last executing test programs:

4.119722512s ago: executing program 1 (id=3160):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1100110000000000000000000000000000000500", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100ff}, 0x94)
syz_clone(0xe8344400, 0x0, 0x1d, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000570000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xf, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0)=r1, 0x8)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/12, @ANYRES32], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000600)=""/149, 0x1e00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

4.119150522s ago: executing program 0 (id=3161):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/213, 0xd5}, {&(0x7f0000000200)='sb#', 0x3}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0))
r3 = socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

3.560839582s ago: executing program 0 (id=3165):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x6, 0x3, 0x0, 0xfffffffc}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000002b411000000002c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.493484825s ago: executing program 3 (id=3166):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.425281069s ago: executing program 1 (id=3167):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.386469051s ago: executing program 2 (id=3168):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000002b411000000002c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.45895454s ago: executing program 3 (id=3169):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{}], 0x1}, 0x0)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8}, 0x11f802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="36e9b28de000"})
socketpair(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080))
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00)

2.44796349s ago: executing program 1 (id=3170):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000340)=""/224, 0x2a, 0xe0}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x4, 0x4, 0xff, 0x200}, 0x50)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"})

2.418972012s ago: executing program 0 (id=3171):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x61, 0x61, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r4], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)

2.406835612s ago: executing program 2 (id=3172):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.284993029s ago: executing program 3 (id=3173):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x20000002)
close(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8}, 0x11f802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54b2359a, 0x52d0}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0xff4c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x10, 0x3, 0x2d49, &(0x7f00000000c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

2.065041851s ago: executing program 2 (id=3174):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/213, 0xd5}, {&(0x7f0000000200)='sb#', 0x3}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0))
r3 = socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1.999180794s ago: executing program 1 (id=3175):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3}, 0x94)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000000010000000100000600000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001880)=ANY=[@ANYBLOB="2f000000ddffffffffffffffffe0bc34df7f14a6f0f6af388a8a2dee962a123a654752ff07a1a5f9999b04a35ffc64926a69a5cd49200593bb1631aa1589230c96e04cef7ed28fd79b1396", @ANYRES32], 0x20)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x4, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xf, 0x4, 0x2, 0xdc, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xd, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001200)=@ethernet={0x6, @local}, 0x80, &(0x7f00000015c0), 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="b800000000000000880000000300000082bced2ef1914e60643bf106faca0001ac102a710bccc90b1279321ca4c2b8fb60a6d4ba1929c7d1f4171cf44d3f7d779fd71b939d707daba3e960c5f648b662ef9e92bf02680cad3626bd4e182030cc2cc75f12ca21e4129f2da1200de516e94ee948bbf910180ea851b13a7644097701a02562fcfd0b6ccaad551b6a4668c558e8689be4503ea5d9bd2dae3c14bbd43ba50c74a476473714f589ebecb18351c502fc6f0000000076d884b49ceb"], 0xb8}, 0x20040010)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c685c9ebf635e316a12b35a429160d1c7688dbc3edcb1af64032177e41def01696e7100bbe102ae1b68a44b50c484b2316", 0xf2d}, {&(0x7f0000002840)="d0e9f04c4439acf77fc95f5dc3b5984211aff166ee1820", 0x17}], 0x3}, 0x9cdc2384016f48f8)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r5, &(0x7f0000000040)="231b14d9e86575bfb46c0bef6bccb02dc229884777fb41089b8a6075fb3c50485ae2b5f10088ef7efd6bfd3bba6f159fac4429ccef1ea585293871da77b763096f6f72b2b9e76003ff374b8f19276c59254c76fec0af37ba7bd85370903be74d04fff886a3", &(0x7f00000006c0)=""/4096, 0x4}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getpid()

1.912494269s ago: executing program 0 (id=3176):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

1.798234614s ago: executing program 3 (id=3177):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.650259203s ago: executing program 1 (id=3178):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.649220143s ago: executing program 2 (id=3179):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800200000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.524734549s ago: executing program 2 (id=3180):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x20, 0x0, 0xfffff034}, {0x6, 0x3, 0x0, 0xfffffffc}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000002b411000000002c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

