chain_count+0x20/0x20
[  348.945651][T12802]  __x64_sys_openat+0x135/0x160
[  348.950525][T12802]  do_syscall_64+0x4c/0xa0
[  348.954956][T12802]  ? clear_bhb_loop+0x30/0x80
[  348.959661][T12802]  ? clear_bhb_loop+0x30/0x80
[  348.964349][T12802]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  348.970265][T12802] RIP: 0033:0x7f0736737d8e
[  348.974701][T12802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  348.994337][T12802] RSP: 002b:00007f07349ceec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  349.002766][T12802] RAX: ffffffffffffffda RBX: 00007f07349cf6c0 RCX: 00007f0736737d8e
[  349.010746][T12802] RDX: 0000000000000002 RSI: 00007f07349cef90 RDI: ffffffffffffff9c
[  349.018727][T12802] RBP: 00007f07349cf090 R08: 0000000000000000 R09: 0000000000000000
[  349.026716][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.034721][T12802] R13: 00007f07369ff038 R14: 00007f07369fefa0 R15: 00007ffee72bf788
[  349.042757][T12802]  </TASK>
[  349.056489][T12795] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  349.093185][T12795] bond0 (unregistering): Released all slaves
[  349.218725][ T4300] Bluetooth: hci3: command 0x041b tx timeout
[  349.252626][T12806] netlink: 'syz.2.3110': attribute type 3 has an invalid length.
[  349.263572][T12806] __nla_validate_parse: 6 callbacks suppressed
[  349.263945][T12806] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3110'.
[  349.311643][T12688] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.333123][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  349.369747][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  349.382796][T12806] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3110'.
[  349.409695][T12688] 8021q: adding VLAN 0 to HW filter on device team0
[  349.457321][T12811] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3111'.
[  349.501877][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  349.521009][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.562260][ T2299] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.569429][ T2299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.637498][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  349.689965][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  349.719462][T12815] syz.3.3115[12815] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.720203][T12815] syz.3.3115[12815] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  349.744998][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.861315][T12823] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3118'.
[  349.873141][ T2299] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.880291][ T2299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.898638][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  349.936257][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  349.989671][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  350.021868][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  350.035661][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  350.063359][T12688] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  350.083547][T12688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  350.149564][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  350.169929][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  350.209199][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  350.246646][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  350.289742][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  350.331061][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  350.376314][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.794402][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  350.802680][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  350.819502][T12688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.860714][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  350.880306][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  350.918181][T12852] validate_nla: 1 callbacks suppressed
[  350.918219][T12852] netlink: 'syz.4.3129': attribute type 3 has an invalid length.
[  350.949505][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  350.953744][T12852] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3129'.
[  350.974203][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  350.990608][T12688] device veth0_vlan entered promiscuous mode
[  350.999397][T12844] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3122'.
[  351.009799][T12853] netlink: 'syz.3.3128': attribute type 3 has an invalid length.
[  351.023636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  351.037201][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  351.061176][T12853] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3128'.
[  351.076780][T12688] device veth1_vlan entered promiscuous mode
[  351.116657][T12855] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3127'.
[  351.144995][T12853] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3128'.
[  351.243098][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  351.258268][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  351.296563][ T4300] Bluetooth: hci3: command 0x040f tx timeout
[  351.331615][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  351.392483][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  351.452208][T12859] netlink: 'syz.4.3130': attribute type 1 has an invalid length.
[  351.471818][T12688] device veth0_macvtap entered promiscuous mode
[  351.507498][T12688] device veth1_macvtap entered promiscuous mode
[  351.517397][T12859] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3130'.
[  351.628199][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.679269][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.716892][T12860] netlink: 'syz.4.3130': attribute type 1 has an invalid length.
[  351.724265][T12688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  351.735478][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  351.759859][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.787950][T12688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  351.803994][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  351.819498][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  351.857111][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  351.878221][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  351.898039][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  351.912785][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  351.925637][T12688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  351.937930][T12688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  351.947757][T12688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  351.956985][T12688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  352.118660][T12882] netlink: 'syz.2.3139': attribute type 3 has an invalid length.
