last executing test programs:

9.387325654s ago: executing program 4 (id=8608):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c80)=@bpf_ext={0x1c, 0xf, &(0x7f00000026c0)=ANY=[@ANYBLOB="18000000ff010000000000000004000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910010939142e5548a74aeba83284000000000b7020000010000008500000085000000b7000000617f75b3091083831f45a6e3b7789314b76bf71f7e90f0eb7dd0125932bb20855bc9b16af333e917f182fd25ba215e02c06a497cc34e403ac0f2dc8fa7bf73b80027543f696da38bfe4238275b6ff146d5f51f0268c69c69759edb1670b901660a34d2b5d4e6f6e242e7d71591d28647da07b64a563cf70975c48bbed73779dc2e0ffb370b1051c7ff278ad48c52bfbd9476b5e1"], &(0x7f0000002100)='GPL\x00', 0x6, 0x8f, &(0x7f00000023c0)=""/143, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002980)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x14906, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002c00)=[{0x8000000, 0x1, 0x5, 0x9}, {0x4, 0x1, 0xe, 0x1}, {0x4, 0x15, 0xc, 0x2}, {0x5, 0x5, 0x2, 0x1}, {0x3, 0x1, 0x9, 0x4}, {0x3, 0x5, 0x8, 0x8}, {0x2, 0x1, 0x6, 0xf}, {0x3, 0x3, 0x2, 0xb}], 0x10, 0x7}, 0x94)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x18e000, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x5, 0xe, 0x0, &(0x7f00000008c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r10, &(0x7f0000000f40)={&(0x7f0000000f80)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000040)="2b82ce7f478fe9cc1a8f5d0c5af8bb113c5f25", 0x13}], 0x3, &(0x7f0000002180)=ANY=[@ANYBLOB="1400000000000000290000003e000000fc00000000000000700000000000000000000000070000008309ed3d53a14c70ab7804010044187e10000000070000b26a0000000400000c43000000064434d253ac1e0101000000030a010101000000feac1414bb0000080000000000000007e8ac14141100008716ffffffff000000069404000000000048000000000000000000000007000000940400008917c4ac1e000164010101ac1e0101ac1e0001e0000001440cbc23640101040000000100070f4bffffffff00000000ac1414bb00"], 0xd0}, 0x0)
close(r9)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0xd, 0x6, 0x4, 0xfffff000, 0x10103, r11, 0xc7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
socketpair(0x22, 0x3, 0x0, &(0x7f00000009c0))
recvmsg$unix(r8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r15=>0xffffffffffffffff]}}], 0xc8}, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x1d, 0xd, &(0x7f0000002480)=ANY=[@ANYRESOCT=r12, @ANYRES32=r11, @ANYBLOB="0000000000000000b70800009c3f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7840000020000008500a30082000000067a010000800000185500"/96], &(0x7f00000004c0)='GPL\x00', 0x1df, 0x34, &(0x7f0000000d00)=""/52, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002040)={0x2, 0x9, 0x1, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000002140)=[r13, r13, r14, r15, r10], &(0x7f0000000e40)=[{0x5, 0x40000009, 0x804, 0x6}, {0x0, 0x4, 0xe, 0x2}, {0x4, 0x3, 0x1, 0xc}, {0x4, 0x2, 0x2, 0xc}, {0x4, 0x4, 0x9}, {0x5, 0x20000, 0x9}], 0x10, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000a40)="94f5614a0efa8be7c9b6018a1ca08b33b56de057f05e15418051fc2f6b8603674846ee506e7133c3e61ec4bbc8e5d60a63dbe860973bb8f5267c763f0a23ab5461a554feab0493bab5da0c884afa5dc0c8585cf29c987bd8e751fbe9a88a30ca44dc44c4438e7e63a28fb5c1f58f2bde9c3b01125cedfbc1ae8eec7bcef048af5f587a39c06761d46b07a196dd7b8c6bfabf314047c6dfc1241df9c0e5678c", &(0x7f0000000b00)=""/158}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3, <r16=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r6}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000cc0)={0x0, r16}, 0x8)
sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

9.038995089s ago: executing program 1 (id=8610):
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, @perf_config_ext={0x0, 0x8}})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105880, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x204, 0x2000000000, 0x3, 0x3, 0x9, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
recvmsg$unix(r2, 0x0, 0x12000)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8.868141646s ago: executing program 4 (id=8613):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x73)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.734880286s ago: executing program 0 (id=8614):
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.718291207s ago: executing program 2 (id=8615):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000"], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x13, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xe4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x5e4815c0, 0xc2ba, 0x0, 0x4000000, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0}, 0x28)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x3, &(0x7f0000000940)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

5.675178482s ago: executing program 4 (id=8625):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x385c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x1800000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r0, &(0x7f0000000380), 0x0}, 0x20)

5.566514883s ago: executing program 1 (id=8628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth1_macvtap\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001400)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)}, 0x2a)

5.528907537s ago: executing program 4 (id=8618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001200)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000001300)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)

5.474089692s ago: executing program 0 (id=8619):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0xfffffffc, 0x7, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000005000800000000000000006922040000"], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x4040004)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0x12b)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

5.40353174s ago: executing program 1 (id=8620):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x0, 0xcb, 0x0, 0x5dd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0xc8, 0xffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200000000401}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000a0fe8000000000000227bfa7b09303960e2f80ae"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000380)={'bond0\x00', @random=' \x00\x00\x00\x00 '})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x8cc0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

5.163416124s ago: executing program 0 (id=8621):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000001900)={&(0x7f0000000080)={0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)

5.118855738s ago: executing program 1 (id=8622):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
gettid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000300000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x3, 0x5, &(0x7f0000000a40))
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000a80))
socket$kcm(0xa, 0x2, 0x73)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000005ed200be6a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018000000000000000000000000000000950000"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e00)={r4, &(0x7f0000000e40), 0x0}, 0x20)
r5 = socket$kcm(0xa, 0x2, 0x0)
close(r5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@cgroup, r0, 0x18, 0x2000}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000f00)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055)
setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0)
r6 = socket$kcm(0x2b, 0x1, 0x0)
close(r6)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000001000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r7, &(0x7f0000001040)={&(0x7f0000001080)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="7f", 0x1}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4)
close(r6)
bpf$ENABLE_STATS(0x20, &(0x7f00000011c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x6, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.10575385s ago: executing program 0 (id=8623):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x3, 0xc, &(0x7f0000001040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r0, 0x0, 0xe, 0xfeff, &(0x7f0000001180)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4.980294502s ago: executing program 0 (id=8624):
socket$kcm(0xa, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x26, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000280), 0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x22, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@arena={0x21, 0x0, 0x0, 0x13, 0x20000, r0, 0x8, '\x00', r1, r2, 0x3, 0x3}, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) (async, rerun: 32)
ioctl$TUNSETOFFLOAD(r4, 0x4004743c, 0xf0ff1f00000000) (async, rerun: 32)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) (async)
r5 = socket$kcm(0xf, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000880)={'wlan1\x00', @random="01000500"})
sendmsg$inet(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000980))
sendmsg$kcm(r3, &(0x7f00000009c0)={0x0, 0xc00, &(0x7f0000000a00)=[{&(0x7f0000000a40)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff}) (async, rerun: 32)
gettid()
recvmsg$unix(r6, 0x0, 0x40012140) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x8, 0x1, 0x1, 0x0) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, 0x0, 0x149000, 0x0) (rerun: 32)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) (async, rerun: 32)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r7, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)

4.653728286s ago: executing program 3 (id=8626):
r0 = socket$kcm(0xa, 0x3, 0x3a)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000200), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x3a, 0x3, 0x0, 0x500)

4.540333028s ago: executing program 3 (id=8627):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000"], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000000e0ff61114c0000000000850000001900"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xe4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x5e4815c0, 0xc2ba, 0x0, 0x4000000, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x3, &(0x7f0000000940)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4.305757972s ago: executing program 3 (id=8629):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.301925058s ago: executing program 2 (id=8630):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)}, 0x20008000)

1.244783504s ago: executing program 3 (id=8631):
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.191168469s ago: executing program 2 (id=8632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f0000000840)=ANY=[], &(0x7f0000001340)='syzkaller\x00'}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000300)={'veth1_macvtap\x00', @multicast})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xfe, 0x11, &(0x7f0000001400)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)}, 0x2a)

1.142752714s ago: executing program 2 (id=8633):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x0, 0xfffffffc, 0x7, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="7fbea6d6da006a639ba9b0936b0ff3ce18000000000004f20308000000da14649a110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x17, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000005000800000000000000006922040000"], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x4040004)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0x12b)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

951.208083ms ago: executing program 3 (id=8634):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x0, 0xcb, 0x0, 0x5dd, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0xc8, 0xffd, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x200000000401}, 0x0, 0x2, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000a0fe8000000000000227bfa7b09303960e2f80ae"], 0xfdef)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000380)={'bond0\x00', @random=' \x00\x00\x00\x00 '})
write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x8cc0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

343.216065ms ago: executing program 1 (id=8635):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1, 0xd, &(0x7f0000000dc0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000e80)=r4, 0x4)
sendmsg$inet(r1, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0)

310.076989ms ago: executing program 4 (id=8636):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x15, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fc", 0x21}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfe33)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xe83)

237.787966ms ago: executing program 2 (id=8637):
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0x23, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x16, 0x3, &(0x7f0000000440)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000480)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5d31, 0x702, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x24, 0x0, 0x8, 0x4, 0x0, 0x7fffffff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e08c1f3f04000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000000600)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001680)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0xd, &(0x7f00000017c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000001980)={&(0x7f00000019c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001a80)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r7)
recvmsg(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001b40)=""/34, 0x22}, {&(0x7f0000001b80)=""/8, 0x8}, {&(0x7f0000001bc0)=""/167, 0xa7}, {&(0x7f0000001c80)=""/244, 0xf4}], 0x4}, 0x0)
socket$kcm(0x11, 0x3, 0x300)
r8 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)

185.540381ms ago: executing program 1 (id=8638):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0040002400400027c035c0461c1d67f6f94007134cf6e0f8100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfdef)
write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0xfdef)
openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008100000b70400000200000085000000820000009500000700000000"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0xc0)
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0xe, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="3eaa00000000000071106d000000000095"], &(0x7f0000000a00)='syzkaller\x00'}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80)

137.992016ms ago: executing program 4 (id=8639):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000"], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a00000000e0ff61114c0000000000850000001900"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xe4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x5e4815c0, 0xc2ba, 0x0, 0x4000000, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x3, &(0x7f0000000940)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000714232000001000095000000000000005d3d8375bc7a2c65b3c31d001577de8aa03adda97fbe4c0c013cc9d6cfd12477ff926faa11481e2205ec572f8aa7cfbf65702caae82e77e126952475f3fba421344bb89712c508bcdfb60505ebad572e3662fd8b19911d036254fd938f5003510b20781d0da9f71bb5d826e850a6374fc51058e78c68ac3f306adf29d4ab702ae9b24f1eee0d687390d9786818708a2a999bee75a69e41e91201993dbdff7a694b31af640b06926b25adfa4715067014c69fdcc4c600cb3c722e4758cea8f2a7753470c26680137d4298e8f7bcbfafaf105dec0b9d48bd588ca28a55015da7de8e91a2e5f15f7a26bebe175269349da207257d6839c0f6e9"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

137.694686ms ago: executing program 0 (id=8640):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008a000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x8, &(0x7f0000000000), 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000"], 0xfdef)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x13, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0xe4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x5e4815c0, 0xc2ba, 0x0, 0x4000000, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0}, 0x28)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x7, 0x3, &(0x7f0000000940)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

134.717426ms ago: executing program 3 (id=8641):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 2 (id=8642):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000c4341800ffffffff1886b2b66a000009"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0xd9, &(0x7f0000000440)=""/217, 0x41000, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x3, 0x4, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xf}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback, 0x1e, 0x1, 0x43d2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0xffff, 0xf, &(0x7f0000000280)=""/15, 0x41100, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001b00)={0x5, 0x6, 0x7, 0x4}, 0x10, 0x15f99, 0xffffffffffffffff, 0x2, &(0x7f0000001b40), &(0x7f0000001b80)=[{0x3, 0x5, 0x9, 0xa}, {0x5, 0x4, 0xe}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000940)='GPL\x00'}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001200)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ba", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 11)

kernel console output (not intermixed with test programs):