931.91641ms ago: executing program 0 (id=3181):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, 0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000002b411000000002c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

748.86894ms ago: executing program 3 (id=3182):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000004200000000000000000000000bb2040000000900000001"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

732.621961ms ago: executing program 1 (id=3183):
r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0xecc}, 0x400, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@o_path={&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x9, 0x7, 0x1, 0x79, 0x0, 0x8, 0x10, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0), 0xe}, 0x10000, 0x8, 0x95, 0x0, 0x1, 0xffffff52, 0x6, 0x0, 0x7, 0x0, 0x9706}, r2, 0xa, r0, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
r4 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000180))
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x308)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0)
r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@o_path={&(0x7f0000001000)='./file0\x00', 0x0, 0x18, r6}, 0x18)

132.757083ms ago: executing program 2 (id=3184):
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x2, 0x80, 0x3, 0x3, 0x6, 0x9, 0x0, 0x652, 0x90014, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x6}, 0x280, 0x101, 0x4, 0x6, 0x8001, 0x3, 0x1000, 0x0, 0xa, 0x0, 0x80})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x1a, &(0x7f0000000940), 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$sock(r1, &(0x7f0000000c80)={&(0x7f0000000580)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)="359ace", 0x3}, {&(0x7f0000000780)="61be56c1083a952a6110e9b0ae65ef665320f95a4f418d7e9938e0f1e5c1cf35261f412ccf619725c032a23e708a1c2592f558f9219c0812cecf9207afc9160bf7f9d3cceda2f68c59425cb8254763574803677a3e232db4d6c8d6f0b6bcb173b59187234b8a0a90e45d06d8c321e5fa26d25b9958a811c5e945efacbed6c94ea6f340926a22df8ee3513b2070eebdd255904edd3f1dabc056f2ef06191e95cba31a23d3e8c47b544266b09e022bf35f7b551fda36585ec7145fb2a123604838266dead7980b3ad6abdf3faa8a0611fab4247a6c07407f83776198cb427c799b4f", 0xe1}, {&(0x7f00000009c0)="47c2f26914253ffe559582d7e2bff69e5281f06195413254c7b7e302c3acc415988753b69e3bbd42edf764be240b5035d26e7cbe2b75e533c0eab5ad5ce014346d6fe5344b6c7df03eb7426b2ad4e79d906a54853d3dcad4bb1067320c9fd40ca4870388fe9f0238c8199a83f6f6ed5852feb034fd9507854549f3ffd8bcf61827bd6235315bf06f0a81572d114f99bc2d8ddab672c2f47b15966b2ebb9a6b9a8a8194b2da8238f1f1559c757dc489f2c310ecb469d89e759be2ec", 0xbb}, {&(0x7f0000000a80)="53b25f3d4b187db1fc25f8081d7f907f8960ec28bccc3d21de9466698a933a6c7c061a973062e8ee64af8e987e681fad61c4f7309be09e29393abb829a7910bd560b9a96e6b4b8f295c9c8b3db705b59f4681581550b0341ed419f8106920a630f2f183a87f30bb013c60c977b63d0de79eca86e0e00245fa92f958894bd12e8d32d70450ccf2576c1ae6716e0d37f1192837772c9966047f925e2604bc1b40d376c728d26319a10807752b3ac51fb6a5b70d7f4a6978b3439d142c0fafb414cb8f693e7291145e745", 0xc9}, {&(0x7f0000000b80)="af4620d116465ab43bfc6d124dd630dab67d4c527c681ec5b29be81501640532bbfe2313938c36929463816c8ae7ba0860936e50", 0x34}], 0x5, &(0x7f0000000c40)=[@txtime={{0x18, 0x1, 0x3d, 0xb20b}}], 0x18}, 0x4000000)
r4 = socket$kcm(0x1e, 0x4, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