[  352.127093][ T2299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.142335][ T2299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.171623][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  352.233736][ T2299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.242632][ T2299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.254577][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  352.771705][T12900] FAULT_INJECTION: forcing a failure.
[  352.771705][T12900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.820911][T12900] CPU: 1 PID: 12900 Comm: syz.0.3144 Not tainted syzkaller #0
[  352.828444][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  352.838531][T12900] Call Trace:
[  352.841842][T12900]  <TASK>
[  352.844791][T12900]  dump_stack_lvl+0x188/0x250
[  352.849507][T12900]  ? show_regs_print_info+0x20/0x20
[  352.854734][T12900]  ? load_image+0x410/0x410
[  352.859271][T12900]  ? __lock_acquire+0x7d40/0x7d40
[  352.864333][T12900]  should_fail+0x383/0x4b0
[  352.868783][T12900]  _copy_from_user+0x2e/0x170
[  352.873497][T12900]  iovec_from_user+0x142/0x370
[  352.878294][T12900]  __import_iovec+0x70/0x490
[  352.882942][T12900]  import_iovec+0x6f/0xa0
[  352.887319][T12900]  ___sys_sendmsg+0x1fd/0x2e0
[  352.892035][T12900]  ? __sys_sendmsg+0x290/0x290
[  352.896873][T12900]  __se_sys_sendmsg+0x1b7/0x2a0
[  352.901762][T12900]  ? __x64_sys_sendmsg+0x80/0x80
[  352.906728][T12900]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  352.912751][T12900]  ? lockdep_hardirqs_on+0x94/0x140
[  352.918018][T12900]  do_syscall_64+0x4c/0xa0
[  352.922464][T12900]  ? clear_bhb_loop+0x30/0x80
[  352.927179][T12900]  ? clear_bhb_loop+0x30/0x80
[  352.931892][T12900]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  352.937813][T12900] RIP: 0033:0x7f0736777559
[  352.942265][T12900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.961901][T12900] RSP: 002b:00007f07349cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.970349][T12900] RAX: ffffffffffffffda RBX: 00007f07369fefa0 RCX: 00007f0736777559
[  352.978351][T12900] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003
[  352.986355][T12900] RBP: 00007f07349cf090 R08: 0000000000000000 R09: 0000000000000000
[  352.994366][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.002370][T12900] R13: 00007f07369ff038 R14: 00007f07369fefa0 R15: 00007ffee72bf788
[  353.010391][T12900]  </TASK>
[  353.174028][T12912] netlink: 'syz.3.3146': attribute type 4 has an invalid length.
[  353.175374][T12907] netlink: 'syz.4.3145': attribute type 27 has an invalid length.
[  353.253749][T12908] rxe_eth0 speed is unknown, defaulting to 1000
[  353.374831][ T8045] Bluetooth: hci3: command 0x0419 tx timeout
[  354.010708][T12927] netlink: 'syz.1.3152': attribute type 21 has an invalid length.
[  354.071914][T12908] chnl_net:caif_netlink_parms(): no params data found
[  354.221787][T12908] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.234803][T12908] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.248436][T12908] device bridge_slave_0 entered promiscuous mode
[  354.267807][T12908] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.292489][T12908] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.329198][T12908] device bridge_slave_1 entered promiscuous mode
[  354.425336][T12908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.465867][T12908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.521517][  T156] tipc: Subscription rejected, illegal request
[  354.543756][T12908] team0: Port device team_slave_0 added
[  354.557975][T12908] team0: Port device team_slave_1 added
[  354.606921][T12908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.617117][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.647515][T12908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.663332][T12908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.674348][T12908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.719817][T12908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.879589][T12966] netlink: 'syz.3.3163': attribute type 1 has an invalid length.
[  354.902667][T12966] __nla_validate_parse: 7 callbacks suppressed
[  354.902687][T12966] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3163'.