_hwframe+0x68/0xd2
[ 1353.584275][T27479] RIP: 0033:0x7f4d23d9f559
[ 1353.588693][T27479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1353.608318][T27479] RSP: 002b:00007f4d24ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1353.616742][T27479] RAX: ffffffffffffffda RBX: 00007f4d24025fa0 RCX: 00007f4d23d9f559
[ 1353.624719][T27479] RDX: 000000000000000a RSI: 0000000000000006 RDI: 0000000000000005
[ 1353.632699][T27479] RBP: 00007f4d24ce5090 R08: 0000000000000004 R09: 0000000000000000
[ 1353.640855][T27479] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1353.648835][T27479] R13: 00007f4d24026038 R14: 00007f4d24025fa0 R15: 00007ffc7b3093d8
[ 1353.656824][T27479]  </TASK>
[ 1354.069288][T27499] FAULT_INJECTION: forcing a failure.
[ 1354.069288][T27499] name failslab, interval 1, probability 0, space 0, times 0
[ 1354.111115][T27499] CPU: 0 PID: 27499 Comm: syz.2.7802 Not tainted syzkaller #0
[ 1354.118649][T27499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1354.128727][T27499] Call Trace:
[ 1354.132005][T27499]  <TASK>
[ 1354.134939][T27499]  dump_stack_lvl+0x188/0x24e
[ 1354.139622][T27499]  ? show_regs_print_info+0x12/0x12
[ 1354.144905][T27499]  ? load_image+0x410/0x410
[ 1354.149413][T27499]  ? __might_sleep+0xd0/0xd0
[ 1354.154008][T27499]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1354.159046][T27499]  should_fail_ex+0x390/0x4c0
[ 1354.163733][T27499]  should_failslab+0x5/0x20
[ 1354.168231][T27499]  slab_pre_alloc_hook+0x59/0x300
[ 1354.173263][T27499]  kmem_cache_alloc+0x56/0x2f0
[ 1354.178022][T27499]  ? ptlock_alloc+0x1c/0x60
[ 1354.182560][T27499]  ptlock_alloc+0x1c/0x60
[ 1354.186893][T27499]  pte_alloc_one+0xc0/0x310
[ 1354.191422][T27499]  ? pfn_modify_allowed+0x560/0x560
[ 1354.196641][T27499]  ? hugepage_vma_check+0x461/0x540
[ 1354.201851][T27499]  handle_mm_fault+0x257d/0x3d40
[ 1354.206824][T27499]  ? numa_migrate_prep+0x250/0x250
[ 1354.211950][T27499]  ? lock_chain_count+0x20/0x20
[ 1354.216813][T27499]  ? lock_mm_and_find_vma+0xae/0x2f0
[ 1354.222100][T27499]  do_user_addr_fault+0x58e/0xb20
[ 1354.227154][T27499]  exc_page_fault+0x60/0x100
[ 1354.231742][T27499]  ? __might_fault+0xa6/0x120
[ 1354.236423][T27499]  asm_exc_page_fault+0x22/0x30
[ 1354.241449][T27499] RIP: 0010:__get_user_4+0x1c/0x30
[ 1354.246559][T27499] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba
[ 1354.266172][T27499] RSP: 0018:ffffc900044f7d98 EFLAGS: 00050206
[ 1354.272262][T27499] RAX: 000000110e22fff6 RBX: ffff88805a300000 RCX: cd32e5f62d3c2300
[ 1354.280235][T27499] RDX: ffffffffffffffff RSI: ffffffff8aac2b20 RDI: ffffffff8aff71e0
[ 1354.288207][T27499] RBP: ffffc900044f7ed8 R08: ffffffff8f22dfef R09: 1ffffffff1e45bfd
[ 1354.296176][T27499] R10: dffffc0000000000 R11: fffffbfff1e45bfe R12: 00000000c004743e
[ 1354.304146][T27499] R13: ffff88805a3000d8 R14: ffff88805c4ad400 R15: 1ffff1100b895ab5
[ 1354.312141][T27499]  ppp_ioctl+0x559/0x1b20
[ 1354.316487][T27499]  ? ppp_poll+0x250/0x250
[ 1354.320819][T27499]  ? __fget_files+0x28/0x460
[ 1354.325440][T27499]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1354.330380][T27499]  ? security_file_ioctl+0x7c/0xa0
[ 1354.335498][T27499]  ? ppp_poll+0x250/0x250
[ 1354.339827][T27499]  __se_sys_ioctl+0xfa/0x170
[ 1354.344431][T27499]  do_syscall_64+0x4c/0xa0
[ 1354.348844][T27499]  ? clear_bhb_loop+0x60/0xb0
[ 1354.353515][T27499]  ? clear_bhb_loop+0x60/0xb0
[ 1354.358191][T27499]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1354.364088][T27499] RIP: 0033:0x7f4d23d9f559
[ 1354.368502][T27499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1354.388108][T27499] RSP: 002b:00007f4d24ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1354.396524][T27499] RAX: ffffffffffffffda RBX: 00007f4d24025fa0 RCX: 00007f4d23d9f559
[ 1354.404492][T27499] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000007
[ 1354.412461][T27499] RBP: 00007f4d24ce5090 R08: 0000000000000000 R09: 0000000000000000
[ 1354.420432][T27499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1354.428404][T27499] R13: 00007f4d24026038 R14: 00007f4d24025fa0 R15: 00007ffc7b3093d8
[ 1354.436404][T27499]  </TASK>
[ 1354.439842][T27497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7801'.
[ 1354.460199][T27497] device veth0_vlan left promiscuous mode
[ 1354.484838][T27497] device veth0_vlan entered promiscuous mode
[ 1354.535363][T27497] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1354.610480][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1354.634093][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1354.663582][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1354.776394][T27502] device veth0_vlan left promiscuous mode
[ 1354.806530][T27502] device veth0_vlan entered promiscuous mode
[ 1354.837032][T27502] team0: Device veth0_vlan failed to register rx_handler
[ 1357.900967][T27517] validate_nla: 5 callbacks suppressed
[ 1357.900984][T27517] netlink: 'syz.4.7808': attribute type 10 has an invalid length.
[ 1358.018773][T27520] netlink: 'syz.1.7810': attribute type 10 has an invalid length.
[ 1358.049982][T27520] bridge0: port 5(netdevsim0) entered blocking state
[ 1358.060699][T27520] bridge0: port 5(netdevsim0) entered disabled state
[ 1358.075484][T27520] device netdevsim0 entered promiscuous mode
[ 1358.103381][T27530] netlink: 'syz.0.7809': attribute type 21 has an invalid length.
[ 1358.168751][T27532] netlink: 'syz.2.7812': attribute type 10 has an invalid length.
[ 1358.388404][T27539] netlink: 'syz.1.7816': attribute type 10 has an invalid length.
[ 1358.412724][T27539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7816'.
[ 1358.436257][T27539] device veth0_vlan left promiscuous mode
[ 1358.442248][T27539] device veth0_vlan entered promiscuous mode
[ 1358.470648][T27539] bridge0: port 6(veth0_vlan) entered blocking state
[ 1358.479256][T27539] bridge0: port 6(veth0_vlan) entered disabled state
[ 1358.500205][T27539] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1358.520105][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1358.535882][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1358.544875][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1358.560976][T27542] netlink: 'syz.0.7817': attribute type 20 has an invalid length.
[ 1358.684936][T27549] netlink: 'syz.2.7819': attribute type 10 has an invalid length.
[ 1358.782463][T27553] tap0: tun_chr_ioctl cmd 1074025677
[ 1358.809969][T27553] tap0: linktype set to 270
[ 1361.594117][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.600512][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.716084][T27561] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7823'.
[ 1361.850756][T27565] netlink: 'syz.3.7825': attribute type 10 has an invalid length.
[ 1362.143010][T27565] device veth0_vlan left promiscuous mode
[ 1362.214937][T27565] device veth0_vlan entered promiscuous mode
[ 1362.344705][T27565] team0: Device veth0_vlan failed to register rx_handler
[ 1365.316994][T27583] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7829'.
[ 1365.497644][T27592] netlink: 'syz.0.7833': attribute type 10 has an invalid length.
[ 1365.564419][T27592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7833'.
[ 1365.598898][T27592] device veth0_vlan left promiscuous mode
[ 1365.612130][T27592] device veth0_vlan entered promiscuous mode
[ 1365.630729][T27592] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1365.647498][T10529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1365.657332][T10529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1365.665796][T10529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1365.695651][T27589] rxe_eth0 speed is unknown, defaulting to 1000
[ 1365.703076][T27597] netlink: 'syz.1.7835': attribute type 10 has an invalid length.
[ 1366.137121][T27606] netlink: 'syz.3.7839': attribute type 10 has an invalid length.
[ 1366.193305][T27606] device veth0_vlan left promiscuous mode
[ 1366.213312][T27606] device veth0_vlan entered promiscuous mode
[ 1366.235716][T27606] team0: Device veth0_vlan failed to register rx_handler
[ 1366.315621][T27611] netlink: 'syz.1.7841': attribute type 10 has an invalid length.
[ 1366.377122][T27608] netlink: 'syz.0.7840': attribute type 3 has an invalid length.
[ 1366.413091][T27608] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7840'.
[ 1366.632271][T27620] netlink: 'syz.1.7843': attribute type 10 has an invalid length.
[ 1366.648495][T27620] device netdevsim0 left promiscuous mode
[ 1366.690561][T27620] bridge0: port 5(netdevsim0) entered disabled state
[ 1366.831169][T27620] device netdevsim0 entered promiscuous mode
[ 1366.841619][T27620] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1366.876984][T27637] netlink: 'syz.0.7846': attribute type 10 has an invalid length.
[ 1366.885784][T27637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7846'.
[ 1366.899858][T27637] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1367.072194][T27639] netlink: 'syz.3.7848': attribute type 10 has an invalid length.
[ 1367.196486][T27641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7847'.
[ 1367.226147][T27643] netlink: 'syz.1.7849': attribute type 10 has an invalid length.
[ 1367.252878][T27643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7849'.
[ 1367.273170][T27643] bridge0: port 5(veth0_vlan) entered blocking state
[ 1367.289937][T27643] bridge0: port 5(veth0_vlan) entered disabled state
[ 1367.389468][T27643] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1367.713835][T27655] netlink: 'syz.0.7854': attribute type 29 has an invalid length.
[ 1367.763993][T27659] device veth0_vlan left promiscuous mode
[ 1367.774558][T27659] device veth0_vlan entered promiscuous mode
[ 1367.788608][T27659] team0: Device veth0_vlan failed to register rx_handler
[ 1371.020360][T27680] FAULT_INJECTION: forcing a failure.
[ 1371.020360][T27680] name failslab, interval 1, probability 0, space 0, times 0
[ 1371.058868][T27680] CPU: 0 PID: 27680 Comm: syz.3.7861 Not tainted syzkaller #0
[ 1371.066394][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1371.076465][T27680] Call Trace:
[ 1371.079756][T27680]  <TASK>
[ 1371.082723][T27680]  dump_stack_lvl+0x188/0x24e
[ 1371.087421][T27680]  ? show_regs_print_info+0x12/0x12
[ 1371.092630][T27680]  ? load_image+0x410/0x410
[ 1371.097167][T27680]  ? __might_sleep+0xd0/0xd0
[ 1371.101858][T27680]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1371.106909][T27680]  should_fail_ex+0x390/0x4c0
[ 1371.111616][T27680]  should_failslab+0x5/0x20
[ 1371.116132][T27680]  slab_pre_alloc_hook+0x59/0x300
[ 1371.121179][T27680]  ? sk_prot_alloc+0xe7/0x210
[ 1371.125877][T27680]  __kmem_cache_alloc_node+0x4f/0x270
[ 1371.131271][T27680]  ? sk_prot_alloc+0xe7/0x210
[ 1371.135966][T27680]  __kmalloc+0xa3/0x240
[ 1371.140147][T27680]  sk_prot_alloc+0xe7/0x210
[ 1371.144675][T27680]  ? sk_alloc+0x20/0x330
[ 1371.148936][T27680]  sk_alloc+0x36/0x330
[ 1371.153012][T27680]  ? bpf_ctx_init+0x154/0x190
[ 1371.157708][T27680]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1371.163093][T27680]  ? __fget_files+0x28/0x460
[ 1371.167706][T27680]  ? __fget_files+0x3fc/0x460
[ 1371.172399][T27680]  ? cpu_online+0xa0/0xa0
[ 1371.176740][T27680]  bpf_prog_test_run+0x31c/0x390
[ 1371.181699][T27680]  __sys_bpf+0x62b/0x780
[ 1371.185962][T27680]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1371.191356][T27680]  ? lock_chain_count+0x20/0x20
[ 1371.196226][T27680]  __x64_sys_bpf+0x78/0x90
[ 1371.200652][T27680]  do_syscall_64+0x4c/0xa0
[ 1371.205077][T27680]  ? clear_bhb_loop+0x60/0xb0
[ 1371.209757][T27680]  ? clear_bhb_loop+0x60/0xb0
[ 1371.214435][T27680]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1371.220338][T27680] RIP: 0033:0x7f7a3d39f559
[ 1371.224757][T27680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1371.244382][T27680] RSP: 002b:00007f7a3e347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1371.252814][T27680] RAX: ffffffffffffffda RBX: 00007f7a3d625fa0 RCX: 00007f7a3d39f559
[ 1371.260789][T27680] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[ 1371.268769][T27680] RBP: 00007f7a3e347090 R08: 0000000000000000 R09: 0000000000000000
[ 1371.276743][T27680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1371.284715][T27680] R13: 00007f7a3d626038 R14: 00007f7a3d625fa0 R15: 00007fff458a9df8
[ 1371.292707][T27680]  </TASK>
[ 1374.420669][T27687] validate_nla: 5 callbacks suppressed
[ 1374.420685][T27687] netlink: 'syz.4.7863': attribute type 10 has an invalid length.
[ 1374.434751][T27687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7863'.
[ 1374.444178][T27687] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1374.475030][T27699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7865'.
[ 1374.495025][T27700] netlink: 'syz.1.7864': attribute type 10 has an invalid length.
[ 1374.504093][T27700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7864'.
[ 1374.514169][T27700] bridge0: port 5(veth0_vlan) entered blocking state
[ 1374.522463][T27700] bridge0: port 5(veth0_vlan) entered disabled state
[ 1374.531359][T27700] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1374.648651][T27712] netlink: 'syz.1.7870': attribute type 10 has an invalid length.
[ 1374.728555][T27712] device veth0_vlan left promiscuous mode
[ 1374.747603][T27712] device veth0_vlan entered promiscuous mode
[ 1374.767332][T27712] team0: Device veth0_vlan failed to register rx_handler
[ 1374.802156][T27719] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.7871'.
[ 1375.130325][T27731] netlink: 'syz.1.7876': attribute type 10 has an invalid length.
[ 1375.149117][T27731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7876'.
[ 1375.166738][T27731] device veth0_vlan left promiscuous mode
[ 1375.176743][T27731] device veth0_vlan entered promiscuous mode
[ 1375.246783][T27731] bridge0: port 5(veth0_vlan) entered blocking state
[ 1375.254759][T27731] bridge0: port 5(veth0_vlan) entered disabled state
[ 1375.278539][T27731] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1375.298176][T27730] netlink: 'syz.2.7877': attribute type 10 has an invalid length.
[ 1375.318681][T27730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7877'.
[ 1375.335115][T27734] netlink: 'syz.4.7878': attribute type 10 has an invalid length.
[ 1375.352544][T27728] netlink: 'syz.0.7875': attribute type 10 has an invalid length.
[ 1375.566946][T27742] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.7880'.
[ 1375.578192][T27742] netlink: zone id is out of range
[ 1375.598024][T27742] netlink: del zone limit has 4 unknown bytes
[ 1375.786518][T27728] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1375.801159][T27740] netlink: 'syz.2.7879': attribute type 10 has an invalid length.
[ 1375.818480][T27749] netlink: 'syz.4.7881': attribute type 10 has an invalid length.
[ 1375.828277][T27749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7881'.
[ 1375.840339][T27749] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1376.072849][T27766] netlink: 'syz.2.7885': attribute type 10 has an invalid length.
[ 1376.138650][T27763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7883'.
[ 1376.154585][T27770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7895'.
[ 1376.165205][T27770] device veth0_vlan left promiscuous mode
[ 1376.172063][T27770] device veth0_vlan entered promiscuous mode
[ 1376.206885][T27770] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1376.227994][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1376.246856][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1376.257806][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1376.287803][T27772] device veth0_vlan left promiscuous mode
[ 1376.321923][T27772] device veth0_vlan entered promiscuous mode
[ 1376.334508][T27772] team0: Device veth0_vlan failed to register rx_handler
[ 1376.600785][T27785] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1376.722623][T27791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1376.872912][T27797] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1376.989330][T27802] device veth0_vlan left promiscuous mode
[ 1376.995594][T27802] device veth0_vlan entered promiscuous mode
[ 1377.009532][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1377.018447][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1377.027960][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1377.311490][T27806] batman_adv: batadv0: Removing interface: netdevsim0
[ 1377.435481][T27806] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1377.674252][T27815] device veth0_vlan left promiscuous mode
[ 1377.704810][T27815] device veth0_vlan entered promiscuous mode
[ 1377.741363][T27815] team0: Device veth0_vlan failed to register rx_handler
[ 1378.469404][T27836] device veth0_vlan left promiscuous mode
[ 1378.483021][T27836] device veth0_vlan entered promiscuous mode
[ 1378.518742][T27836] bridge0: port 5(veth0_vlan) entered blocking state
[ 1378.543471][T27836] bridge0: port 5(veth0_vlan) entered disabled state
[ 1378.584577][ T9290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1378.604705][ T9290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1378.632405][ T9290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1378.679211][T27844] device veth0_vlan left promiscuous mode