11.065329ms ago: executing program 3 (id=3185):
r0 = socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0xa}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x61, 0x61, 0x5f]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28)
r1 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x30001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0)

0s ago: executing program 0 (id=3186):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)={0x1, 0x7, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @broadcast]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r4}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80)

kernel console output (not intermixed with test programs):

00246 R12: 0000000000000002
[  378.263845][T11860] R13: 00007fd2c5e16038 R14: 00007fd2c5e15fa0 R15: 00007ffea3e56b38
[  378.263869][T11860]  </TASK>
[  378.885116][T11869] netlink: 'syz.3.2286': attribute type 4 has an invalid length.
[  378.907510][T11869] __nla_validate_parse: 4 callbacks suppressed
[  378.907545][T11869] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2286'.
[  378.923720][T11869] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  379.192970][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  379.204328][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  380.657612][T11901] netlink: 'syz.0.2299': attribute type 4 has an invalid length.
[  380.666793][T11901] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2299'.
[  380.680054][T11901] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  381.084210][T11910] FAULT_INJECTION: forcing a failure.
[  381.084210][T11910] name failslab, interval 1, probability 0, space 0, times 0
[  381.097909][T11910] CPU: 0 PID: 11910 Comm: syz.0.2303 Not tainted syzkaller #0
[  381.105432][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  381.115536][T11910] Call Trace:
[  381.118943][T11910]  <TASK>
[  381.121912][T11910]  dump_stack_lvl+0x18c/0x250
[  381.126742][T11910]  ? show_regs_print_info+0x20/0x20
[  381.132005][T11910]  ? load_image+0x420/0x420
[  381.136610][T11910]  should_fail_ex+0x39d/0x4d0
[  381.141359][T11910]  should_failslab+0x9/0x20
[  381.145922][T11910]  slab_pre_alloc_hook+0x59/0x310
[  381.151001][T11910]  ? nf_ct_ext_add+0x1ab/0x440
[  381.155817][T11910]  ? nf_ct_ext_add+0x1ab/0x440
[  381.160626][T11910]  __kmem_cache_alloc_node+0x53/0x250
[  381.166059][T11910]  ? nf_ct_ext_add+0x1ab/0x440
[  381.170873][T11910]  __kmalloc_node_track_caller+0xa2/0x230
[  381.176660][T11910]  krealloc+0x86/0x120
[  381.180758][T11910]  nf_ct_ext_add+0x1ab/0x440
[  381.185433][T11910]  init_conntrack+0x69c/0xf10
[  381.190141][T11910]  ? early_drop+0x7f0/0x7f0
[  381.194664][T11910]  ? nf_conntrack_find_get+0x650/0x650
[  381.200158][T11910]  ? __local_bh_enable_ip+0x13a/0x1c0
[  381.205543][T11910]  ? __siphash_unaligned+0x22e/0x3a0
[  381.210857][T11910]  nf_conntrack_in+0xc06/0x15c0
[  381.215773][T11910]  ? nf_ct_pernet+0x270/0x270
[  381.220482][T11910]  ? ipt_do_table+0x2c1/0x15e0
[  381.225469][T11910]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  381.230955][T11910]  ? ipv4_conntrack_local+0x123/0x200
[  381.236366][T11910]  ? ipv4_conntrack_in+0x20/0x20
[  381.241351][T11910]  nf_hook_slow+0xbd/0x200
[  381.245823][T11910]  ? nf_hook+0x390/0x390
[  381.250079][T11910]  nf_hook+0x228/0x390
[  381.254168][T11910]  ? nf_hook+0xa2/0x390
[  381.258506][T11910]  ? __ip_local_out+0x5f0/0x5f0
[  381.263371][T11910]  ? nf_hook+0x390/0x390
[  381.267642][T11910]  ? ip_fast_csum+0x1ee/0x2b0
[  381.272425][T11910]  __ip_local_out+0x4db/0x5f0
[  381.277103][T11910]  ? nf_hook+0x390/0x390
[  381.281515][T11910]  ip_send_skb+0x4c/0x1d0
[  381.285956][T11910]  raw_sendmsg+0x163e/0x1c00
[  381.290773][T11910]  ? compat_raw_ioctl+0x70/0x70
[  381.295692][T11910]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  381.302124][T11910]  ? sock_rps_record_flow+0x19/0x3f0
[  381.307458][T11910]  ? inet_sendmsg+0x7c/0x2f0
[  381.312060][T11910]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  381.317363][T11910]  ? security_socket_sendmsg+0x80/0xa0
[  381.322849][T11910]  ? inet_send_prepare+0x260/0x260
[  381.327979][T11910]  ____sys_sendmsg+0x5ba/0x960
[  381.332768][T11910]  ? __lock_acquire+0x7d40/0x7d40
[  381.337820][T11910]  ? __sys_sendmsg_sock+0x30/0x30
[  381.342850][T11910]  ? __import_iovec+0x5f2/0x850
[  381.347730][T11910]  ? import_iovec+0x73/0xa0
[  381.352282][T11910]  ___sys_sendmsg+0x2a6/0x360
[  381.356984][T11910]  ? __sys_sendmsg+0x2a0/0x2a0
[  381.361804][T11910]  ? __lock_acquire+0x7d40/0x7d40
[  381.366985][T11910]  __se_sys_sendmsg+0x1c2/0x2b0
[  381.371854][T11910]  ? __x64_sys_sendmsg+0x80/0x80
[  381.376836][T11910]  ? lockdep_hardirqs_on+0x98/0x150
[  381.382056][T11910]  do_syscall_64+0x55/0xa0
[  381.386484][T11910]  ? clear_bhb_loop+0x40/0x90
[  381.391177][T11910]  ? clear_bhb_loop+0x40/0x90