[  355.018991][T12908] device hsr_slave_0 entered promiscuous mode
[  355.038835][T12908] device hsr_slave_1 entered promiscuous mode
[  355.058914][T12908] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.082004][T12908] Cannot create hsr debugfs directory
[  355.300840][ T4300] Bluetooth: hci4: command 0x0409 tx timeout
[  355.529432][T12908] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.578054][T12991] netlink: 'syz.4.3170': attribute type 3 has an invalid length.
[  355.608152][T12991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3170'.
[  355.767593][T12908] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.908884][T12908] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.956594][T12996] netlink: 'syz.1.3172': attribute type 10 has an invalid length.
[  355.987964][T12996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3172'.
[  356.027721][T12996] device team0 entered promiscuous mode
[  356.038918][T12996] device team_slave_0 entered promiscuous mode
[  356.051761][T12996] device team_slave_1 entered promiscuous mode
[  356.131222][T12996] bridge0: port 3(team0) entered blocking state
[  356.145127][T12996] bridge0: port 3(team0) entered disabled state
[  356.329700][T12996] bridge0: port 3(team0) entered blocking state
[  356.337048][T12996] bridge0: port 3(team0) entered forwarding state
[  357.015363][T12908] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.256526][T13019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3178'.
[  357.375032][ T8045] Bluetooth: hci4: command 0x041b tx timeout
[  357.443497][T12908] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  357.490918][T12908] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  357.510562][T12908] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  357.539412][T12908] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  358.525783][T12908] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.607949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  358.619747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  358.738482][T12908] 8021q: adding VLAN 0 to HW filter on device team0
[  358.816856][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  358.852170][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  358.902840][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.910016][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.922586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  358.940116][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  358.960618][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  358.979721][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.986852][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.030156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  359.049677][T13062] FAULT_INJECTION: forcing a failure.
[  359.049677][T13062] name failslab, interval 1, probability 0, space 0, times 0
[  359.069443][T13062] CPU: 1 PID: 13062 Comm: syz.3.3190 Not tainted syzkaller #0
[  359.076940][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  359.087010][T13062] Call Trace:
[  359.090315][T13062]  <TASK>
[  359.093265][T13062]  dump_stack_lvl+0x188/0x250
[  359.097999][T13062]  ? show_regs_print_info+0x20/0x20
[  359.103234][T13062]  ? load_image+0x410/0x410
[  359.107782][T13062]  ? __lock_acquire+0x7d40/0x7d40
[  359.112846][T13062]  should_fail+0x383/0x4b0
[  359.117298][T13062]  should_failslab+0x5/0x20
[  359.121822][T13062]  slab_pre_alloc_hook+0x51/0xc0
[  359.126785][T13062]  __kmalloc+0x6b/0x340
[  359.130969][T13062]  ? ioctl_standard_iw_point+0x529/0xd50
[  359.136641][T13062]  ioctl_standard_iw_point+0x529/0xd50
[  359.142145][T13062]  ? __cfg80211_wext_giwauth+0x10/0x10
[  359.147659][T13062]  ? iw_handler_get_iwstats+0x240/0x240
[  359.153238][T13062]  ? mutex_lock_io_nested+0x60/0x60
[  359.158463][T13062]  ? apparmor_capable+0x12c/0x190
[  359.163517][T13062]  ? full_name_hash+0x8e/0xe0
[  359.168216][T13062]  ioctl_standard_call+0xaa/0x250
[  359.173271][T13062]  ? __cfg80211_wext_giwauth+0x10/0x10
[  359.178757][T13062]  ? __cfg80211_wext_giwauth+0x10/0x10
[  359.184246][T13062]  wext_ioctl_dispatch+0x3da/0x470
[  359.189380][T13062]  ? wext_ioctl_dispatch+0x470/0x470
[  359.194688][T13062]  ? iw_handler_get_private+0x1e0/0x1e0
[  359.200259][T13062]  wext_handle_ioctl+0x114/0x1d0
[  359.205221][T13062]  ? call_commit_handler+0xf0/0xf0
[  359.210364][T13062]  sock_ioctl+0x143/0x700
[  359.214722][T13062]  ? sock_poll+0x420/0x420
[  359.219168][T13062]  ? bpf_lsm_file_ioctl+0x5/0x10
[  359.224120][T13062]  ? security_file_ioctl+0x7c/0xa0
[  359.229248][T13062]  ? sock_poll+0x420/0x420
[  359.233684][T13062]  __se_sys_ioctl+0xfa/0x170
[  359.238306][T13062]  do_syscall_64+0x4c/0xa0
[  359.242739][T13062]  ? clear_bhb_loop+0x30/0x80
[  359.247438][T13062]  ? clear_bhb_loop+0x30/0x80
[  359.252143][T13062]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.258083][T13062] RIP: 0033:0x7f1edfe16559
[  359.262524][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.282151][T13062] RSP: 002b:00007f1ede06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  359.290634][T13062] RAX: ffffffffffffffda RBX: 00007f1ee009dfa0 RCX: 00007f1edfe16559
[  359.298623][T13062] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004
[  359.306611][T13062] RBP: 00007f1ede06e090 R08: 0000000000000000 R09: 0000000000000000
[  359.314601][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.322590][T13062] R13: 00007f1ee009e038 R14: 00007f1ee009dfa0 R15: 00007fff751bbf48
[  359.330595][T13062]  </TASK>
[  359.386933][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  359.413518][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  359.430446][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  359.454878][ T4300] Bluetooth: hci4: command 0x040f tx timeout