[ 1378.698774][T27844] device veth0_vlan entered promiscuous mode
[ 1378.711439][T27844] team0: Device veth0_vlan failed to register rx_handler
[ 1378.841283][T27846] device veth0_vlan left promiscuous mode
[ 1378.864121][T27846] device veth0_vlan entered promiscuous mode
[ 1378.883342][T27846] team0: Device veth0_vlan failed to register rx_handler
[ 1378.936346][T27848] device veth0_vlan left promiscuous mode
[ 1378.943247][T27848] device veth0_vlan entered promiscuous mode
[ 1378.967960][T23403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1378.981878][T23403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1378.994446][T23403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1379.413492][T27855] bridge0: port 5(veth0_vlan) entered blocking state
[ 1379.430250][T27855] bridge0: port 5(veth0_vlan) entered disabled state
[ 1380.748528][T27878] validate_nla: 20 callbacks suppressed
[ 1380.748546][T27878] netlink: 'syz.4.7928': attribute type 10 has an invalid length.
[ 1382.446227][T27878] device veth0_vlan left promiscuous mode
[ 1382.474278][T27878] device veth0_vlan entered promiscuous mode
[ 1382.485026][T27878] team0: Device veth0_vlan failed to register rx_handler
[ 1384.575563][T27891] netlink: 'syz.1.7930': attribute type 10 has an invalid length.
[ 1384.584703][T27891] __nla_validate_parse: 14 callbacks suppressed
[ 1384.584713][T27891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7930'.
[ 1384.600309][T27891] bridge0: port 5(veth0_vlan) entered blocking state
[ 1384.607218][T27891] bridge0: port 5(veth0_vlan) entered disabled state
[ 1384.615741][T27891] net_ratelimit: 7 callbacks suppressed
[ 1384.615752][T27891] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1384.637675][T27894] netlink: 'syz.0.7932': attribute type 10 has an invalid length.
[ 1384.646424][T27894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7932'.
[ 1384.657184][T27894] device veth0_vlan left promiscuous mode
[ 1384.663259][T27894] device veth0_vlan entered promiscuous mode
[ 1384.673741][T27894] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1384.693162][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1384.719641][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1384.760237][T23405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1385.001967][T27912] netlink: 'syz.2.7938': attribute type 3 has an invalid length.
[ 1385.034089][T27912] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7938'.
[ 1385.677125][T27918] netlink: 'syz.2.7941': attribute type 10 has an invalid length.
[ 1388.069475][T27940] netlink: 'syz.4.7944': attribute type 10 has an invalid length.
[ 1388.088197][T27940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7944'.
[ 1388.119179][T27940] device veth0_vlan left promiscuous mode
[ 1388.127021][T27940] device veth0_vlan entered promiscuous mode
[ 1388.178768][T27940] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1388.197646][T27946] netlink: 'syz.0.7945': attribute type 10 has an invalid length.
[ 1388.210089][T27946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7945'.
[ 1388.229472][T27946] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1388.290686][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1388.316095][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1388.336342][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1393.715579][T27964] netlink: 'syz.0.7953': attribute type 10 has an invalid length.
[ 1393.747570][T27964] device veth0_vlan left promiscuous mode
[ 1393.773823][T27964] device veth0_vlan entered promiscuous mode
[ 1393.782267][T27964] team0: Device veth0_vlan failed to register rx_handler
[ 1393.802294][T27974] netlink: 'syz.4.7954': attribute type 10 has an invalid length.
[ 1393.814294][T27974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7954'.
[ 1393.828572][T27974] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1393.925821][T27981] netlink: 'syz.0.7956': attribute type 1 has an invalid length.
[ 1393.948172][T27981] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.7956'.
[ 1394.453191][T28007] netlink: 'syz.0.7961': attribute type 10 has an invalid length.
[ 1394.471898][T28007] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7961'.
[ 1394.484922][T28007] device veth0_vlan left promiscuous mode
[ 1394.491065][T28007] device veth0_vlan entered promiscuous mode
[ 1394.578140][T28007] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1397.181075][T28014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7964'.
[ 1397.258747][T28019] netlink: 'syz.1.7963': attribute type 10 has an invalid length.
[ 1397.281688][T28019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7963'.
[ 1397.304959][T28019] bridge0: port 5(veth0_vlan) entered blocking state
[ 1397.326575][T28019] bridge0: port 5(veth0_vlan) entered disabled state
[ 1397.378147][T28019] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1397.428574][T28018] netlink: 'syz.0.7966': attribute type 10 has an invalid length.
[ 1397.541516][T28018] device veth0_vlan left promiscuous mode
[ 1397.588549][T28018] device veth0_vlan entered promiscuous mode
[ 1397.614709][T28018] team0: Device veth0_vlan failed to register rx_handler
[ 1397.856832][T28031] netlink: 'syz.0.7969': attribute type 10 has an invalid length.
[ 1397.867908][T28031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7969'.
[ 1397.889479][T28031] device veth0_vlan left promiscuous mode
[ 1397.898478][T28031] device veth0_vlan entered promiscuous mode
[ 1397.956654][T28031] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1400.979651][T28048] netlink: 'syz.0.7974': attribute type 10 has an invalid length.
[ 1400.993418][T28048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7974'.
[ 1401.007340][T28048] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1401.024409][T28050] netlink: 'syz.1.7975': attribute type 10 has an invalid length.
[ 1401.148493][T28058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7978'.
[ 1401.160984][T28060] netlink: 'syz.1.7979': attribute type 10 has an invalid length.
[ 1401.249322][T28060] device veth0_vlan left promiscuous mode
[ 1401.270186][T28060] device veth0_vlan entered promiscuous mode
[ 1401.290859][T28060] team0: Device veth0_vlan failed to register rx_handler
[ 1401.366083][T28062] netlink: 'syz.0.7977': attribute type 10 has an invalid length.
[ 1401.378724][T28062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7977'.
[ 1401.392329][T28062] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1401.467274][T28067] netlink: 'syz.3.7980': attribute type 10 has an invalid length.
[ 1401.477155][T28067] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7980'.
[ 1401.493825][T28067] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1401.697508][T28080] netlink: 'syz.1.7982': attribute type 10 has an invalid length.
[ 1401.707839][T28080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7982'.
[ 1401.718115][T28080] device veth0_vlan left promiscuous mode
[ 1401.726375][T28080] device veth0_vlan entered promiscuous mode
[ 1401.764849][T28080] bridge0: port 5(veth0_vlan) entered blocking state
[ 1401.772743][T28080] bridge0: port 5(veth0_vlan) entered disabled state
[ 1401.793079][T28080] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1404.898827][T28098] netlink: 'syz.4.7989': attribute type 10 has an invalid length.
[ 1404.907062][T28098] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7989'.
[ 1404.917415][T28098] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1404.934880][T28102] netlink: 'syz.0.7991': attribute type 10 has an invalid length.
[ 1404.970798][T28102] device veth0_vlan left promiscuous mode
[ 1405.014439][T28102] device veth0_vlan entered promiscuous mode
[ 1405.024915][T28102] team0: Device veth0_vlan failed to register rx_handler
[ 1405.062362][T28110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7992'.
[ 1405.095692][T28109] netlink: 'syz.2.7993': attribute type 10 has an invalid length.
[ 1405.297690][T28126] netlink: 'syz.0.7995': attribute type 10 has an invalid length.
[ 1405.341922][T28126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7995'.
[ 1405.364043][T28126] device veth0_vlan left promiscuous mode
[ 1405.370437][T28126] device veth0_vlan entered promiscuous mode
[ 1405.438038][T28126] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1405.518768][T28135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8000'.
[ 1405.546304][T28135] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1410.247322][T28139] validate_nla: 1 callbacks suppressed
[ 1410.247334][T28139] netlink: 'syz.0.8005': attribute type 10 has an invalid length.
[ 1410.273152][T28139] device veth0_vlan left promiscuous mode
[ 1410.279856][T28139] device veth0_vlan entered promiscuous mode
[ 1410.307979][T28139] team0: Device veth0_vlan failed to register rx_handler
[ 1410.332851][T28149] netlink: 'syz.3.8003': attribute type 10 has an invalid length.
[ 1410.346457][T28149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8003'.
[ 1410.367824][T28149] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1410.400945][T28150] netlink: 'syz.4.8004': attribute type 10 has an invalid length.
[ 1410.419276][T28150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8004'.
[ 1410.452961][T28150] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1410.520687][T28148] netlink: 'syz.1.8006': attribute type 10 has an invalid length.
[ 1410.534082][T28148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8006'.
[ 1410.575812][T28148] bridge0: port 5(veth0_vlan) entered blocking state
[ 1410.606772][T28148] bridge0: port 5(veth0_vlan) entered disabled state
[ 1410.625335][T28148] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1410.826097][T28163] netlink: 'syz.1.8011': attribute type 1 has an invalid length.
[ 1410.835015][T28163] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.8011'.
[ 1413.410902][T28154] netlink: 'syz.0.8008': attribute type 10 has an invalid length.
[ 1413.422807][T28156] netlink: 'syz.3.8009': attribute type 10 has an invalid length.
[ 1413.654479][T28177] netlink: 'syz.1.8014': attribute type 10 has an invalid length.
[ 1413.672822][T28177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8014'.
[ 1413.701732][T28177] bridge0: port 5(veth0_vlan) entered blocking state
[ 1413.711686][T28177] bridge0: port 5(veth0_vlan) entered disabled state
[ 1413.735223][T28177] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1413.801267][T28178] netlink: 'syz.3.8016': attribute type 10 has an invalid length.
[ 1413.834494][T28178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8016'.
[ 1413.852182][T28178] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1414.231647][T28190] netlink: 'syz.4.8018': attribute type 10 has an invalid length.
[ 1414.240647][T28190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8018'.
[ 1414.252230][T28190] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1414.411533][T28197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8020'.
[ 1414.631872][T28203] FAULT_INJECTION: forcing a failure.
[ 1414.631872][T28203] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1414.647093][T28203] CPU: 0 PID: 28203 Comm: syz.3.8022 Not tainted syzkaller #0
[ 1414.654597][T28203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1414.664676][T28203] Call Trace:
[ 1414.667971][T28203]  <TASK>
[ 1414.670916][T28203]  dump_stack_lvl+0x188/0x24e
[ 1414.675628][T28203]  ? show_regs_print_info+0x12/0x12
[ 1414.680847][T28203]  ? load_image+0x410/0x410
[ 1414.685390][T28203]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1414.690455][T28203]  ? __kmem_cache_alloc_node+0x19d/0x270
[ 1414.696132][T28203]  should_fail_ex+0x390/0x4c0
[ 1414.700857][T28203]  _copy_from_user+0x2c/0x170
[ 1414.705571][T28203]  ___bpf_copy_key+0xb0/0x100
[ 1414.710284][T28203]  map_update_elem+0x2b2/0x6a0
[ 1414.715090][T28203]  __sys_bpf+0x4ec/0x780
[ 1414.719369][T28203]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1414.724799][T28203]  ? lock_chain_count+0x20/0x20
[ 1414.729699][T28203]  __x64_sys_bpf+0x78/0x90
[ 1414.734153][T28203]  do_syscall_64+0x4c/0xa0
[ 1414.738588][T28203]  ? clear_bhb_loop+0x60/0xb0
[ 1414.743300][T28203]  ? clear_bhb_loop+0x60/0xb0
[ 1414.748017][T28203]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1414.753950][T28203] RIP: 0033:0x7f7a3d39f559
[ 1414.758396][T28203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1414.778038][T28203] RSP: 002b:00007f7a3e347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1414.786489][T28203] RAX: ffffffffffffffda RBX: 00007f7a3d625fa0 RCX: 00007f7a3d39f559
[ 1414.794490][T28203] RDX: 0000000000000020 RSI: 0000200000003840 RDI: 0000000000000002
[ 1414.802479][T28203] RBP: 00007f7a3e347090 R08: 0000000000000000 R09: 0000000000000000
[ 1414.810468][T28203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1414.818463][T28203] R13: 00007f7a3d626038 R14: 00007f7a3d625fa0 R15: 00007fff458a9df8
[ 1414.826485][T28203]  </TASK>
[ 1416.935148][T28209] validate_nla: 1 callbacks suppressed
[ 1416.935169][T28209] netlink: 'syz.4.8025': attribute type 1 has an invalid length.
[ 1417.027864][T28209] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.8025'.
[ 1417.091875][T28214] netlink: 'syz.2.8026': attribute type 10 has an invalid length.
[ 1420.055018][T28226] netlink: 'syz.2.8029': attribute type 10 has an invalid length.
[ 1420.101673][T28226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8029'.
[ 1420.128241][T28225] netlink: 'syz.4.8027': attribute type 10 has an invalid length.
[ 1420.419691][T28242] netlink: 'syz.2.8031': attribute type 10 has an invalid length.
[ 1420.463760][T28242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8031'.
[ 1420.483813][T28244] netlink: 'syz.1.8032': attribute type 10 has an invalid length.
[ 1420.585950][T28244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8032'.
[ 1420.679723][T28244] bridge0: port 5(veth0_vlan) entered blocking state
[ 1420.687879][T28244] bridge0: port 5(veth0_vlan) entered disabled state
[ 1420.727761][T28244] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1422.706776][T28269] FAULT_INJECTION: forcing a failure.
[ 1422.706776][T28269] name failslab, interval 1, probability 0, space 0, times 0
[ 1422.710078][T28267] netlink: 'syz.1.8041': attribute type 10 has an invalid length.
[ 1422.742553][T28269] CPU: 0 PID: 28269 Comm: syz.3.8042 Not tainted syzkaller #0
[ 1422.750100][T28269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1422.760207][T28269] Call Trace:
[ 1422.763531][T28269]  <TASK>
[ 1422.766502][T28269]  dump_stack_lvl+0x188/0x24e
[ 1422.771234][T28269]  ? sctp_sendmsg+0x1686/0x2940
[ 1422.776129][T28269]  ? ___sys_sendmsg+0x2a2/0x360
[ 1422.781019][T28269]  ? show_regs_print_info+0x12/0x12
[ 1422.786256][T28269]  ? load_image+0x410/0x410
[ 1422.790839][T28269]  should_fail_ex+0x390/0x4c0
[ 1422.795586][T28269]  should_failslab+0x5/0x20
[ 1422.800162][T28269]  slab_pre_alloc_hook+0x59/0x300
[ 1422.805241][T28269]  ? sctp_add_bind_addr+0x89/0x350
[ 1422.810411][T28269]  __kmem_cache_alloc_node+0x4f/0x270
[ 1422.815836][T28269]  ? sctp_add_bind_addr+0x89/0x350
[ 1422.820995][T28269]  kmalloc_trace+0x26/0xe0
[ 1422.825451][T28269]  sctp_add_bind_addr+0x89/0x350
[ 1422.830449][T28269]  sctp_copy_local_addr_list+0x317/0x4d0
[ 1422.836129][T28269]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[ 1422.841890][T28269]  ? sctp_do_8_2_transport_strike+0x900/0x900
[ 1422.847996][T28269]  ? sctp_v6_is_any+0x60/0x70
[ 1422.852691][T28269]  ? sctp_copy_one_addr+0x93/0x660
[ 1422.857851][T28269]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1422.862914][T28269]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1422.869267][T28269]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1422.874575][T28269]  ? __sctp_connect+0xd80/0xd80
[ 1422.879430][T28269]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1422.884825][T28269]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1422.890383][T28269]  ? security_sctp_bind_connect+0x85/0xb0
[ 1422.896127][T28269]  sctp_sendmsg+0x1686/0x2940
[ 1422.900842][T28269]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1422.905835][T28269]  ? __might_fault+0xa6/0x120
[ 1422.910538][T28269]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1422.916974][T28269]  ? aa_sock_msg_perm+0x94/0x150
[ 1422.921949][T28269]  ? inet_sendmsg+0xca/0x2a0
[ 1422.926583][T28269]  ? inet_send_prepare+0x250/0x250
[ 1422.931733][T28269]  ____sys_sendmsg+0x5ed/0x9a0
[ 1422.936552][T28269]  ? __sys_sendmsg_sock+0x30/0x30
[ 1422.941587][T28269]  ? __import_iovec+0x306/0x510
[ 1422.946471][T28269]  ? import_iovec+0x6f/0xa0
[ 1422.951000][T28269]  ___sys_sendmsg+0x2a2/0x360
[ 1422.955737][T28269]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1422.960570][T28269]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1422.965768][T28269]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1422.970640][T28269]  ? __x64_sys_sendmsg+0x80/0x80
[ 1422.975638][T28269]  ? lockdep_hardirqs_on+0x94/0x140
[ 1422.980871][T28269]  do_syscall_64+0x4c/0xa0
[ 1422.985304][T28269]  ? clear_bhb_loop+0x60/0xb0
[ 1422.989999][T28269]  ? clear_bhb_loop+0x60/0xb0