[  381.395878][T11910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  381.401875][T11910] RIP: 0033:0x7f30b3b9c819
[  381.406307][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  381.425929][T11910] RSP: 002b:00007f30b4aec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  381.434359][T11910] RAX: ffffffffffffffda RBX: 00007f30b3e15fa0 RCX: 00007f30b3b9c819
[  381.442384][T11910] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000005
[  381.450367][T11910] RBP: 00007f30b4aec090 R08: 0000000000000000 R09: 0000000000000000
[  381.458351][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  381.466330][T11910] R13: 00007f30b3e16038 R14: 00007f30b3e15fa0 R15: 00007ffe4880f5e8
[  381.474347][T11910]  </TASK>
[  382.599104][T11932] netlink: 'syz.0.2312': attribute type 4 has an invalid length.
[  382.607607][T11932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2312'.
[  382.617272][T11932] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  384.750478][T11964] netlink: 'syz.1.2325': attribute type 4 has an invalid length.
[  384.763537][T11964] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2325'.
[  384.787607][T11964] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  384.816854][T11967] syz.2.2327[11967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  384.817265][T11967] syz.2.2327[11967] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  386.578575][T11995] netlink: 'syz.1.2339': attribute type 4 has an invalid length.
[  386.586614][T11995] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2339'.
[  386.628503][T11995] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  386.690035][T12002] netlink: 'syz.0.2341': attribute type 153 has an invalid length.
[  386.698069][T12002] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2341'.
[  386.840704][T12009] netlink: 'syz.3.2344': attribute type 21 has an invalid length.
[  386.849088][T12009] IPv6: NLM_F_CREATE should be specified when creating new route
[  388.256969][T12035] netlink: 'syz.1.2352': attribute type 4 has an invalid length.
[  388.268496][T12035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2352'.
[  388.319349][T12035] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  390.672457][ T5767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  390.683292][ T5767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  390.700797][ T5767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  390.736656][ T5767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  390.752907][ T5767] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  390.761064][ T5767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  391.023222][T12069] chnl_net:caif_netlink_parms(): no params data found
[  391.152982][T12069] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.160603][T12069] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.168548][T12069] bridge_slave_0: entered allmulticast mode
[  391.175978][T12069] bridge_slave_0: entered promiscuous mode
[  391.185534][T12069] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.193448][T12069] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.202080][T12069] bridge_slave_1: entered allmulticast mode
[  391.210308][T12069] bridge_slave_1: entered promiscuous mode
[  391.255177][T12069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.272617][T12069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.416015][T12069] team0: Port device team_slave_0 added
[  391.442198][T12069] team0: Port device team_slave_1 added
[  391.482317][T12069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  391.489749][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.517672][T12069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  391.532756][T12069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  391.540222][T12069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  391.571404][T12069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.691379][T12069] hsr_slave_0: entered promiscuous mode
[  391.844678][T12069] hsr_slave_1: entered promiscuous mode
[  392.614245][T12069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.797582][ T5772] Bluetooth: hci4: command tx timeout
[  393.426523][T12069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.521256][T12069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.584252][T12069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.602353][T12102] netlink: 'syz.1.2371': attribute type 21 has an invalid length.
[  393.613683][T12102] IPv6: NLM_F_CREATE should be specified when creating new route
[  393.886418][T12069] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  393.912151][T12069] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  393.955755][T12069] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  394.001179][T12069] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  394.165478][T12069] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.193258][T12069] 8021q: adding VLAN 0 to HW filter on device team0