[  359.469173][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  359.493982][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  359.537206][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  359.582357][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  359.628640][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  359.684242][T12908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.731809][T12908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  359.753405][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  359.781194][  T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  360.278322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  360.291658][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  360.330191][T12908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.423306][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  360.446279][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  360.504237][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  360.526181][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  360.538879][T12908] device veth0_vlan entered promiscuous mode
[  360.563995][T13108] netlink: 'syz.1.3204': attribute type 3 has an invalid length.
[  360.577699][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  360.590764][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  360.594254][T13108] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3204'.
[  360.622558][T12908] device veth1_vlan entered promiscuous mode
[  360.641819][T13116] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3204'.
[  360.685644][T13117] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3206'.
[  360.715485][T13113] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3206'.
[  360.769159][T12908] device veth0_macvtap entered promiscuous mode
[  360.787365][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.809300][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  360.828441][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  360.879696][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  360.915120][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  360.951346][T12908] device veth1_macvtap entered promiscuous mode
[  361.071125][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.082005][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.096962][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.108948][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.122414][T12908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.140847][T13125] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3208'.
[  361.163028][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  361.173571][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  361.188231][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  361.203233][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.219368][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.230195][T12908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.244311][T12908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.261283][T12908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.270301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  361.279961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  361.291812][T12908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.301566][T12908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.325377][T12908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.336900][T12908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.536917][ T1110] Bluetooth: hci4: command 0x0419 tx timeout
[  361.559313][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.591093][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.657460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  361.672497][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.709369][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.743496][ T2299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  361.956005][T13161] netlink: 'syz.2.3150': attribute type 3 has an invalid length.
[  361.964434][T13161] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3150'.
[  362.170155][T13168] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3221'.
[  362.323272][T13170] netlink: 'syz.1.3222': attribute type 3 has an invalid length.
[  362.364154][T13170] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3222'.
[  362.699807][T13170] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3222'.
[  363.016295][T13183] device syzkaller0 entered promiscuous mode
[  364.110030][T13179] rxe_eth0 speed is unknown, defaulting to 1000
[  364.227055][ T2299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.377568][ T2299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.516753][ T2299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.650509][ T2299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.655715][ T4300] Bluetooth: hci1: command 0x0409 tx timeout
[  364.822813][T13210] rxe_eth0 speed is unknown, defaulting to 1000
[  364.854583][T13218] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3236'.
[  365.041984][T13179] chnl_net:caif_netlink_parms(): no params data found
[  365.482232][T13179] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.495148][T13179] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.529533][T13179] device bridge_slave_0 entered promiscuous mode
[  365.587383][T13179] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.604513][T13179] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.613738][T13179] device bridge_slave_1 entered promiscuous mode
[  365.681466][T13233] netlink: 'syz.2.3240': attribute type 3 has an invalid length.