[ 1422.994692][T28269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1423.000604][T28269] RIP: 0033:0x7f7a3d39f559
[ 1423.005029][T28269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1423.024666][T28269] RSP: 002b:00007f7a3e347028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1423.033116][T28269] RAX: ffffffffffffffda RBX: 00007f7a3d625fa0 RCX: 00007f7a3d39f559
[ 1423.041103][T28269] RDX: 0000000030008041 RSI: 0000200000000080 RDI: 0000000000000006
[ 1423.049084][T28269] RBP: 00007f7a3e347090 R08: 0000000000000000 R09: 0000000000000000
[ 1423.057088][T28269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1423.065173][T28269] R13: 00007f7a3d626038 R14: 00007f7a3d625fa0 R15: 00007fff458a9df8
[ 1423.073221][T28269]  </TASK>
[ 1423.082883][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.089267][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.109556][T28271] netlink: 'syz.2.8043': attribute type 10 has an invalid length.
[ 1423.152722][T28271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8043'.
[ 1423.367488][T28287] netlink: 'syz.0.8049': attribute type 10 has an invalid length.
[ 1423.377496][T28287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8049'.
[ 1423.387517][T28287] device veth0_vlan left promiscuous mode
[ 1423.393606][T28287] device veth0_vlan entered promiscuous mode
[ 1423.409291][T28287] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1423.426324][T28288] netlink: 'syz.2.8048': attribute type 10 has an invalid length.
[ 1423.438295][T28288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8048'.
[ 1423.448665][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1423.458872][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1423.473834][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1427.071527][T28308] netlink: 'syz.4.8056': attribute type 10 has an invalid length.
[ 1427.335646][T28317] netlink: 'syz.3.8058': attribute type 10 has an invalid length.
[ 1427.395233][T28317] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8058'.
[ 1427.457210][T28317] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1430.248839][T28319] FAULT_INJECTION: forcing a failure.
[ 1430.248839][T28319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1430.284010][T28319] CPU: 0 PID: 28319 Comm: syz.4.8059 Not tainted syzkaller #0
[ 1430.291530][T28319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1430.301603][T28319] Call Trace:
[ 1430.304901][T28319]  <TASK>
[ 1430.307833][T28319]  dump_stack_lvl+0x188/0x24e
[ 1430.312512][T28319]  ? show_regs_print_info+0x12/0x12
[ 1430.317717][T28319]  ? load_image+0x410/0x410
[ 1430.322231][T28319]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1430.327268][T28319]  should_fail_ex+0x390/0x4c0
[ 1430.331978][T28319]  _copy_from_user+0x2c/0x170
[ 1430.336674][T28319]  ___sys_recvmsg+0x170/0x590
[ 1430.341370][T28319]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1430.346153][T28319]  ? common_file_perm+0x171/0x1c0
[ 1430.351206][T28319]  ? __fget_files+0x3fc/0x460
[ 1430.355907][T28319]  __x64_sys_recvmsg+0x20d/0x2e0
[ 1430.360860][T28319]  ? ___sys_recvmsg+0x590/0x590
[ 1430.365733][T28319]  ? lockdep_hardirqs_on+0x94/0x140
[ 1430.370943][T28319]  do_syscall_64+0x4c/0xa0
[ 1430.375362][T28319]  ? clear_bhb_loop+0x60/0xb0
[ 1430.380041][T28319]  ? clear_bhb_loop+0x60/0xb0
[ 1430.384724][T28319]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1430.390626][T28319] RIP: 0033:0x7f25d4d9f559
[ 1430.395044][T28319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1430.414656][T28319] RSP: 002b:00007f25d5c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1430.423079][T28319] RAX: ffffffffffffffda RBX: 00007f25d5025fa0 RCX: 00007f25d4d9f559
[ 1430.431054][T28319] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003
[ 1430.439032][T28319] RBP: 00007f25d5c3b090 R08: 0000000000000000 R09: 0000000000000000
[ 1430.447008][T28319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1430.454980][T28319] R13: 00007f25d5026038 R14: 00007f25d5025fa0 R15: 00007ffe798c9948
[ 1430.462971][T28319]  </TASK>
[ 1430.612155][T28336] netlink: 'syz.3.8063': attribute type 10 has an invalid length.
[ 1430.639194][T28336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8063'.
[ 1430.656030][T28336] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1430.731013][T28339] netlink: 'syz.4.8064': attribute type 10 has an invalid length.
[ 1430.739468][T28339] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8064'.
[ 1430.750536][T28339] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1432.197959][T28350] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1432.204454][T28350] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1432.227772][T28351] netlink: 'syz.0.8077': attribute type 10 has an invalid length.
[ 1432.249606][T28351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8077'.
[ 1432.270824][T28351] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1432.288026][T28353] netlink: 'syz.4.8067': attribute type 10 has an invalid length.
[ 1432.299862][T28353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8067'.
[ 1432.315482][T28353] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1432.343220][T28355] netlink: 'syz.3.8070': attribute type 10 has an invalid length.
[ 1432.739792][T28365] netlink: 'syz.3.8073': attribute type 28 has an invalid length.
[ 1432.807998][T28367] netlink: 'syz.3.8074': attribute type 10 has an invalid length.
[ 1432.817058][T28367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8074'.
[ 1432.829169][T28367] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1436.775530][T28388] netlink: 'syz.0.8080': attribute type 10 has an invalid length.
[ 1436.822632][T28388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8080'.
[ 1436.872764][T28388] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1437.056902][T28398] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.8087'.
[ 1437.212846][T28401] netlink: 'syz.3.8087': attribute type 10 has an invalid length.
[ 1437.239612][T28401] 8021q: adding VLAN 0 to HW filter on device team0
[ 1437.247694][T28401] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1437.261941][T28394] netlink: 'syz.2.8086': attribute type 10 has an invalid length.
[ 1437.287180][T28394] team0: Device hsr_slave_0 failed to register rx_handler
[ 1437.444621][T28407] netlink: 'syz.3.8088': attribute type 10 has an invalid length.
[ 1437.750602][T28420] netlink: 'syz.3.8091': attribute type 10 has an invalid length.
[ 1437.761079][T28420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8091'.
[ 1437.777602][T28420] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1441.897005][T28433] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.8099'.
[ 1441.924985][T28442] netlink: 'syz.2.8100': attribute type 10 has an invalid length.
[ 1441.953811][T28442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8100'.
[ 1442.008065][T28433] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1442.132612][T28445] netlink: 'syz.1.8099': attribute type 10 has an invalid length.
[ 1444.965943][T28445] 8021q: adding VLAN 0 to HW filter on device team0
[ 1444.978136][T28445] device team0 entered promiscuous mode
[ 1444.983872][T28445] device team_slave_0 entered promiscuous mode
[ 1444.990229][T28445] device team_slave_1 entered promiscuous mode
[ 1444.996696][T28445] device macvlan1 entered promiscuous mode
[ 1445.005833][T28445] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1448.267501][T28468] netlink: 'syz.3.8103': attribute type 10 has an invalid length.
[ 1448.290016][T28468] team0: Device hsr_slave_0 failed to register rx_handler
[ 1448.307477][T28471] netlink: 'syz.0.8106': attribute type 10 has an invalid length.
[ 1448.315637][T28471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8106'.
[ 1448.326108][T28471] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1448.673983][T28491] netlink: 'syz.3.8113': attribute type 10 has an invalid length.
[ 1449.327300][T28491] device veth0_vlan left promiscuous mode
[ 1449.365156][T28491] device veth0_vlan entered promiscuous mode
[ 1449.407365][T28491] team0: Device veth0_vlan failed to register rx_handler
[ 1449.465326][T28499] netlink: 'syz.4.8114': attribute type 10 has an invalid length.
[ 1449.476298][T28499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8114'.
[ 1449.489335][T28499] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1452.879657][T28517] netlink: 'syz.0.8120': attribute type 21 has an invalid length.
[ 1452.968302][T28526] netlink: 'syz.4.8122': attribute type 10 has an invalid length.
[ 1452.999869][T28526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8122'.
[ 1453.061246][T28526] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1456.456797][T28537] netlink: 'syz.2.8127': attribute type 10 has an invalid length.
[ 1456.487547][T28540] netlink: 'syz.1.8128': attribute type 10 has an invalid length.
[ 1456.724791][T28541] netlink: 'syz.0.8126': attribute type 10 has an invalid length.
[ 1456.830699][T28541] team0: Device hsr_slave_0 failed to register rx_handler
[ 1456.944858][T28559] netlink: 'syz.1.8132': attribute type 10 has an invalid length.
[ 1456.954460][T28559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8132'.
[ 1456.964423][T28559] bridge0: port 5(veth0_vlan) entered blocking state
[ 1456.971395][T28559] bridge0: port 5(veth0_vlan) entered disabled state
[ 1456.996031][T28559] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1460.461893][T28569] netlink: 'syz.3.8137': attribute type 10 has an invalid length.
[ 1460.474159][T28571] netlink: 'syz.4.8138': attribute type 10 has an invalid length.
[ 1460.581943][T28571] device veth0_vlan left promiscuous mode
[ 1460.607613][T28571] device veth0_vlan entered promiscuous mode
[ 1460.635938][T28571] team0: Device veth0_vlan failed to register rx_handler
[ 1465.677278][T28582] netlink: 'syz.0.8140': attribute type 10 has an invalid length.
[ 1465.685263][T28582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8140'.
[ 1465.694876][T28582] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1465.714811][T28593] netlink: 'syz.1.8144': attribute type 10 has an invalid length.
[ 1465.731396][T28597] netlink: 'syz.4.8146': attribute type 10 has an invalid length.
[ 1465.763877][T28597] device veth0_vlan left promiscuous mode
[ 1465.777384][T28597] device veth0_vlan entered promiscuous mode
[ 1465.805526][T28597] team0: Device veth0_vlan failed to register rx_handler
[ 1465.854790][T28602] netlink: 'syz.3.8147': attribute type 10 has an invalid length.
[ 1465.873000][T28602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8147'.
[ 1465.910386][T28602] device veth0_vlan left promiscuous mode
[ 1465.922409][T28602] device veth0_vlan entered promiscuous mode
[ 1465.946112][T28602] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1466.011209][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1466.031457][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1466.047993][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1466.058645][T28615] netlink: 'syz.4.8151': attribute type 10 has an invalid length.
[ 1466.069432][T28616] netlink: 'syz.2.8149': attribute type 10 has an invalid length.
[ 1466.079856][T28616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8149'.
[ 1466.091841][T28618] netlink: 'syz.0.8152': attribute type 10 has an invalid length.
[ 1466.170310][T28618] device veth0_vlan left promiscuous mode
[ 1466.193893][T28618] device veth0_vlan entered promiscuous mode
[ 1466.215676][T28618] team0: Device veth0_vlan failed to register rx_handler
[ 1467.366282][T28637] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1467.373250][T28637] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1469.347677][T28645] netlink: 'syz.0.8160': attribute type 10 has an invalid length.
[ 1469.355833][T28648] netlink: 'syz.2.8161': attribute type 10 has an invalid length.
[ 1469.364080][T28648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8161'.
[ 1469.376042][T28652] netlink: 'syz.3.8163': attribute type 10 has an invalid length.
[ 1469.433828][T28652] device veth0_vlan left promiscuous mode
[ 1469.440895][T28652] device veth0_vlan entered promiscuous mode
[ 1469.468216][T28652] team0: Device veth0_vlan failed to register rx_handler
[ 1469.719717][T28672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8168'.
[ 1469.743265][    C0] hsr0: VLAN not yet supported
[ 1469.744510][T28672] device veth0_vlan left promiscuous mode
[ 1469.775075][T28672] device veth0_vlan entered promiscuous mode
[ 1469.883149][T28672] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1469.911005][T28673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8169'.
[ 1469.924973][T28673] bridge0: port 5(veth0_vlan) entered blocking state
[ 1469.942701][T28673] bridge0: port 5(veth0_vlan) entered disabled state
[ 1469.967457][T28673] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1470.801151][T28691] validate_nla: 4 callbacks suppressed
[ 1470.801196][T28691] netlink: 'syz.2.8176': attribute type 10 has an invalid length.
[ 1470.867248][T28691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8176'.
[ 1473.787428][T28701] netlink: 'syz.2.8179': attribute type 10 has an invalid length.
[ 1473.798383][T28698] netlink: 'syz.4.8178': attribute type 10 has an invalid length.
[ 1473.813632][T28704] netlink: 'syz.1.8180': attribute type 10 has an invalid length.
[ 1473.916283][T28704] device veth0_vlan left promiscuous mode
[ 1473.934651][T28704] device veth0_vlan entered promiscuous mode
[ 1473.952001][T28704] team0: Device veth0_vlan failed to register rx_handler
[ 1474.142048][T28712] netlink: 'syz.1.8183': attribute type 29 has an invalid length.
[ 1476.868901][T28708] netlink: 'syz.2.8181': attribute type 10 has an invalid length.
[ 1481.781000][T28712] netlink: 'syz.1.8183': attribute type 29 has an invalid length.
[ 1481.791430][T28725] netlink: 'syz.0.8185': attribute type 10 has an invalid length.
[ 1481.799914][T28725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8185'.
[ 1481.813412][T28725] device veth0_vlan left promiscuous mode
[ 1481.819181][T28725] device veth0_vlan entered promiscuous mode
[ 1481.835169][T28725] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1481.873260][T28732] netlink: 'syz.4.8190': attribute type 10 has an invalid length.
[ 1481.910500][T28732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8190'.
[ 1481.933538][T28732] device veth0_vlan left promiscuous mode
[ 1481.939365][T28732] device veth0_vlan entered promiscuous mode
[ 1481.954009][T28732] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1481.977630][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1481.994591][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1482.013862][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1482.028545][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1482.055901][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1482.070829][T28074] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1482.090295][T28740] netlink: 'syz.1.8192': attribute type 10 has an invalid length.
[ 1482.100836][T28751] netlink: 'syz.4.8195': attribute type 10 has an invalid length.
[ 1482.164299][T28751] device veth0_vlan left promiscuous mode
[ 1482.182102][T28751] device veth0_vlan entered promiscuous mode
[ 1482.197548][T28751] team0: Device veth0_vlan failed to register rx_handler
[ 1482.240492][T28746] netlink: 'syz.0.8194': attribute type 10 has an invalid length.
[ 1482.254196][T28746] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8194'.
[ 1484.465069][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.471463][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1485.643760][T28766] netlink: 'syz.3.8201': attribute type 7 has an invalid length.
[ 1485.652198][T28766] netlink: 'syz.3.8201': attribute type 6 has an invalid length.
[ 1487.883943][T28777] netlink: 'syz.0.8204': attribute type 10 has an invalid length.
[ 1487.892009][T28777] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8204'.
[ 1487.901555][T28777] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1487.918246][T28787] netlink: 'syz.1.8205': attribute type 10 has an invalid length.
[ 1487.928011][T28787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8205'.
[ 1487.937514][T28787] device veth0_vlan left promiscuous mode
[ 1487.949270][T28787] device veth0_vlan entered promiscuous mode
[ 1487.971943][T28787] bridge0: port 5(veth0_vlan) entered blocking state
[ 1487.985212][T28787] bridge0: port 5(veth0_vlan) entered disabled state
[ 1488.004581][T28787] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1488.021853][T28784] netlink: 'syz.3.8207': attribute type 10 has an invalid length.
[ 1488.032824][T28792] netlink: 'syz.2.8209': attribute type 10 has an invalid length.
[ 1488.041087][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1488.085058][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1488.124396][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1491.464807][T28825] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.8220'.
[ 1491.494661][T28825] netlink: zone id is out of range
[ 1491.572319][T28825] netlink: del zone limit has 4 unknown bytes
[ 1491.838962][T28833] netlink: 'syz.4.8222': attribute type 10 has an invalid length.