[  394.212154][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  394.219492][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  394.238818][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.246044][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.611771][T12069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  394.703562][T12069] veth0_vlan: entered promiscuous mode
[  394.726794][T12069] veth1_vlan: entered promiscuous mode
[  394.804020][T12069] veth0_macvtap: entered promiscuous mode
[  394.817300][T12069] veth1_macvtap: entered promiscuous mode
[  394.865150][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.877247][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.883485][ T5772] Bluetooth: hci4: command tx timeout
[  394.891351][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  394.903711][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  394.920363][T12069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  394.988696][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  395.012202][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.042767][T12069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  395.060565][T12069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  395.076433][T12069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.093160][T12069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.103166][T12069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.120471][T12069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.152574][T12069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.421993][T12126] netlink: 'syz.1.2384': attribute type 4 has an invalid length.
[  395.445805][T12126] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2384'.
[  395.458267][T12126] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  395.524785][ T4805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.534136][ T4805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.596617][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.612852][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.733035][T12135] netlink: 'syz.1.2387': attribute type 21 has an invalid length.
[  396.476634][ T5767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.486468][ T5767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  396.495952][ T5767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  396.507554][ T5767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  396.520542][ T5767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  396.539693][ T5767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  396.947499][ T5772] Bluetooth: hci4: command tx timeout
[  397.068357][T12162] syzkaller1: entered promiscuous mode
[  397.074014][T12162] syzkaller1: entered allmulticast mode
[  397.452992][T12151] chnl_net:caif_netlink_parms(): no params data found
[  397.539866][T12164] netlink: 'syz.2.2394': attribute type 4 has an invalid length.
[  397.548886][T12164] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2394'.
[  397.564824][T12164] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  397.816533][ T7492] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.905285][T12151] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.931502][T12151] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.939861][T12151] bridge_slave_0: entered allmulticast mode
[  397.954328][T12151] bridge_slave_0: entered promiscuous mode
[  397.973272][T12151] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.981109][T12151] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.993310][T12151] bridge_slave_1: entered allmulticast mode
[  398.000913][T12151] bridge_slave_1: entered promiscuous mode
[  398.512664][ T7492] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.602398][T12151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.621989][T12151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.638542][ T5772] Bluetooth: hci2: command tx timeout
[  398.669259][ T7492] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.722217][T12151] team0: Port device team_slave_0 added
[  398.735556][T12151] team0: Port device team_slave_1 added
[  398.773722][ T7492] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.835605][T12151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.850703][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.877989][T12151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.895876][T12151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.907121][T12151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.935536][T12151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.027681][ T5772] Bluetooth: hci4: command tx timeout
[  399.072118][T12151] hsr_slave_0: entered promiscuous mode