[  365.736526][T13233] __nla_validate_parse: 1 callbacks suppressed
[  365.736571][T13233] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3240'.
[  365.786914][T13235] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3240'.
[  366.027297][T13228] netlink: 'syz.1.3239': attribute type 4 has an invalid length.
[  366.037957][T13228] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3239'.
[  366.196477][T13228] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  366.402288][T13179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.446780][T13179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.617382][T13179] team0: Port device team_slave_0 added
[  366.647531][T13179] team0: Port device team_slave_1 added
[  366.694436][T13264] FAULT_INJECTION: forcing a failure.
[  366.694436][T13264] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.737701][ T8045] Bluetooth: hci1: command 0x041b tx timeout
[  366.753315][T13179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.753984][T13264] CPU: 1 PID: 13264 Comm: syz.4.3247 Not tainted syzkaller #0
[  366.767862][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  366.770131][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.777935][T13264] Call Trace:
[  366.777944][T13264]  <TASK>
[  366.777957][T13264]  dump_stack_lvl+0x188/0x250
[  366.777986][T13264]  ? show_regs_print_info+0x20/0x20
[  366.778009][T13264]  ? load_image+0x410/0x410
[  366.778034][T13264]  ? __lock_acquire+0x7d40/0x7d40
[  366.778064][T13264]  should_fail+0x383/0x4b0
[  366.834129][T13264]  _copy_to_user+0x2e/0x130
[  366.838671][T13264]  simple_read_from_buffer+0xe3/0x150
[  366.844116][T13264]  proc_fail_nth_read+0x1a6/0x220
[  366.849180][T13264]  ? proc_fault_inject_write+0x310/0x310
[  366.854841][T13264]  ? fsnotify_perm+0x254/0x560
[  366.856218][T13179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.859627][T13264]  ? proc_fault_inject_write+0x310/0x310
[  366.859657][T13264]  vfs_read+0x2ff/0xd50
[  366.859681][T13264]  ? __lock_acquire+0x7d40/0x7d40
[  366.885017][T13264]  ? kernel_read+0x1e0/0x1e0
[  366.889662][T13264]  ? mutex_lock_nested+0x17/0x20
[  366.894673][T13264]  ? __fdget_pos+0x2bf/0x370
[  366.899396][T13264]  ? ksys_read+0x70/0x260
[  366.903768][T13264]  ksys_read+0x153/0x260
[  366.908050][T13264]  ? vfs_write+0xd70/0xd70
[  366.912510][T13264]  ? lockdep_hardirqs_on+0x94/0x140
[  366.917755][T13264]  do_syscall_64+0x4c/0xa0
[  366.922206][T13264]  ? clear_bhb_loop+0x30/0x80
[  366.922594][T13179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.926912][T13264]  ? clear_bhb_loop+0x30/0x80
[  366.926941][T13264]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  366.926965][T13264] RIP: 0033:0x7fc74ed51d8e
[  366.926985][T13264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  366.927004][T13264] RSP: 002b:00007fc74cfe8fe8 EFLAGS: 00000246
[  366.959993][T13179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.968549][T13264]  ORIG_RAX: 0000000000000000
[  366.968562][T13264] RAX: ffffffffffffffda RBX: 00007fc74cfe96c0 RCX: 00007fc74ed51d8e
[  366.968578][T13264] RDX: 000000000000000f RSI: 00007fc74cfe90a0 RDI: 0000000000000004
[  366.968591][T13264] RBP: 00007fc74cfe9090 R08: 0000000000000000 R09: 0000000000000000
[  366.968603][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.968616][T13264] R13: 00007fc74f019038 R14: 00007fc74f018fa0 R15: 00007fff21149108
[  366.968645][T13264]  </TASK>
[  367.060964][T13179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.107409][T13270] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3248'.