[ 1491.850867][T28833] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8222'.
[ 1491.881885][T28833] device veth0_vlan left promiscuous mode
[ 1491.911996][T28833] device veth0_vlan entered promiscuous mode
[ 1491.997584][T28833] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1492.199306][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1492.260074][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1492.297041][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1492.317315][T28843] netlink: 'syz.2.8224': attribute type 10 has an invalid length.
[ 1492.329331][T28843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8224'.
[ 1492.354848][T28841] netlink: 'syz.3.8225': attribute type 10 has an invalid length.
[ 1492.669140][T28855] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8229'.
[ 1494.522251][T28847] netlink: 'syz.1.8226': attribute type 10 has an invalid length.
[ 1494.530703][T28847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8226'.
[ 1494.540101][T28847] bridge0: port 5(veth0_vlan) entered blocking state
[ 1494.547295][T28847] bridge0: port 5(veth0_vlan) entered disabled state
[ 1494.558365][T28847] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1494.574754][T28855] netlink: 'syz.3.8229': attribute type 21 has an invalid length.
[ 1494.602590][T28855] netlink: 'syz.3.8229': attribute type 6 has an invalid length.
[ 1494.610412][T28855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8229'.
[ 1494.801024][T28881] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.8236'.
[ 1494.848846][T28881] netlink: zone id is out of range
[ 1494.894991][T28884] netlink: 'syz.3.8237': attribute type 10 has an invalid length.
[ 1494.933586][T28881] netlink: del zone limit has 4 unknown bytes
[ 1494.940256][T28887] netlink: 'syz.2.8238': attribute type 10 has an invalid length.
[ 1494.980844][T28887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8238'.
[ 1495.332132][T28900] netlink: 'syz.3.8240': attribute type 10 has an invalid length.
[ 1495.372663][T28900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8240'.
[ 1495.399270][T28900] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1499.280713][T28926] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.8249'.
[ 1500.601872][T28928] netlink: 'syz.1.8250': attribute type 10 has an invalid length.
[ 1500.610663][T28926] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1500.621772][T28934] netlink: 'syz.0.8248': attribute type 10 has an invalid length.
[ 1500.630768][T28934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8248'.
[ 1500.642597][T28926] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1500.652760][T28926] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1500.653200][T28934] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1500.697013][T28942] netlink: 'syz.3.8254': attribute type 10 has an invalid length.
[ 1500.720948][T28942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8254'.
[ 1500.750407][T28942] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1500.810376][T28945] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.8255'.
[ 1500.825350][T28945] netlink: zone id is out of range
[ 1500.850772][T28945] netlink: del zone limit has 4 unknown bytes
[ 1500.864566][T28951] netlink: 'syz.4.8256': attribute type 10 has an invalid length.
[ 1500.874613][T28951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8256'.
[ 1500.887612][T28951] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1505.966315][T28962] netlink: 'syz.0.8268': attribute type 10 has an invalid length.
[ 1505.974242][T28962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8268'.
[ 1505.983888][T28962] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1506.000429][T28989] netlink: 'syz.4.8266': attribute type 10 has an invalid length.
[ 1506.016184][T28997] netlink: 'syz.2.8269': attribute type 10 has an invalid length.
[ 1506.027161][T28997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8269'.
[ 1506.128362][T29001] netlink: 'syz.1.8271': attribute type 10 has an invalid length.
[ 1506.131986][T29003] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8270'.
[ 1506.148529][T29003] netlink: zone id is out of range
[ 1506.149889][T29001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8271'.
[ 1506.180121][T29003] netlink: del zone limit has 4 unknown bytes
[ 1506.186391][T29001] bridge0: port 5(veth0_vlan) entered blocking state
[ 1506.186959][T29001] bridge0: port 5(veth0_vlan) entered disabled state
[ 1506.229286][T29001] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1506.253928][T29002] netlink: 'syz.4.8272': attribute type 10 has an invalid length.
[ 1506.262310][T29002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8272'.
[ 1506.275082][T29002] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1506.541783][T29021] netlink: 'syz.3.8277': attribute type 10 has an invalid length.
[ 1507.364728][T29021] device veth0_vlan left promiscuous mode
[ 1507.429100][T29021] device veth0_vlan entered promiscuous mode
[ 1507.441759][T29021] team0: Device veth0_vlan failed to register rx_handler
[ 1507.643943][T29033] netlink: 'syz.4.8280': attribute type 10 has an invalid length.
[ 1507.652142][T29033] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8280'.
[ 1507.700946][T29033] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1507.720892][T29035] netlink: 'syz.1.8282': attribute type 10 has an invalid length.
[ 1512.462558][T29046] netlink: 'syz.1.8295': attribute type 10 has an invalid length.
[ 1512.482550][T29046] device veth0_vlan left promiscuous mode
[ 1512.489193][T29046] device veth0_vlan entered promiscuous mode
[ 1512.518438][T29046] team0: Device veth0_vlan failed to register rx_handler
[ 1512.555161][T29052] netlink: 'syz.4.8286': attribute type 10 has an invalid length.
[ 1512.583719][T29052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8286'.
[ 1512.605611][T29052] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1512.757090][T29074] netlink: 'syz.2.8290': attribute type 10 has an invalid length.
[ 1512.796147][T29074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8290'.
[ 1515.756081][T29084] netlink: 'syz.3.8293': attribute type 10 has an invalid length.
[ 1515.845198][T29086] netlink: 'syz.1.8294': attribute type 7 has an invalid length.
[ 1515.881889][T29086] netlink: 'syz.1.8294': attribute type 6 has an invalid length.
[ 1515.913824][T29092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8298'.
[ 1515.997935][T29097] netlink: 'syz.0.8297': attribute type 10 has an invalid length.
[ 1516.031535][T29097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8297'.
[ 1516.064429][T29097] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1516.199032][T29103] netlink: 'syz.2.8301': attribute type 10 has an invalid length.
[ 1520.957702][T29115] netlink: 'syz.2.8302': attribute type 10 has an invalid length.
[ 1520.965734][T29115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8302'.
[ 1521.174819][T29135] netlink: 'syz.3.8309': attribute type 10 has an invalid length.
[ 1521.306388][T29140] netlink: 'syz.4.8311': attribute type 7 has an invalid length.
[ 1521.326430][T29140] netlink: 'syz.4.8311': attribute type 6 has an invalid length.
[ 1521.538576][T29147] netlink: 'syz.4.8313': attribute type 10 has an invalid length.
[ 1521.653931][T29147] device veth0_vlan left promiscuous mode
[ 1521.671503][T29147] device veth0_vlan entered promiscuous mode
[ 1521.716459][T29147] team0: Device veth0_vlan failed to register rx_handler
[ 1521.764168][T29155] netlink: 'syz.3.8314': attribute type 10 has an invalid length.
[ 1521.774885][T29155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8314'.
[ 1521.787578][T29155] device veth0_vlan left promiscuous mode
[ 1521.795029][T29155] device veth0_vlan entered promiscuous mode
[ 1521.837603][T29155] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1521.855301][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1521.865623][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1521.876109][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1521.932327][T29160] netlink: 'syz.4.8317': attribute type 10 has an invalid length.
[ 1521.941756][T29160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8317'.
[ 1521.951759][T29160] device veth0_vlan left promiscuous mode
[ 1521.960636][T29160] device veth0_vlan entered promiscuous mode
[ 1521.983257][T29160] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1522.046960][T29162] netlink: 'syz.4.8319': attribute type 7 has an invalid length.
[ 1522.054980][T29162] netlink: 'syz.4.8319': attribute type 6 has an invalid length.
[ 1522.613311][T29174] netlink: 'syz.2.8322': attribute type 4 has an invalid length.
[ 1522.621386][T29174] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8322'.
[ 1525.006664][T29178] device veth0_vlan left promiscuous mode
[ 1525.021127][T29178] device veth0_vlan entered promiscuous mode
[ 1525.031157][T29178] team0: Device veth0_vlan failed to register rx_handler
[ 1525.322177][T29200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8331'.
[ 1525.349698][T29200] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1525.685105][T29215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8336'.
[ 1525.695544][T29215] device veth0_vlan left promiscuous mode
[ 1525.701636][T29215] device veth0_vlan entered promiscuous mode
[ 1525.742167][T29215] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1528.761134][T29230] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8341'.
[ 1530.551960][T29227] validate_nla: 8 callbacks suppressed
[ 1530.551978][T29227] netlink: 'syz.2.8339': attribute type 10 has an invalid length.
[ 1530.568517][T29232] netlink: 'syz.0.8340': attribute type 10 has an invalid length.
[ 1530.600937][T29232] device veth0_vlan left promiscuous mode
[ 1530.617928][T29232] device veth0_vlan entered promiscuous mode
[ 1530.626963][T29232] team0: Device veth0_vlan failed to register rx_handler
[ 1530.651199][T29235] netlink: 'syz.3.8342': attribute type 7 has an invalid length.
[ 1530.667760][T29235] netlink: 'syz.3.8342': attribute type 6 has an invalid length.
[ 1530.713476][T29239] netlink: 'syz.2.8344': attribute type 7 has an invalid length.
[ 1530.729064][T29239] netlink: 'syz.2.8344': attribute type 6 has an invalid length.
[ 1531.052078][T29259] netlink: 'syz.2.8350': attribute type 10 has an invalid length.
[ 1531.075272][T29259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8350'.
[ 1531.090532][T29260] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1532.017926][T29267] netlink: 'syz.1.8354': attribute type 10 has an invalid length.
[ 1535.998357][T29281] netlink: 'syz.1.8356': attribute type 10 has an invalid length.
[ 1536.009775][T29281] device veth0_vlan left promiscuous mode
[ 1536.017186][T29281] device veth0_vlan entered promiscuous mode
[ 1536.040504][T29281] team0: Device veth0_vlan failed to register rx_handler
[ 1536.077491][T29289] netlink: 'syz.2.8360': attribute type 7 has an invalid length.
[ 1536.094026][T29289] netlink: 'syz.2.8360': attribute type 6 has an invalid length.
[ 1536.457747][T29308] netlink: 'syz.3.8366': attribute type 10 has an invalid length.
[ 1539.592269][T29330] netlink: 'syz.2.8370': attribute type 10 has an invalid length.
[ 1539.612544][T29330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8370'.
[ 1539.652393][T29331] netlink: 'syz.3.8373': attribute type 10 has an invalid length.
[ 1539.701593][T29331] device veth0_vlan left promiscuous mode
[ 1539.713993][T29331] device veth0_vlan entered promiscuous mode
[ 1539.726676][T29331] team0: Device veth0_vlan failed to register rx_handler
[ 1539.752283][T29320] netlink: 'syz.0.8371': attribute type 10 has an invalid length.
[ 1539.775472][T29320] team0: Device hsr_slave_0 failed to register rx_handler
[ 1541.868213][T29333] netlink: 'syz.3.8374': attribute type 7 has an invalid length.
[ 1541.876939][T29333] netlink: 'syz.3.8374': attribute type 6 has an invalid length.
[ 1541.897692][T29356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8378'.
[ 1542.124478][T29372] netlink: 'syz.2.8384': attribute type 21 has an invalid length.
[ 1542.143084][T29372] netlink: 'syz.2.8384': attribute type 6 has an invalid length.
[ 1542.150869][T29372] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8384'.
[ 1542.209559][T29368] netlink: 'syz.0.8381': attribute type 10 has an invalid length.
[ 1542.415293][T29380] netlink: 'syz.1.8385': attribute type 10 has an invalid length.
[ 1542.431272][T29380] device veth0_vlan left promiscuous mode
[ 1542.444946][T29380] device veth0_vlan entered promiscuous mode
[ 1542.464281][T29380] team0: Device veth0_vlan failed to register rx_handler
[ 1545.346942][T29394] netlink: 'syz.3.8388': attribute type 10 has an invalid length.
[ 1545.360421][T29394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8388'.
[ 1545.380389][T29394] device veth0_vlan left promiscuous mode
[ 1545.387895][T29394] device veth0_vlan entered promiscuous mode
[ 1545.405729][T29394] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1545.422048][T29395] netlink: 'syz.1.8390': attribute type 10 has an invalid length.
[ 1545.431692][T29395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8390'.
[ 1545.444707][T29395] device veth0_vlan left promiscuous mode
[ 1545.451725][T29395] device veth0_vlan entered promiscuous mode
[ 1545.463529][T29395] bridge0: port 5(veth0_vlan) entered blocking state
[ 1545.470547][T29395] bridge0: port 5(veth0_vlan) entered disabled state
[ 1545.481693][T29395] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1545.498913][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1545.513091][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1545.525539][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1545.535699][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1545.546328][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1545.563690][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1545.584075][T29399] netlink: 'syz.0.8393': attribute type 7 has an invalid length.
[ 1545.597650][T29399] netlink: 'syz.0.8393': attribute type 6 has an invalid length.
[ 1545.904135][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.910568][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1550.509034][T29414] netlink: 'syz.3.8396': attribute type 10 has an invalid length.
[ 1550.517696][T29417] device lo entered promiscuous mode
[ 1550.524882][T29427] netlink: 'syz.0.8400': attribute type 10 has an invalid length.
[ 1550.542663][T29427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8400'.
[ 1550.572162][T29427] device veth0_vlan left promiscuous mode
[ 1550.584057][T29427] device veth0_vlan entered promiscuous mode
[ 1550.651994][T29427] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1550.683968][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1550.712969][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1550.732996][T29431] netlink: 'syz.2.8404': attribute type 7 has an invalid length.
[ 1550.741042][T29431] netlink: 'syz.2.8404': attribute type 6 has an invalid length.
[ 1550.796101][T29436] netlink: 'syz.4.8401': attribute type 10 has an invalid length.
[ 1550.845198][T29436] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8401'.
[ 1550.870259][T29436] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1550.892667][T29438] netlink: 'syz.1.8405': attribute type 10 has an invalid length.
[ 1553.899901][T29452] netlink: 'syz.3.8406': attribute type 10 has an invalid length.
[ 1553.918653][T29452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8406'.
[ 1553.937542][T29452] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1554.352432][T29459] netlink: 'syz.0.8411': attribute type 41 has an invalid length.
[ 1556.948622][T29462] netlink: 'syz.1.8412': attribute type 10 has an invalid length.
[ 1557.085863][T29467] netlink: 'syz.2.8413': attribute type 10 has an invalid length.
[ 1557.109075][T29467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8413'.
[ 1557.145193][T29469] netlink: 'syz.1.8415': attribute type 10 has an invalid length.
[ 1557.235558][T29469] device veth0_vlan left promiscuous mode
[ 1557.251409][T29469] device veth0_vlan entered promiscuous mode
[ 1557.274883][T29469] team0: Device veth0_vlan failed to register rx_handler
[ 1557.395743][T29475] netlink: 'syz.4.8418': attribute type 10 has an invalid length.
[ 1557.415091][T29475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8418'.
[ 1557.437088][T29475] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1557.546928][T29482] netlink: 'syz.1.8420': attribute type 7 has an invalid length.
[ 1557.556516][T29482] netlink: 'syz.1.8420': attribute type 6 has an invalid length.
[ 1557.568496][T29480] netlink: 'syz.3.8419': attribute type 10 has an invalid length.
[ 1560.573773][T29499] netlink: 'syz.0.8425': attribute type 10 has an invalid length.
[ 1560.754671][T29507] netlink: 'syz.4.8428': attribute type 29 has an invalid length.
[ 1560.763565][T29507] netlink: 'syz.4.8428': attribute type 29 has an invalid length.
[ 1563.692737][T29513] FAULT_INJECTION: forcing a failure.
[ 1563.692737][T29513] name failslab, interval 1, probability 0, space 0, times 0
[ 1563.740808][T29513] CPU: 0 PID: 29513 Comm: syz.4.8430 Not tainted syzkaller #0
[ 1563.748327][T29513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1563.758409][T29513] Call Trace:
[ 1563.761699][T29513]  <TASK>
[ 1563.764645][T29513]  dump_stack_lvl+0x188/0x24e
[ 1563.769350][T29513]  ? show_regs_print_info+0x12/0x12
[ 1563.774571][T29513]  ? load_image+0x410/0x410
[ 1563.778137][T29517] validate_nla: 1 callbacks suppressed
[ 1563.778178][T29517] netlink: 'syz.3.8433': attribute type 10 has an invalid length.
[ 1563.779080][T29513]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1563.779115][T29513]  should_fail_ex+0x390/0x4c0
[ 1563.802077][T29513]  should_failslab+0x5/0x20
[ 1563.806601][T29513]  slab_pre_alloc_hook+0x59/0x300
[ 1563.811650][T29513]  ? security_sk_alloc+0x47/0x130
[ 1563.816705][T29513]  __kmem_cache_alloc_node+0x4f/0x270
[ 1563.822107][T29513]  ? security_sk_alloc+0x47/0x130
[ 1563.827152][T29513]  __kmalloc+0xa3/0x240
[ 1563.831307][T29513]  ? sk_prot_alloc+0xe7/0x210
[ 1563.835980][T29513]  security_sk_alloc+0x47/0x130
[ 1563.840833][T29513]  sk_prot_alloc+0x101/0x210
[ 1563.845415][T29513]  ? sk_alloc+0x20/0x330
[ 1563.849652][T29513]  sk_alloc+0x36/0x330
[ 1563.853743][T29513]  ? bpf_ctx_init+0x154/0x190
[ 1563.858414][T29513]  bpf_prog_test_run_skb+0x36d/0x18e0
[ 1563.863780][T29513]  ? lockdep_hardirqs_on+0x94/0x140
[ 1563.868982][T29513]  ? cpu_online+0xa0/0xa0
[ 1563.873307][T29513]  bpf_prog_test_run+0x31c/0x390
[ 1563.878247][T29513]  __sys_bpf+0x62b/0x780
[ 1563.882493][T29513]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1563.887891][T29513]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1563.894044][T29513]  __x64_sys_bpf+0x78/0x90
[ 1563.898471][T29513]  do_syscall_64+0x4c/0xa0
[ 1563.902878][T29513]  ? clear_bhb_loop+0x60/0xb0
[ 1563.907546][T29513]  ? clear_bhb_loop+0x60/0xb0
[ 1563.912215][T29513]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1563.918110][T29513] RIP: 0033:0x7f25d4d9f559
[ 1563.922523][T29513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1563.942121][T29513] RSP: 002b:00007f25d5c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1563.950527][T29513] RAX: ffffffffffffffda RBX: 00007f25d5025fa0 RCX: 00007f25d4d9f559
[ 1563.958500][T29513] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[ 1563.966462][T29513] RBP: 00007f25d5c3b090 R08: 0000000000000000 R09: 0000000000000000
[ 1563.974425][T29513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1563.982390][T29513] R13: 00007f25d5026038 R14: 00007f25d5025fa0 R15: 00007ffe798c9948
[ 1563.990400][T29513]  </TASK>
[ 1563.998364][T29519] FAULT_INJECTION: forcing a failure.
[ 1563.998364][T29519] name failslab, interval 1, probability 0, space 0, times 0
[ 1564.011471][T29519] CPU: 0 PID: 29519 Comm: syz.1.8434 Not tainted syzkaller #0
[ 1564.018943][T29519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1564.029012][T29519] Call Trace:
[ 1564.032313][T29519]  <TASK>
[ 1564.035259][T29519]  dump_stack_lvl+0x188/0x24e
[ 1564.039987][T29519]  ? show_regs_print_info+0x12/0x12
[ 1564.045179][T29519]  ? load_image+0x410/0x410
[ 1564.049677][T29519]  ? mark_lock+0x94/0x320
[ 1564.054394][T29519]  should_fail_ex+0x390/0x4c0
[ 1564.059108][T29519]  should_failslab+0x5/0x20
[ 1564.063612][T29519]  slab_pre_alloc_hook+0x59/0x300
[ 1564.068666][T29519]  kmem_cache_alloc+0x56/0x2f0
[ 1564.073451][T29519]  ? radix_tree_node_alloc+0x7e/0x3a0
[ 1564.078830][T29519]  radix_tree_node_alloc+0x7e/0x3a0
[ 1564.084021][T29519]  ? ____kasan_slab_free+0x126/0x1f0
[ 1564.089301][T29519]  ? __kmem_cache_free+0xb6/0x200
[ 1564.094315][T29519]  ? btf_new_fd+0x557/0x760
[ 1564.098812][T29519]  radix_tree_extend+0x14c/0x590
[ 1564.103750][T29519]  idr_get_free+0x1b3/0xa10
[ 1564.108252][T29519]  idr_alloc_cyclic+0x286/0x610
[ 1564.113105][T29519]  ? idr_alloc+0x2e0/0x2e0
[ 1564.117512][T29519]  ? do_raw_spin_lock+0x128/0x2f0
[ 1564.122533][T29519]  ? __radix_tree_preload+0x82/0x880
[ 1564.127810][T29519]  ? btf_alloc_id+0x30/0x2d0
[ 1564.132397][T29519]  btf_alloc_id+0x4f/0x2d0
[ 1564.136817][T29519]  btf_new_fd+0x597/0x760
[ 1564.141144][T29519]  __sys_bpf+0x612/0x780
[ 1564.145390][T29519]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1564.150771][T29519]  ? lock_chain_count+0x20/0x20
[ 1564.155632][T29519]  __x64_sys_bpf+0x78/0x90
[ 1564.160048][T29519]  do_syscall_64+0x4c/0xa0
[ 1564.164454][T29519]  ? clear_bhb_loop+0x60/0xb0
[ 1564.169126][T29519]  ? clear_bhb_loop+0x60/0xb0
[ 1564.173843][T29519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1564.179751][T29519] RIP: 0033:0x7fea7ff9f559
[ 1564.184170][T29519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1564.203782][T29519] RSP: 002b:00007fea80e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1564.212198][T29519] RAX: ffffffffffffffda RBX: 00007fea80225fa0 RCX: 00007fea7ff9f559
[ 1564.220180][T29519] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012
[ 1564.228154][T29519] RBP: 00007fea80e87090 R08: 0000000000000000 R09: 0000000000000000
[ 1564.236125][T29519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1564.244090][T29519] R13: 00007fea80226038 R14: 00007fea80225fa0 R15: 00007ffd3ae9a918
[ 1564.252082][T29519]  </TASK>
[ 1564.320767][T29517] device veth0_vlan left promiscuous mode
[ 1564.348811][T29517] device veth0_vlan entered promiscuous mode
[ 1564.393958][T29517] team0: Device veth0_vlan failed to register rx_handler
[ 1567.444671][T29515] netlink: 'syz.0.8432': attribute type 10 has an invalid length.
[ 1567.459234][T29515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8432'.
[ 1567.486594][T29515] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1567.529265][T29524] netlink: 'syz.4.8435': attribute type 21 has an invalid length.
[ 1567.542703][T29524] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8435'.
[ 1567.714867][T29538] netlink: 'syz.4.8439': attribute type 10 has an invalid length.
[ 1567.753026][T29535] netlink: 'syz.1.8440': attribute type 41 has an invalid length.
[ 1568.022246][T29550] netlink: 'syz.0.8443': attribute type 10 has an invalid length.
[ 1570.885935][T29563] netlink: 'syz.3.8448': attribute type 10 has an invalid length.
[ 1570.915537][T29563] device veth0_vlan left promiscuous mode
[ 1570.949535][T29563] device veth0_vlan entered promiscuous mode
[ 1570.998895][T29563] team0: Device veth0_vlan failed to register rx_handler
[ 1571.626301][T29565] netlink: 'syz.3.8450': attribute type 10 has an invalid length.
[ 1571.647459][T29565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8450'.
[ 1571.658317][T29565] device veth0_vlan left promiscuous mode
[ 1571.665842][T29565] device veth0_vlan entered promiscuous mode
[ 1571.686164][T29565] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1571.715014][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1571.725369][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1571.740312][T28082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1571.771501][T29569] -1O2~�: renamed from syzkaller0
[ 1571.904922][T29573] netlink: 'syz.2.8453': attribute type 41 has an invalid length.
[ 1571.960302][T29578] netlink: 'syz.4.8455': attribute type 10 has an invalid length.
[ 1571.968458][T29578] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8455'.
[ 1572.060770][T29580] netlink: 'syz.0.8456': attribute type 10 has an invalid length.
[ 1572.385841][T29591] netlink: 'syz.0.8459': attribute type 10 has an invalid length.
[ 1572.404593][T29591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8459'.
[ 1572.425566][T29593] FAULT_INJECTION: forcing a failure.
[ 1572.425566][T29593] name failslab, interval 1, probability 0, space 0, times 0
[ 1572.444135][T29591] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1572.464460][T29593] CPU: 1 PID: 29593 Comm: syz.3.8460 Not tainted syzkaller #0
[ 1572.471959][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1572.482035][T29593] Call Trace:
[ 1572.485333][T29593]  <TASK>
[ 1572.488276][T29593]  dump_stack_lvl+0x188/0x24e
[ 1572.492976][T29593]  ? show_regs_print_info+0x12/0x12
[ 1572.498194][T29593]  ? load_image+0x410/0x410
[ 1572.502723][T29593]  ? __might_sleep+0xd0/0xd0
[ 1572.507332][T29593]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1572.512382][T29593]  should_fail_ex+0x390/0x4c0
[ 1572.517085][T29593]  should_failslab+0x5/0x20
[ 1572.521607][T29593]  slab_pre_alloc_hook+0x59/0x300
[ 1572.526679][T29593]  ? kvmalloc_node+0x6c/0x180
[ 1572.531373][T29593]  __kmem_cache_alloc_node+0x4f/0x270
[ 1572.536767][T29593]  ? kvmalloc_node+0x6c/0x180
[ 1572.541458][T29593]  __kmalloc_node+0xa2/0x240
[ 1572.546063][T29593]  kvmalloc_node+0x6c/0x180
[ 1572.550590][T29593]  page_pool_create+0x1e7/0x5c0
[ 1572.555457][T29593]  bpf_test_run_xdp_live+0x220/0x1a90
[ 1572.560848][T29593]  ? 0xffffffffa0005080
[ 1572.565017][T29593]  ? text_poke_copy+0x7b/0x90
[ 1572.569714][T29593]  ? 0xffffffffa0005080
[ 1572.573881][T29593]  ? bpf_dispatcher_change_prog+0xc92/0xf10
[ 1572.579804][T29593]  ? xdp_convert_md_to_buff+0x330/0x330
[ 1572.585399][T29593]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[ 1572.591677][T29593]  ? bpf_test_init+0x119/0x140
[ 1572.596467][T29593]  ? xdp_convert_md_to_buff+0x5b/0x330
[ 1572.601955][T29593]  bpf_prog_test_run_xdp+0x757/0xf80
[ 1572.607261][T29593]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1572.612321][T29593]  ? dev_put+0x80/0x80
[ 1572.616422][T29593]  ? dev_put+0x80/0x80
[ 1572.620506][T29593]  bpf_prog_test_run+0x31c/0x390
[ 1572.625468][T29593]  __sys_bpf+0x62b/0x780
[ 1572.629754][T29593]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1572.635161][T29593]  ? lock_chain_count+0x20/0x20
[ 1572.640036][T29593]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1572.646055][T29593]  __x64_sys_bpf+0x78/0x90
[ 1572.650504][T29593]  do_syscall_64+0x4c/0xa0
[ 1572.654943][T29593]  ? clear_bhb_loop+0x60/0xb0
[ 1572.659640][T29593]  ? clear_bhb_loop+0x60/0xb0
[ 1572.664337][T29593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1572.670255][T29593] RIP: 0033:0x7f7a3d39f559
[ 1572.674687][T29593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1572.694400][T29593] RSP: 002b:00007f7a3e347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1572.702843][T29593] RAX: ffffffffffffffda RBX: 00007f7a3d625fa0 RCX: 00007f7a3d39f559
[ 1572.710836][T29593] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a
[ 1572.718827][T29593] RBP: 00007f7a3e347090 R08: 0000000000000000 R09: 0000000000000000
[ 1572.726823][T29593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1572.734822][T29593] R13: 00007f7a3d626038 R14: 00007f7a3d625fa0 R15: 00007fff458a9df8
[ 1572.742917][T29593]  </TASK>
[ 1572.782942][T29593] page_pool_create() gave up with errno -12
[ 1572.956901][T29599] netlink: 'syz.4.8462': attribute type 10 has an invalid length.
[ 1573.051375][T29599] device veth0_vlan left promiscuous mode
[ 1573.094883][T29599] device veth0_vlan entered promiscuous mode
[ 1573.128131][T29599] team0: Device veth0_vlan failed to register rx_handler
[ 1576.091810][T29606] netlink: 'syz.2.8465': attribute type 10 has an invalid length.
[ 1576.099915][T29606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8465'.
[ 1576.224373][T29610] FAULT_INJECTION: forcing a failure.
[ 1576.224373][T29610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1576.237771][T29610] CPU: 1 PID: 29610 Comm: syz.1.8468 Not tainted syzkaller #0
[ 1576.245277][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1576.255372][T29610] Call Trace:
[ 1576.258674][T29610]  <TASK>
[ 1576.261629][T29610]  dump_stack_lvl+0x188/0x24e
[ 1576.266525][T29610]  ? show_regs_print_info+0x12/0x12
[ 1576.271926][T29610]  ? load_image+0x410/0x410
[ 1576.276463][T29610]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1576.281521][T29610]  ? snprintf+0xe5/0x140
[ 1576.285803][T29610]  should_fail_ex+0x390/0x4c0
[ 1576.290539][T29610]  _copy_to_user+0x2c/0x130
[ 1576.295071][T29610]  simple_read_from_buffer+0xe3/0x150
[ 1576.300459][T29610]  proc_fail_nth_read+0x1a6/0x220
[ 1576.305546][T29610]  ? proc_fault_inject_write+0x310/0x310
[ 1576.311235][T29610]  ? fsnotify_perm+0x248/0x550
[ 1576.316027][T29610]  ? proc_fault_inject_write+0x310/0x310
[ 1576.321674][T29610]  vfs_read+0x2db/0x960
[ 1576.325848][T29610]  ? kernel_read+0x1e0/0x1e0
[ 1576.330449][T29610]  ? __fget_files+0x28/0x460
[ 1576.335050][T29610]  ? __fget_files+0x3fc/0x460
[ 1576.339770][T29610]  ? __fdget_pos+0x2ae/0x360
[ 1576.344367][T29610]  ? ksys_read+0x70/0x260
[ 1576.348708][T29610]  ksys_read+0x14d/0x260
[ 1576.352959][T29610]  ? vfs_write+0x9a0/0x9a0
[ 1576.357383][T29610]  ? lockdep_hardirqs_on+0x94/0x140
[ 1576.362606][T29610]  do_syscall_64+0x4c/0xa0
[ 1576.367024][T29610]  ? clear_bhb_loop+0x60/0xb0
[ 1576.371709][T29610]  ? clear_bhb_loop+0x60/0xb0
[ 1576.376385][T29610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1576.382282][T29610] RIP: 0033:0x7fea7ff5fd8e
[ 1576.386729][T29610] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1576.406344][T29610] RSP: 002b:00007fea80e86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1576.414769][T29610] RAX: ffffffffffffffda RBX: 00007fea80e876c0 RCX: 00007fea7ff5fd8e
[ 1576.422740][T29610] RDX: 000000000000000f RSI: 00007fea80e870a0 RDI: 0000000000000008
[ 1576.430759][T29610] RBP: 00007fea80e87090 R08: 0000000000000000 R09: 0000000000000000
[ 1576.438749][T29610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1576.446736][T29610] R13: 00007fea80226038 R14: 00007fea80225fa0 R15: 00007ffd3ae9a918
[ 1576.454737][T29610]  </TASK>
[ 1576.600738][T29620] netlink: 'syz.2.8470': attribute type 10 has an invalid length.
[ 1576.960411][T29636] netlink: 'syz.4.8476': attribute type 7 has an invalid length.
[ 1576.992820][T29636] netlink: 'syz.4.8476': attribute type 6 has an invalid length.
[ 1577.048053][T29643] netlink: 'syz.3.8477': attribute type 10 has an invalid length.
[ 1577.089036][T29643] device veth0_vlan left promiscuous mode
[ 1577.126133][T29643] device veth0_vlan entered promiscuous mode
[ 1577.148091][T29643] team0: Device veth0_vlan failed to register rx_handler
[ 1577.498630][T29651] netlink: 'syz.4.8480': attribute type 10 has an invalid length.
[ 1577.510131][T29651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8480'.
[ 1577.527297][T29651] device veth0_vlan left promiscuous mode
[ 1577.534302][T29651] device veth0_vlan entered promiscuous mode
[ 1577.688462][T29651] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1577.707688][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1577.736827][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1577.760193][T28081] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1580.387634][T29663] netlink: 'syz.3.8484': attribute type 10 has an invalid length.
[ 1580.410757][T29668] netlink: 'syz.2.8481': attribute type 10 has an invalid length.
[ 1580.426255][T29668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8481'.
[ 1580.766398][T29682] netlink: 'syz.0.8489': attribute type 10 has an invalid length.
[ 1580.815299][T29682] device veth0_vlan left promiscuous mode
[ 1580.826955][T29682] device veth0_vlan entered promiscuous mode
[ 1580.835698][T29682] team0: Device veth0_vlan failed to register rx_handler
[ 1580.922951][T29686] netlink: 'syz.0.8490': attribute type 7 has an invalid length.
[ 1581.096414][T29689] validate_nla: 1 callbacks suppressed
[ 1581.096449][T29689] netlink: 'syz.0.8492': attribute type 10 has an invalid length.
[ 1581.135821][T29689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8492'.
[ 1581.153449][T29689] device veth0_vlan left promiscuous mode
[ 1581.159480][T29689] device veth0_vlan entered promiscuous mode
[ 1581.221481][T29689] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1582.006992][T29698] netlink: 'syz.2.8496': attribute type 10 has an invalid length.
[ 1582.036159][T29698] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8496'.
[ 1582.129869][T29702] netlink: 'syz.0.8498': attribute type 10 has an invalid length.
[ 1583.711373][T29706] netlink: 'syz.3.8499': attribute type 7 has an invalid length.
[ 1583.721093][T29706] netlink: 'syz.3.8499': attribute type 6 has an invalid length.
[ 1585.106523][T29710] netlink: 'syz.2.8501': attribute type 10 has an invalid length.
[ 1585.142072][T29714] netlink: 'syz.3.8503': attribute type 7 has an invalid length.
[ 1585.162860][T29714] netlink: 'syz.3.8503': attribute type 6 has an invalid length.
[ 1585.436450][T29728] netlink: 'syz.4.8507': attribute type 10 has an invalid length.
[ 1585.464300][T29728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8507'.
[ 1585.504609][T29728] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1585.525355][T29729] netlink: 'syz.3.8508': attribute type 10 has an invalid length.
[ 1585.550547][T29729] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8508'.
[ 1585.576588][T29729] device veth0_vlan left promiscuous mode
[ 1585.587119][T29729] device veth0_vlan entered promiscuous mode
[ 1585.788510][T29729] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1585.806817][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1585.823251][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1585.840558][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1586.419485][T29739] netlink: 'syz.4.8512': attribute type 10 has an invalid length.