[  367.220324][T13179] device hsr_slave_0 entered promiscuous mode
[  367.243315][T13179] device hsr_slave_1 entered promiscuous mode
[  367.281033][T13179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.305218][T13179] Cannot create hsr debugfs directory
[  367.661316][T13287] netlink: 'syz.4.3252': attribute type 4 has an invalid length.
[  367.673582][T13287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3252'.
[  367.704882][T13287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  368.010695][T13292] netlink: 'syz.4.3253': attribute type 3 has an invalid length.
[  368.049705][T13292] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3253'.
[  368.096548][T13296] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3253'.
[  368.474116][T13308] netlink: 'syz.2.3257': attribute type 27 has an invalid length.
[  368.487691][T13308] netlink: 'syz.2.3257': attribute type 25 has an invalid length.
[  368.744998][ T2299] team0: Port device wlan1 removed
[  368.793248][T13179] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  368.808871][T13313] netlink: 'syz.1.3258': attribute type 1 has an invalid length.
[  368.818234][ T8045] Bluetooth: hci1: command 0x040f tx timeout
[  368.864755][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'.
[  368.876081][T13179] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  368.930046][T13323] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3260'.
[  368.966438][T13179] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  368.997474][T13179] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  369.332362][T13179] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.413522][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.423608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.463577][T13179] 8021q: adding VLAN 0 to HW filter on device team0
[  369.551509][ T2299] device bridge_slave_1 left promiscuous mode
[  369.578336][ T2299] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.619518][ T2299] device bridge_slave_0 left promiscuous mode
[  369.650810][ T2299] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.672210][T13353] netlink: 'syz.4.3265': attribute type 1 has an invalid length.
[  369.712684][T13353] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3265'.
[  369.748456][T13344] can_create: 1 callbacks suppressed
[  369.748475][T13344] can: request_module (can-proto-3) failed.
[  370.029058][ T2299] device veth1_macvtap left promiscuous mode
[  370.051181][ T2299] device veth1_vlan left promiscuous mode
[  370.066697][ T2299] device veth0_vlan left promiscuous mode
[  370.671745][ T2299] team0 (unregistering): Port device team_slave_1 removed
[  370.803083][ T2299] team0 (unregistering): Port device bridge0 removed
[  370.858779][T13347] netlink: 'syz.2.3263': attribute type 4 has an invalid length.
[  370.868277][T13347] __nla_validate_parse: 1 callbacks suppressed
[  370.868291][T13347] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3263'.
[  370.899456][ T8045] Bluetooth: hci1: command 0x0419 tx timeout
[  370.906879][T13347] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  370.961244][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  370.978735][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  370.993576][T13245] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.000877][T13245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.039091][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  371.084221][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  371.124398][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  371.158142][T13245] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.165268][T13245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.206146][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.265262][T13405] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3273'.
[  371.297513][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.325636][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.376893][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.428226][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  371.479122][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  371.492692][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  371.518935][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  371.538597][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  371.583892][T13179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  371.600855][T13179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  371.612584][T13412] netlink: 'syz.1.3283': attribute type 10 has an invalid length.
[  371.636170][T13412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3283'.
[  371.653193][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  371.664295][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  371.693920][T13415] netlink: 'syz.4.3274': attribute type 1 has an invalid length.
[  371.722264][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'.
[  372.021485][T13433] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3279'.
[  372.158480][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  372.186378][T13245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  372.242128][T13179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.318630][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  372.331044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  372.367406][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  372.381807][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  372.395440][T13179] device veth0_vlan entered promiscuous mode
[  372.410399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  372.421580][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  372.438902][T13179] device veth1_vlan entered promiscuous mode
[  372.479006][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  372.492485][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  372.500921][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  372.516682][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  372.535816][T13179] device veth0_macvtap entered promiscuous mode
[  372.556144][T13179] device veth1_macvtap entered promiscuous mode
[  372.616040][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.650607][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.693574][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.720663][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.751215][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.780188][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.834306][T13179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.876258][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  372.896682][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  372.927586][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  372.948755][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  372.982321][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.007602][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.033163][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.089267][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.114516][T13179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.140147][T13179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.172316][T13179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.199035][T13443] netlink: 'syz.3.3282': attribute type 21 has an invalid length.