[ 1586.436123][T29739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8512'.
[ 1586.451930][T29739] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1586.495100][T29741] netlink: 'syz.0.8511': attribute type 10 has an invalid length.
[ 1589.645606][T29750] netlink: 'syz.0.8515': attribute type 10 has an invalid length.
[ 1589.741265][T29750] device veth0_vlan left promiscuous mode
[ 1589.759676][T29750] device veth0_vlan entered promiscuous mode
[ 1589.791099][T29750] team0: Device veth0_vlan failed to register rx_handler
[ 1589.883694][T29754] netlink: 'syz.3.8517': attribute type 7 has an invalid length.
[ 1589.894970][T29754] netlink: 'syz.3.8517': attribute type 6 has an invalid length.
[ 1590.046425][T29759] netlink: 'syz.0.8518': attribute type 10 has an invalid length.
[ 1590.071338][T29759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8518'.
[ 1590.102714][T29759] device veth0_vlan left promiscuous mode
[ 1590.119234][T29759] device veth0_vlan entered promiscuous mode
[ 1590.161168][T29759] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1590.193492][T29767] FAULT_INJECTION: forcing a failure.
[ 1590.193492][T29767] name failslab, interval 1, probability 0, space 0, times 0
[ 1590.207427][T29767] CPU: 1 PID: 29767 Comm: syz.4.8521 Not tainted syzkaller #0
[ 1590.214917][T29767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1590.224979][T29767] Call Trace:
[ 1590.228290][T29767]  <TASK>
[ 1590.231219][T29767]  dump_stack_lvl+0x188/0x24e
[ 1590.235893][T29767]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 1590.241724][T29767]  ? show_regs_print_info+0x12/0x12
[ 1590.246918][T29767]  ? load_image+0x410/0x410
[ 1590.251419][T29767]  ? mark_lock+0x94/0x320
[ 1590.255754][T29767]  should_fail_ex+0x390/0x4c0
[ 1590.260438][T29767]  should_failslab+0x5/0x20
[ 1590.264935][T29767]  slab_pre_alloc_hook+0x59/0x300
[ 1590.269989][T29767]  kmem_cache_alloc+0x56/0x2f0
[ 1590.274747][T29767]  ? dst_alloc+0x101/0x160
[ 1590.279161][T29767]  dst_alloc+0x101/0x160
[ 1590.283400][T29767]  ip_route_output_key_hash_rcu+0x14e4/0x23f0
[ 1590.289461][T29767]  ? ip_route_output_key_hash_rcu+0x1221/0x23f0
[ 1590.295701][T29767]  ? ip_route_output_key_hash+0x139/0x330
[ 1590.301417][T29767]  ip_route_output_key_hash+0x1ef/0x330
[ 1590.306979][T29767]  ? arch_stack_walk+0xf2/0x140
[ 1590.311830][T29767]  ? ip_route_input_rcu+0x30a0/0x30a0
[ 1590.317210][T29767]  tcp_v4_connect+0x6ae/0x18a0
[ 1590.322000][T29767]  ? tcp_twsk_unique+0x970/0x970
[ 1590.326949][T29767]  __inet_stream_connect+0x242/0xe10
[ 1590.332236][T29767]  ? inet_dgram_connect+0x340/0x340
[ 1590.337466][T29767]  tcp_sendmsg_fastopen+0x38f/0x600
[ 1590.342703][T29767]  tcp_sendmsg_locked+0x356b/0x39e0
[ 1590.347898][T29767]  ? mark_lock+0x94/0x320
[ 1590.352228][T29767]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1590.358207][T29767]  ? lock_chain_count+0x20/0x20
[ 1590.363061][T29767]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1590.369211][T29767]  ? lockdep_hardirqs_on+0x94/0x140
[ 1590.374405][T29767]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1590.380553][T29767]  ? tcp_sendmsg+0x1d/0x40
[ 1590.384967][T29767]  ? tcp_set_state+0x520/0x520
[ 1590.389727][T29767]  ? __local_bh_enable_ip+0x13e/0x1c0
[ 1590.395122][T29767]  tcp_sendmsg+0x2b/0x40
[ 1590.399362][T29767]  ? inet_send_prepare+0x250/0x250
[ 1590.404467][T29767]  ____sys_sendmsg+0x5ed/0x9a0
[ 1590.409242][T29767]  ? iovec_from_user+0x2df/0x360
[ 1590.414188][T29767]  ? __sys_sendmsg_sock+0x30/0x30
[ 1590.419207][T29767]  ? __import_iovec+0x306/0x510
[ 1590.424062][T29767]  ? import_iovec+0x6f/0xa0
[ 1590.428567][T29767]  ___sys_sendmsg+0x2a2/0x360
[ 1590.433246][T29767]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1590.438045][T29767]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1590.442896][T29767]  ? __x64_sys_sendmsg+0x80/0x80
[ 1590.447855][T29767]  do_syscall_64+0x4c/0xa0
[ 1590.452262][T29767]  ? clear_bhb_loop+0x60/0xb0
[ 1590.456953][T29767]  ? clear_bhb_loop+0x60/0xb0
[ 1590.461622][T29767]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1590.467518][T29767] RIP: 0033:0x7f25d4d9f559
[ 1590.471936][T29767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1590.491538][T29767] RSP: 002b:00007f25d5c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1590.499945][T29767] RAX: ffffffffffffffda RBX: 00007f25d5025fa0 RCX: 00007f25d4d9f559
[ 1590.507912][T29767] RDX: 000000003000c085 RSI: 00002000000007c0 RDI: 0000000000000008
[ 1590.515875][T29767] RBP: 00007f25d5c3b090 R08: 0000000000000000 R09: 0000000000000000
[ 1590.523836][T29767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1590.531798][T29767] R13: 00007f25d5026038 R14: 00007f25d5025fa0 R15: 00007ffe798c9948
[ 1590.539777][T29767]  </TASK>
[ 1590.569088][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1590.589081][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1590.727103][T29771] netlink: 'syz.1.8523': attribute type 10 has an invalid length.
[ 1590.737487][T29771] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8523'.
[ 1590.759976][T29771] device veth0_vlan left promiscuous mode
[ 1590.768680][T29771] device veth0_vlan entered promiscuous mode
[ 1590.980344][T29771] bridge0: port 5(veth0_vlan) entered blocking state
[ 1590.994701][T29771] bridge0: port 5(veth0_vlan) entered disabled state
[ 1591.061877][T29771] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1591.079740][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1591.093396][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1591.118936][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1593.390182][T29777] netlink: 'syz.2.8525': attribute type 10 has an invalid length.
[ 1593.444507][T29783] netlink: 'syz.4.8528': attribute type 10 has an invalid length.
[ 1593.485250][T29783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8528'.
[ 1593.554786][T29783] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1596.506382][T29794] netlink: 'syz.1.8531': attribute type 7 has an invalid length.
[ 1596.528446][T29794] netlink: 'syz.1.8531': attribute type 6 has an invalid length.
[ 1596.579716][T29798] netlink: 'syz.2.8530': attribute type 10 has an invalid length.
[ 1596.860485][T29813] netlink: 'syz.1.8535': attribute type 10 has an invalid length.
[ 1596.903605][T29813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8535'.
[ 1596.928934][T29813] bridge0: port 5(veth0_vlan) entered blocking state
[ 1596.950950][T29813] bridge0: port 5(veth0_vlan) entered disabled state
[ 1597.063681][T29813] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1597.604158][T29822] netlink: 'syz.2.8538': attribute type 10 has an invalid length.
[ 1597.613281][T29822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8538'.
[ 1597.647784][T29823] netlink: 'syz.4.8537': attribute type 10 has an invalid length.
[ 1597.663207][T29823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8537'.
[ 1597.693031][T29823] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1597.737772][T29826] netlink: 'syz.1.8539': attribute type 10 has an invalid length.
[ 1597.747607][T29828] netlink: 'syz.2.8540': attribute type 10 has an invalid length.
[ 1597.940428][T29835] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8543'.
[ 1597.960643][T29835] bridge0: port 5(veth0_vlan) entered blocking state
[ 1597.969895][T29835] bridge0: port 5(veth0_vlan) entered disabled state
[ 1597.990759][T29835] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1598.076825][T29838] device veth0_vlan left promiscuous mode
[ 1598.107357][T29838] device veth0_vlan entered promiscuous mode
[ 1598.138667][T29838] team0: Device veth0_vlan failed to register rx_handler
[ 1601.156050][T29844] validate_nla: 2 callbacks suppressed
[ 1601.156070][T29844] netlink: 'syz.3.8546': attribute type 7 has an invalid length.
[ 1601.170961][T29844] netlink: 'syz.3.8546': attribute type 6 has an invalid length.
[ 1601.357865][T29860] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.8550'.
[ 1601.400873][T29860] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1601.448845][T29860] CPU: 0 PID: 29860 Comm: syz.4.8550 Not tainted syzkaller #0
[ 1601.456376][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1601.466466][T29860] Call Trace:
[ 1601.469766][T29860]  <TASK>
[ 1601.472720][T29860]  dump_stack_lvl+0x188/0x24e
[ 1601.477441][T29860]  ? show_regs_print_info+0x12/0x12
[ 1601.482677][T29860]  ? load_image+0x410/0x410
[ 1601.487239][T29860]  sysfs_warn_dup+0x8a/0xa0
[ 1601.491796][T29860]  sysfs_do_create_link_sd+0xc0/0x110
[ 1601.497220][T29860]  device_add+0x83b/0x1050
[ 1601.501708][T29860]  wiphy_register+0x1d8b/0x2aa0
[ 1601.506631][T29860]  ? cfg80211_event_work+0x40/0x40
[ 1601.511791][T29860]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1601.518004][T29860]  ieee80211_register_hw+0x2e33/0x3b00
[ 1601.523544][T29860]  ? ieee80211_register_hw+0xf01/0x3b00
[ 1601.529134][T29860]  ? ieee80211_register_hw+0xf01/0x3b00
[ 1601.534738][T29860]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1601.540429][T29860]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1601.546367][T29860]  ? __debug_object_init+0xed/0x440
[ 1601.551609][T29860]  ? memset+0x1e/0x40
[ 1601.555628][T29860]  ? __hrtimer_init+0x189/0x270
[ 1601.560519][T29860]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1601.566291][T29860]  hwsim_new_radio_nl+0xab7/0xc90
[ 1601.571368][T29860]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1601.576951][T29860]  ? end_current_label_crit_section+0x170/0x170
[ 1601.583247][T29860]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1601.589195][T29860]  ? bpf_lsm_capable+0x5/0x10
[ 1601.593915][T29860]  ? security_capable+0x85/0xb0
[ 1601.598821][T29860]  genl_rcv_msg+0x601/0x790
[ 1601.603371][T29860]  ? genl_bind+0x360/0x360
[ 1601.607817][T29860]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1601.614201][T29860]  netlink_rcv_skb+0x1ef/0x440
[ 1601.619009][T29860]  ? genl_bind+0x360/0x360
[ 1601.623464][T29860]  ? netlink_ack+0x1160/0x1160
[ 1601.628269][T29860]  ? down_read+0x1a8/0x2d0
[ 1601.632722][T29860]  genl_rcv+0x24/0x40
[ 1601.636728][T29860]  netlink_unicast+0x7ad/0x920
[ 1601.641533][T29860]  netlink_sendmsg+0x8ad/0xbd0
[ 1601.646328][T29860]  ? netlink_getsockopt+0x550/0x550
[ 1601.651559][T29860]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1601.657138][T29860]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1601.662443][T29860]  ? security_socket_sendmsg+0x7c/0xa0
[ 1601.667932][T29860]  ? netlink_getsockopt+0x550/0x550
[ 1601.673166][T29860]  ____sys_sendmsg+0x5ed/0x9a0
[ 1601.677954][T29860]  ? rcu_is_watching+0x11/0xa0
[ 1601.682740][T29860]  ? lockdep_hardirqs_on+0x94/0x140
[ 1601.687955][T29860]  ? __sys_sendmsg_sock+0x30/0x30
[ 1601.693001][T29860]  ? ___sys_sendmsg+0x287/0x360
[ 1601.697878][T29860]  ___sys_sendmsg+0x2a2/0x360
[ 1601.702587][T29860]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1601.707390][T29860]  ? ktime_get+0x7b/0x270
[ 1601.711759][T29860]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1601.716633][T29860]  ? __x64_sys_sendmsg+0x80/0x80
[ 1601.721601][T29860]  ? lockdep_hardirqs_on+0x94/0x140
[ 1601.726826][T29860]  do_syscall_64+0x4c/0xa0
[ 1601.731252][T29860]  ? clear_bhb_loop+0x60/0xb0
[ 1601.735954][T29860]  ? clear_bhb_loop+0x60/0xb0
[ 1601.740645][T29860]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1601.746560][T29860] RIP: 0033:0x7f25d4d9f559
[ 1601.750982][T29860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1601.770604][T29860] RSP: 002b:00007f25d5c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1601.779030][T29860] RAX: ffffffffffffffda RBX: 00007f25d5025fa0 RCX: 00007f25d4d9f559
[ 1601.787016][T29860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1601.794997][T29860] RBP: 00007f25d4e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1601.802974][T29860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1601.810954][T29860] R13: 00007f25d5026038 R14: 00007f25d5025fa0 R15: 00007ffe798c9948
[ 1601.818957][T29860]  </TASK>
[ 1602.294353][T29874] netlink: 'syz.1.8551': attribute type 10 has an invalid length.
[ 1602.303491][T29874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8551'.
[ 1602.315183][T29874] bridge0: port 5(veth0_vlan) entered blocking state
[ 1602.323859][T29874] bridge0: port 5(veth0_vlan) entered disabled state
[ 1602.340880][T29874] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1602.416455][T29882] netlink: 'syz.4.8553': attribute type 10 has an invalid length.
[ 1602.430380][T29882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8553'.
[ 1602.451689][T29882] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1602.486462][T29880] netlink: 'syz.1.8554': attribute type 10 has an invalid length.
[ 1603.229627][T29889] netlink: 'syz.4.8557': attribute type 10 has an invalid length.
[ 1603.278018][T29889] device veth0_vlan left promiscuous mode
[ 1603.301914][T29889] device veth0_vlan entered promiscuous mode
[ 1603.326220][T29889] team0: Device veth0_vlan failed to register rx_handler
[ 1603.520209][T29893] netlink: 'syz.4.8560': attribute type 7 has an invalid length.
[ 1603.534628][T29893] netlink: 'syz.4.8560': attribute type 6 has an invalid length.
[ 1603.655698][T29900] netlink: 'syz.1.8562': attribute type 10 has an invalid length.
[ 1603.672558][T29900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8562'.
[ 1603.702960][T29900] bridge0: port 5(veth0_vlan) entered blocking state
[ 1603.727000][T29900] bridge0: port 5(veth0_vlan) entered disabled state
[ 1603.760330][T29900] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1604.421264][T29907] netlink: 'syz.2.8564': attribute type 10 has an invalid length.
[ 1604.454485][T29907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8564'.
[ 1606.746765][T29918] validate_nla: 1 callbacks suppressed
[ 1606.746798][T29918] netlink: 'syz.2.8571': attribute type 10 has an invalid length.
[ 1606.755841][T29922] FAULT_INJECTION: forcing a failure.
[ 1606.755841][T29922] name failslab, interval 1, probability 0, space 0, times 0
[ 1606.793736][T29922] CPU: 0 PID: 29922 Comm: syz.0.8569 Not tainted syzkaller #0
[ 1606.801266][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1606.811348][T29922] Call Trace:
[ 1606.814654][T29922]  <TASK>
[ 1606.817599][T29922]  dump_stack_lvl+0x188/0x24e
[ 1606.822299][T29922]  ? show_regs_print_info+0x12/0x12
[ 1606.827524][T29922]  ? load_image+0x410/0x410
[ 1606.832063][T29922]  ? __might_sleep+0xd0/0xd0
[ 1606.836708][T29922]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1606.841768][T29922]  ? __lock_acquire+0x142d/0x7ea0
[ 1606.846828][T29922]  should_fail_ex+0x390/0x4c0
[ 1606.851538][T29922]  should_failslab+0x5/0x20
[ 1606.856058][T29922]  slab_pre_alloc_hook+0x59/0x300
[ 1606.861089][T29922]  kmem_cache_alloc_node+0x5a/0x310
[ 1606.866296][T29922]  ? __alloc_skb+0xf9/0x7d0
[ 1606.870840][T29922]  __alloc_skb+0xf9/0x7d0
[ 1606.875209][T29922]  alloc_skb_with_frags+0xa7/0x710
[ 1606.880346][T29922]  ? verify_lock_unused+0x140/0x140
[ 1606.885561][T29922]  ? __kmem_cache_free+0xb6/0x200
[ 1606.890592][T29922]  ? verify_lock_unused+0x140/0x140
[ 1606.895822][T29922]  sock_alloc_send_pskb+0x87f/0x9a0
[ 1606.901027][T29922]  ? sock_kzfree_s+0x50/0x50
[ 1606.905609][T29922]  ? do_raw_spin_lock+0x128/0x2f0
[ 1606.910626][T29922]  ? __rwlock_init+0x140/0x140
[ 1606.915401][T29922]  ? do_raw_spin_unlock+0x11d/0x230
[ 1606.920615][T29922]  unix_dgram_sendmsg+0x5c1/0x16f0
[ 1606.925749][T29922]  ? aa_sk_perm+0x81f/0x950
[ 1606.930277][T29922]  ? aa_af_perm+0x340/0x340
[ 1606.934810][T29922]  ? unix_dgram_poll+0x680/0x680
[ 1606.939749][T29922]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1606.946165][T29922]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1606.951722][T29922]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1606.957036][T29922]  ? security_socket_sendmsg+0x7c/0xa0
[ 1606.962525][T29922]  ? unix_dgram_poll+0x680/0x680
[ 1606.967468][T29922]  ____sys_sendmsg+0x5ed/0x9a0
[ 1606.972242][T29922]  ? __might_fault+0xa6/0x120
[ 1606.976917][T29922]  ? __sys_sendmsg_sock+0x30/0x30
[ 1606.981958][T29922]  ? __import_iovec+0x306/0x510
[ 1606.986837][T29922]  ? import_iovec+0x6f/0xa0
[ 1606.989165][T29929] netlink: 'syz.2.8572': attribute type 10 has an invalid length.
[ 1606.991360][T29922]  ___sys_sendmsg+0x2a2/0x360
[ 1606.991398][T29922]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1606.991439][T29922]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1606.991487][T29922]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1606.991514][T29922]  ? __x64_sys_sendmsg+0x80/0x80
[ 1606.991550][T29922]  ? lockdep_hardirqs_on+0x94/0x140
[ 1606.999925][T29929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8572'.
[ 1607.004004][T29922]  do_syscall_64+0x4c/0xa0
[ 1607.004030][T29922]  ? clear_bhb_loop+0x60/0xb0
[ 1607.004051][T29922]  ? clear_bhb_loop+0x60/0xb0
[ 1607.004068][T29922]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1607.004091][T29922] RIP: 0033:0x7f45a1f9f559
[ 1607.004111][T29922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1607.004126][T29922] RSP: 002b:00007f45a2e7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1607.004147][T29922] RAX: ffffffffffffffda RBX: 00007f45a2225fa0 RCX: 00007f45a1f9f559
[ 1607.004160][T29922] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000004
[ 1607.004171][T29922] RBP: 00007f45a2e7a090 R08: 0000000000000000 R09: 0000000000000000
[ 1607.004182][T29922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1607.004194][T29922] R13: 00007f45a2226038 R14: 00007f45a2225fa0 R15: 00007ffc50e7d7f8
[ 1607.004221][T29922]  </TASK>
[ 1607.146940][T29932] netlink: 'syz.1.8582': attribute type 10 has an invalid length.
[ 1607.281615][T29932] device veth0_vlan left promiscuous mode
[ 1607.301817][T29932] device veth0_vlan entered promiscuous mode
[ 1607.331980][T29932] team0: Device veth0_vlan failed to register rx_handler
[ 1607.344418][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.350768][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.631059][T29943] netlink: 'syz.4.8575': attribute type 7 has an invalid length.
[ 1607.639789][T29943] netlink: 'syz.4.8575': attribute type 6 has an invalid length.
[ 1607.876420][T29954] netlink: 'syz.2.8579': attribute type 10 has an invalid length.
[ 1607.885441][T29954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8579'.
[ 1607.910070][T29955] netlink: 'syz.4.8578': attribute type 10 has an invalid length.
[ 1607.919122][T29955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8578'.
[ 1607.934558][T29955] device veth0_vlan left promiscuous mode
[ 1607.945602][T29955] device veth0_vlan entered promiscuous mode
[ 1608.021120][T29955] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1608.041179][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1608.057642][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1608.066697][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1608.077932][T29957] netlink: 'syz.2.8580': attribute type 10 has an invalid length.
[ 1608.717834][T29964] netlink: 'syz.3.8583': attribute type 10 has an invalid length.
[ 1608.741767][T29964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8583'.
[ 1608.762039][T29964] device veth0_vlan left promiscuous mode
[ 1608.779101][T29964] device veth0_vlan entered promiscuous mode
[ 1608.810912][T29964] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1608.852358][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1608.871425][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1608.883756][T23427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1610.481708][T29983] netlink: 'syz.0.8587': attribute type 10 has an invalid length.
[ 1610.492025][T29983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8587'.
[ 1610.525543][T29983] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1612.184734][T29989] netlink: 'syz.1.8590': attribute type 7 has an invalid length.
[ 1612.196655][T29989] netlink: 'syz.1.8590': attribute type 6 has an invalid length.
[ 1612.224501][T29987] netlink: 'syz.2.8588': attribute type 10 has an invalid length.
[ 1612.258195][T29993] netlink: 'syz.0.8592': attribute type 10 has an invalid length.
[ 1612.286147][T29991] netlink: 'syz.4.8591': attribute type 10 has an invalid length.
[ 1612.302633][T29991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8591'.
[ 1612.325611][T29991] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1612.404462][T29998] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8595'.
[ 1612.539963][T30005] netlink: 'syz.1.8596': attribute type 10 has an invalid length.
[ 1612.561670][T30005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8596'.
[ 1612.586039][T30005] device veth0_vlan left promiscuous mode
[ 1612.613060][T30005] device veth0_vlan entered promiscuous mode
[ 1612.715035][T30005] bridge0: port 5(veth0_vlan) entered blocking state
[ 1612.736035][T30005] bridge0: port 5(veth0_vlan) entered disabled state
[ 1612.854382][T30005] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1612.939354][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1612.961808][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1613.004144][T23424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1615.686657][T30027] netlink: 'syz.0.8602': attribute type 10 has an invalid length.
[ 1615.747799][T30027] device veth0_vlan left promiscuous mode
[ 1615.783988][T30027] device veth0_vlan entered promiscuous mode
[ 1615.807984][T30027] team0: Device veth0_vlan failed to register rx_handler
[ 1617.523745][T30032] netlink: 'syz.3.8605': attribute type 10 has an invalid length.
[ 1617.550876][T30032] device veth0_vlan left promiscuous mode
[ 1617.573990][T30032] device veth0_vlan entered promiscuous mode
[ 1617.586806][T30032] team0: Device veth0_vlan failed to register rx_handler
[ 1617.623964][T30034] netlink: 'syz.2.8603': attribute type 10 has an invalid length.
[ 1617.642234][T30034] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8603'.
[ 1617.682699][T30038] netlink: 'syz.1.8606': attribute type 7 has an invalid length.
[ 1617.695465][T30038] netlink: 'syz.1.8606': attribute type 6 has an invalid length.
[ 1617.902048][T30048] netlink: 'syz.3.8609': attribute type 10 has an invalid length.
[ 1618.025169][T30052] netlink: 'syz.2.8611': attribute type 10 has an invalid length.
[ 1618.082067][T30052] netlink: 'syz.2.8611': attribute type 10 has an invalid length.
[ 1618.162470][T30055] netlink: 'syz.2.8611': attribute type 10 has an invalid length.
[ 1618.207447][T30064] netlink: 'syz.1.8610': attribute type 10 has an invalid length.
[ 1618.236721][T30064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8610'.
[ 1618.278896][T30064] bridge0: port 5(veth0_vlan) entered blocking state
[ 1618.298906][T30064] bridge0: port 5(veth0_vlan) entered disabled state
[ 1618.390828][T30064] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1621.544213][T30089] netlink: 'syz.3.8617': attribute type 10 has an invalid length.
[ 1621.582541][T30089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8617'.
[ 1621.613652][T30089] device veth0_vlan left promiscuous mode
[ 1621.619850][T30089] device veth0_vlan entered promiscuous mode
[ 1621.661685][T30089] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[ 1621.689809][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1621.700260][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1621.709044][T28077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1621.719369][T30093] device veth0_vlan left promiscuous mode
[ 1621.726986][T30093] device veth0_vlan entered promiscuous mode
[ 1621.741145][T30093] team0: Device veth0_vlan failed to register rx_handler
[ 1626.615573][T30102] validate_nla: 3 callbacks suppressed
[ 1626.615588][T30102] netlink: 'syz.1.8622': attribute type 10 has an invalid length.
[ 1626.631848][T30108] netlink: 'syz.0.8624': attribute type 10 has an invalid length.
[ 1626.655246][T30108] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1626.677406][T30132] netlink: 'syz.2.8633': attribute type 10 has an invalid length.
[ 1626.702613][T30134] netlink: 'syz.3.8634': attribute type 7 has an invalid length.
[ 1626.710714][T30134] netlink: 'syz.3.8634': attribute type 6 has an invalid length.
[ 1626.737804][T30140] netlink: 'syz.4.8636': attribute type 2 has an invalid length.
[ 1626.747462][T30140] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8636'.
[ 1626.918509][T30146] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8638'.
[ 1627.131086][T30159] FAULT_INJECTION: forcing a failure.
[ 1627.131086][T30159] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1627.212157][T30159] CPU: 1 PID: 30159 Comm: syz.2.8642 Not tainted syzkaller #0
[ 1627.219691][T30159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1627.229774][T30159] Call Trace:
[ 1627.233078][T30159]  <TASK>
[ 1627.236039][T30159]  dump_stack_lvl+0x188/0x24e
[ 1627.240770][T30159]  ? show_regs_print_info+0x12/0x12
[ 1627.246004][T30159]  ? load_image+0x410/0x410
[ 1627.250547][T30159]  ? __lock_acquire+0x7ea0/0x7ea0
[ 1627.255624][T30159]  should_fail_ex+0x390/0x4c0
[ 1627.260358][T30159]  _copy_from_user+0x2c/0x170
[ 1627.265075][T30159]  kstrtouint_from_user+0xda/0x170
[ 1627.270228][T30159]  ? kstrtol_from_user+0x190/0x190
[ 1627.275427][T30159]  proc_fail_nth_write+0x8b/0x200
[ 1627.280483][T30159]  ? proc_fail_nth_read+0x220/0x220
[ 1627.285726][T30159]  ? common_file_perm+0x171/0x1c0
[ 1627.290797][T30159]  ? proc_fail_nth_read+0x220/0x220
[ 1627.296117][T30159]  vfs_write+0x2dc/0x9a0
[ 1627.300407][T30159]  ? file_end_write+0x250/0x250
[ 1627.305295][T30159]  ? __fget_files+0x28/0x460
[ 1627.310011][T30159]  ? __fget_files+0x3fc/0x460
[ 1627.314739][T30159]  ? __fdget_pos+0x2ae/0x360
[ 1627.319352][T30159]  ? ksys_write+0x70/0x260
[ 1627.323793][T30159]  ksys_write+0x14d/0x260
[ 1627.328132][T30159]  ? __ia32_sys_read+0x80/0x80
[ 1627.332907][T30159]  ? lockdep_hardirqs_on+0x94/0x140
[ 1627.338131][T30159]  do_syscall_64+0x4c/0xa0
[ 1627.342545][T30159]  ? clear_bhb_loop+0x60/0xb0
[ 1627.347222][T30159]  ? clear_bhb_loop+0x60/0xb0
[ 1627.351908][T30159]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1627.357809][T30159] RIP: 0033:0x7f4d23d5fd8e
[ 1627.362223][T30159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1627.381834][T30159] RSP: 002b:00007f4d24ce4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1627.390277][T30159] RAX: ffffffffffffffda RBX: 00007f4d24ce56c0 RCX: 00007f4d23d5fd8e
[ 1627.398248][T30159] RDX: 0000000000000001 RSI: 00007f4d24ce50a0 RDI: 0000000000000008
[ 1627.406219][T30159] RBP: 00007f4d24ce5090 R08: 0000000000000000 R09: 0000000000000000
[ 1627.414193][T30159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1627.422175][T30159] R13: 00007f4d24026038 R14: 00007f4d24025fa0 R15: 00007ffc7b3093d8
[ 1627.430181][T30159]  </TASK>
[ 1629.903708][T30148] ------------[ cut here ]------------
[ 1629.909341][T30148] WARNING: CPU: 1 PID: 30148 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480
[ 1629.919240][T30148] Modules linked in:
[ 1629.923204][T30148] CPU: 1 PID: 30148 Comm: syz.4.8639 Not tainted syzkaller #0
[ 1629.930710][T30148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1629.940851][T30148] RIP: 0010:perf_pending_task+0x353/0x480
[ 1629.946663][T30148] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1629.966849][T30148] RSP: 0018:ffffc900041c78e8 EFLAGS: 00010293
[ 1629.973000][T30148] RAX: ffffffff81a7eb03 RBX: ffff888035b78a58 RCX: ffff888024e8bc00
[ 1629.980983][T30148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1629.989014][T30148] RBP: ffff888035b78820 R08: ffff8880b8d357cb R09: 1ffff110171a6af9
[ 1629.997043][T30148] R10: dffffc0000000000 R11: ffffed10171a6afa R12: ffff888024e8bc00
[ 1630.005073][T30148] R13: ffff888147365d60 R14: 0000000000000000 R15: 1ffff11006b6f104
[ 1630.013117][T30148] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[ 1630.022071][T30148] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1630.028713][T30148] CR2: 0000001b2eb22ff8 CR3: 0000000021bb3000 CR4: 00000000003506e0
[ 1630.036739][T30148] DR0: 0000200000000300 DR1: 00002000000003c0 DR2: 00002000000003c0
[ 1630.044775][T30148] DR3: 00002000000003c0 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1630.052813][T30148] Call Trace:
[ 1630.056110][T30148]  <TASK>
[ 1630.059058][T30148]  task_work_run+0x1d0/0x260
[ 1630.063743][T30148]  ? task_work_cancel+0x220/0x220
[ 1630.068808][T30148]  ? do_raw_spin_unlock+0x11d/0x230
[ 1630.074088][T30148]  do_exit+0x9d5/0x2570
[ 1630.078366][T30148]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1630.084425][T30148]  ? put_task_struct+0x80/0x80
[ 1630.089215][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.095443][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.101642][T30148]  ? lockdep_hardirqs_on+0x94/0x140
[ 1630.106906][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.113128][T30148]  do_group_exit+0x229/0x2e0
[ 1630.117825][T30148]  ? _raw_spin_unlock_irq+0x25/0x40
[ 1630.123073][T30148]  get_signal+0x1259/0x1340
[ 1630.127615][T30148]  arch_do_signal_or_restart+0xc4/0x1310
[ 1630.133393][T30148]  ? do_futex+0x310/0x320
[ 1630.137834][T30148]  ? get_sigframe_size+0x10/0x10
[ 1630.142871][T30148]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1630.148351][T30148]  exit_to_user_mode_loop+0x70/0x110
[ 1630.153688][T30148]  exit_to_user_mode_prepare+0xee/0x180
[ 1630.159255][T30148]  syscall_exit_to_user_mode+0x16/0x40
[ 1630.164762][T30148]  do_syscall_64+0x58/0xa0
[ 1630.169217][T30148]  ? clear_bhb_loop+0x60/0xb0
[ 1630.173949][T30148]  ? clear_bhb_loop+0x60/0xb0
[ 1630.178642][T30148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1630.184590][T30148] RIP: 0033:0x7f25d4d9f559
[ 1630.189011][T30148] Code: Unable to access opcode bytes at 0x7f25d4d9f52f.
[ 1630.196091][T30148] RSP: 002b:00007f25d5c3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1630.204548][T30148] RAX: fffffffffffffe00 RBX: 00007f25d5025fa8 RCX: 00007f25d4d9f559
[ 1630.212662][T30148] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25d5025fa8
[ 1630.220647][T30148] RBP: 00007f25d5025fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1630.228691][T30148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1630.236733][T30148] R13: 00007f25d5026038 R14: 00007ffe798c9860 R15: 00007ffe798c9948
[ 1630.244804][T30148]  </TASK>
[ 1630.247843][T30148] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1630.255107][T30148] CPU: 1 PID: 30148 Comm: syz.4.8639 Not tainted syzkaller #0
[ 1630.262569][T30148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1630.272611][T30148] Call Trace:
[ 1630.275880][T30148]  <TASK>
[ 1630.278800][T30148]  dump_stack_lvl+0x188/0x24e
[ 1630.283465][T30148]  ? memcpy+0x3c/0x60
[ 1630.287434][T30148]  ? show_regs_print_info+0x12/0x12
[ 1630.292617][T30148]  ? load_image+0x410/0x410
[ 1630.297117][T30148]  panic+0x2d3/0x710
[ 1630.301001][T30148]  ? bpf_jit_dump+0xd0/0xd0
[ 1630.305499][T30148]  __warn+0x2f8/0x4f0
[ 1630.309465][T30148]  ? perf_pending_task+0x353/0x480
[ 1630.314563][T30148]  ? perf_pending_task+0x353/0x480
[ 1630.319699][T30148]  report_bug+0x2ba/0x4f0
[ 1630.324052][T30148]  ? perf_pending_task+0x353/0x480
[ 1630.329429][T30148]  handle_bug+0x3a/0x70
[ 1630.333568][T30148]  exc_invalid_op+0x16/0x40
[ 1630.338055][T30148]  asm_exc_invalid_op+0x16/0x20
[ 1630.342885][T30148] RIP: 0010:perf_pending_task+0x353/0x480
[ 1630.348593][T30148] Code: e8 02 5e da ff 84 db 75 10 e8 99 5b da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 89 5b da ff e8 7c 98 58 ff eb e9 e8 7d 5b da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[ 1630.368190][T30148] RSP: 0018:ffffc900041c78e8 EFLAGS: 00010293
[ 1630.374247][T30148] RAX: ffffffff81a7eb03 RBX: ffff888035b78a58 RCX: ffff888024e8bc00
[ 1630.382233][T30148] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1630.390208][T30148] RBP: ffff888035b78820 R08: ffff8880b8d357cb R09: 1ffff110171a6af9
[ 1630.398162][T30148] R10: dffffc0000000000 R11: ffffed10171a6afa R12: ffff888024e8bc00
[ 1630.406120][T30148] R13: ffff888147365d60 R14: 0000000000000000 R15: 1ffff11006b6f104
[ 1630.414081][T30148]  ? perf_pending_task+0x353/0x480
[ 1630.419199][T30148]  ? perf_pending_task+0x353/0x480
[ 1630.424300][T30148]  task_work_run+0x1d0/0x260
[ 1630.428881][T30148]  ? task_work_cancel+0x220/0x220
[ 1630.433892][T30148]  ? do_raw_spin_unlock+0x11d/0x230
[ 1630.439075][T30148]  do_exit+0x9d5/0x2570
[ 1630.443224][T30148]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1630.449192][T30148]  ? put_task_struct+0x80/0x80
[ 1630.453955][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.460107][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.466246][T30148]  ? lockdep_hardirqs_on+0x94/0x140
[ 1630.471435][T30148]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1630.477582][T30148]  do_group_exit+0x229/0x2e0
[ 1630.482166][T30148]  ? _raw_spin_unlock_irq+0x25/0x40
[ 1630.487360][T30148]  get_signal+0x1259/0x1340
[ 1630.491862][T30148]  arch_do_signal_or_restart+0xc4/0x1310
[ 1630.497486][T30148]  ? do_futex+0x310/0x320
[ 1630.501808][T30148]  ? get_sigframe_size+0x10/0x10
[ 1630.506754][T30148]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1630.512209][T30148]  exit_to_user_mode_loop+0x70/0x110
[ 1630.517481][T30148]  exit_to_user_mode_prepare+0xee/0x180
[ 1630.523012][T30148]  syscall_exit_to_user_mode+0x16/0x40
[ 1630.528455][T30148]  do_syscall_64+0x58/0xa0
[ 1630.532851][T30148]  ? clear_bhb_loop+0x60/0xb0
[ 1630.537515][T30148]  ? clear_bhb_loop+0x60/0xb0
[ 1630.542173][T30148]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1630.548077][T30148] RIP: 0033:0x7f25d4d9f559
[ 1630.552484][T30148] Code: Unable to access opcode bytes at 0x7f25d4d9f52f.
[ 1630.559500][T30148] RSP: 002b:00007f25d5c3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1630.567910][T30148] RAX: fffffffffffffe00 RBX: 00007f25d5025fa8 RCX: 00007f25d4d9f559
[ 1630.575877][T30148] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f25d5025fa8
[ 1630.583851][T30148] RBP: 00007f25d5025fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1630.591825][T30148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1630.599786][T30148] R13: 00007f25d5026038 R14: 00007ffe798c9860 R15: 00007ffe798c9948
[ 1630.607772][T30148]  </TASK>
[ 1630.611046][T30148] Kernel Offset: disabled
[ 1630.615369][T30148] Rebooting in 86400 seconds..