[  373.215796][T13443] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3282'.
[  373.237607][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  373.256591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  373.292319][T13179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.325261][T13179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.334356][T13179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.356148][T13179] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.417313][T13449] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3285'.
[  373.551319][ T4261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.569557][ T4261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.593373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  373.676178][T13456] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3297'.
[  373.722660][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.741378][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.774379][T13458] netlink: 'syz.2.3288': attribute type 1 has an invalid length.
[  373.802447][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'.
[  373.861859][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  373.970955][T13468] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3292'.
[  374.028388][T13468] netlink: 'syz.4.3292': attribute type 21 has an invalid length.
[  374.088251][T13468] IPv6: NLM_F_CREATE should be specified when creating new route
[  374.130818][T13468] IPv6: Can't replace route, no match found
[  374.161816][T13475] netlink: 'syz.3.3293': attribute type 10 has an invalid length.
[  374.190852][T13475] device team0 entered promiscuous mode
[  374.234632][T13475] device team_slave_0 entered promiscuous mode
[  374.267608][T13475] device team_slave_1 entered promiscuous mode
[  374.295609][T13475] bridge0: port 3(team0) entered blocking state
[  374.317587][T13475] bridge0: port 3(team0) entered disabled state
[  374.374418][T13475] bridge0: port 3(team0) entered blocking state
[  374.380858][T13475] bridge0: port 3(team0) entered forwarding state
[  375.625275][T13516] netlink: 'syz.4.3309': attribute type 10 has an invalid length.
[  375.740172][T13516] wlan1: mtu less than device minimum
[  375.798025][T13516] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  375.862470][T13510] netlink: 'syz.3.3306': attribute type 1 has an invalid length.
[  375.891321][T13510] __nla_validate_parse: 3 callbacks suppressed
[  375.891471][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'.
[  376.058698][T13535] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3314'.
[  376.253454][T13539] netlink: 'syz.3.3316': attribute type 3 has an invalid length.
[  376.270228][T13539] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3316'.
[  376.467876][T13539] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3316'.
[  377.324517][T13570] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3327'.
[  377.913788][T13596] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3338'.
[  377.960583][T13600] netlink: 'syz.1.3337': attribute type 3 has an invalid length.
[  377.990565][T13600] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3337'.
[  378.104871][T13608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3342'.
[  378.152539][T13600] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3337'.
[  378.455729][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  378.462220][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  379.673432][T13649] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3356'.
[  380.073420][T13667] netlink: 'syz.2.3363': attribute type 3 has an invalid length.
[  380.525956][T13697] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  380.562004][T13701] openvswitch: netlink: Key type 15645 is out of range max 29
[  381.052394][T13717] __nla_validate_parse: 5 callbacks suppressed
[  381.052413][T13717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3382'.
[  381.337172][T13734] netlink: 'syz.1.3383': attribute type 3 has an invalid length.
[  381.399785][T13732] netlink: 'syz.2.3387': attribute type 41 has an invalid length.
[  381.413559][T13730] netlink: 'syz.4.3388': attribute type 3 has an invalid length.
[  381.443432][T13730] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3388'.
[  381.463981][T13734] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3383'.
[  381.494129][T13740] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3388'.
[  382.540801][T13755] FAULT_INJECTION: forcing a failure.
[  382.540801][T13755] name failslab, interval 1, probability 0, space 0, times 0
[  382.555512][T13755] CPU: 1 PID: 13755 Comm: syz.4.3395 Not tainted syzkaller #0
[  382.563025][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  382.573105][T13755] Call Trace:
[  382.576408][T13755]  <TASK>
[  382.579362][T13755]  dump_stack_lvl+0x188/0x250
[  382.584067][T13755]  ? show_regs_print_info+0x20/0x20
[  382.589291][T13755]  ? load_image+0x410/0x410
[  382.593816][T13755]  ? __might_sleep+0xf0/0xf0
[  382.598426][T13755]  ? __lock_acquire+0x7d40/0x7d40
[  382.603479][T13755]  should_fail+0x383/0x4b0
[  382.607923][T13755]  should_failslab+0x5/0x20
[  382.612442][T13755]  slab_pre_alloc_hook+0x51/0xc0
[  382.617416][T13755]  kmem_cache_alloc_trace+0x47/0x290
[  382.622728][T13755]  ? sctp_association_new+0x86/0x2400
[  382.628147][T13755]  sctp_association_new+0x86/0x2400
[  382.633371][T13755]  ? security_capable+0x85/0xb0
[  382.638262][T13755]  sctp_connect_new_asoc+0x2da/0x6a0
[  382.643585][T13755]  ? __sctp_connect+0xd80/0xd80
[  382.648465][T13755]  ? security_sctp_bind_connect+0x26/0xb0
[  382.654224][T13755]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  382.659796][T13755]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  382.665390][T13755]  ? security_sctp_bind_connect+0x85/0xb0
[  382.671139][T13755]  sctp_sendmsg+0x15e1/0x2940
[  382.675869][T13755]  ? sctp_getsockopt+0x8a0/0x8a0
[  382.680841][T13755]  ? aa_af_perm+0x340/0x340
[  382.685380][T13755]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  382.691822][T13755]  ? aa_sock_msg_perm+0x94/0x150
[  382.696788][T13755]  ? sock_rps_record_flow+0x17/0x3b0
[  382.702101][T13755]  ? inet_sendmsg+0x7a/0x2a0
[  382.706719][T13755]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  382.712030][T13755]  ? inet_send_prepare+0x250/0x250
[  382.717237][T13755]  ____sys_sendmsg+0x5be/0x8f0
[  382.722036][T13755]  ? __sys_sendmsg_sock+0x30/0x30
[  382.727093][T13755]  ? import_iovec+0x6f/0xa0
[  382.731636][T13755]  ___sys_sendmsg+0x236/0x2e0
[  382.736355][T13755]  ? __sys_sendmsg+0x290/0x290
[  382.741177][T13755]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  382.747472][T13755]  __se_sys_sendmsg+0x1b7/0x2a0
[  382.752365][T13755]  ? __x64_sys_sendmsg+0x80/0x80
[  382.757337][T13755]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  382.763364][T13755]  ? lockdep_hardirqs_on+0x94/0x140
[  382.768605][T13755]  do_syscall_64+0x4c/0xa0
[  382.773047][T13755]  ? clear_bhb_loop+0x30/0x80
[  382.777767][T13755]  ? clear_bhb_loop+0x30/0x80
[  382.782481][T13755]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  382.788408][T13755] RIP: 0033:0x7fc74ed91559
[  382.792854][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  382.812493][T13755] RSP: 002b:00007fc74cfe9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  382.820950][T13755] RAX: ffffffffffffffda RBX: 00007fc74f018fa0 RCX: 00007fc74ed91559
[  382.828946][T13755] RDX: 00000000000080d1 RSI: 00002000000000c0 RDI: 0000000000000006
[  382.836942][T13755] RBP: 00007fc74cfe9090 R08: 0000000000000000 R09: 0000000000000000
[  382.844949][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  382.852946][T13755] R13: 00007fc74f019038 R14: 00007fc74f018fa0 R15: 00007fff21149108
[  382.860964][T13755]  </TASK>
[  382.873816][  T156] wlan1: Trigger new scan to find an IBSS to join
[  383.509038][T13781] netlink: 'syz.2.3405': attribute type 3 has an invalid length.
[  383.522262][T13784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3406'.
[  383.531579][T13781] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3405'.
[  383.557978][T13784] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3406'.
[  383.600932][T13788] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3405'.
[  384.737157][T13811] netlink: 668 bytes leftover after parsing attributes in process `syz.2.3417'.
[  384.753087][T13811] openvswitch: netlink: Key type 15645 is out of range max 29
[  384.826259][T13811] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3417'.
serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.