[  399.099886][T12151] hsr_slave_1: entered promiscuous mode
[  399.132229][T12151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.155309][T12151] Cannot create hsr debugfs directory
[  400.750167][ T5772] Bluetooth: hci2: command tx timeout
[  402.786048][T12241] netlink: 'syz.0.2414': attribute type 4 has an invalid length.
[  402.794514][ T5772] Bluetooth: hci2: command tx timeout
[  402.801316][T12241] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2414'.
[  402.812027][T12241] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  402.846225][T12245] netlink: 'syz.2.2416': attribute type 21 has an invalid length.
[  402.897891][T12245] IPv6: NLM_F_CREATE should be specified when creating new route
[  403.985546][T12280] netlink: 'syz.0.2419': attribute type 21 has an invalid length.
[  404.007139][T12280] IPv6: NLM_F_CREATE should be specified when creating new route
[  404.134271][T12151] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  404.146803][T12151] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  404.870861][ T5772] Bluetooth: hci2: command tx timeout
[  405.083064][T12151] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  405.145354][T12289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.170460][T12294] netlink: 'syz.0.2425': attribute type 2 has an invalid length.
[  405.185566][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'.
[  405.218041][T12151] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  405.345492][T12317] netlink: 'syz.2.2426': attribute type 4 has an invalid length.
[  405.392994][T12317] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2426'.
[  405.424599][T12317] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  405.793387][T12151] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.874176][T12151] 8021q: adding VLAN 0 to HW filter on device team0
[  405.921673][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.928910][ T7487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  405.978028][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.985211][ T7487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.126719][T12336] netlink: 'syz.2.2432': attribute type 21 has an invalid length.
[  406.733139][T12151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.912659][T12151] veth0_vlan: entered promiscuous mode
[  406.972022][T12151] veth1_vlan: entered promiscuous mode
[  407.344959][T12151] veth0_macvtap: entered promiscuous mode
[  407.371454][T12151] veth1_macvtap: entered promiscuous mode
[  407.419834][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.435726][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.446658][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.457702][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.474109][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  407.485774][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.498807][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.534390][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  407.554646][T12365] syz.1.2436: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  407.563934][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.589564][T12365] CPU: 1 PID: 12365 Comm: syz.1.2436 Not tainted syzkaller #0
[  407.591220][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
€Â0
[  407.597072][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  407.614275][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.616844][T12365] Call Trace:
[  407.627094][T12151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.629914][T12365]  <TASK>
[  407.629924][T12365]  dump_stack_lvl+0x18c/0x250
[  407.629955][T12365]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  407.640982][T12151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.643396][T12365]  ? show_regs_print_info+0x20/0x20
[  407.654676][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.664027][T12365]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  407.664061][T12365]  ? dump_stack+0x9/0x20
[  407.664089][T12365]  warn_alloc+0x246/0x340
[  407.664116][T12365]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  407.697409][T12365]  ? zone_watermark_ok_safe+0x230/0x230
[  407.702983][T12365]  ? kasan_set_track+0x63/0x70
[  407.707758][T12365]  ? kasan_set_track+0x4e/0x70
[  407.712514][T12365]  ? __kasan_kmalloc+0x8f/0xa0
[  407.717278][T12365]  ? xsk_init_queue+0xad/0x100
[  407.722040][T12365]  ? xsk_setsockopt+0x4e5/0x760
[  407.726913][T12365]  ? do_sock_setsockopt+0x175/0x1a0
[  407.732105][T12365]  ? __x64_sys_setsockopt+0x182/0x200
[  407.737554][T12365]  __vmalloc_node_range+0x126/0x1330
[  407.742857][T12365]  ? free_vm_area+0x50/0x50
[  407.747369][T12365]  vmalloc_user+0x74/0x80
[  407.751712][T12365]  ? xskq_create+0xbf/0x170
[  407.756214][T12365]  xskq_create+0xbf/0x170
[  407.760550][T12365]  xsk_init_queue+0xad/0x100
[  407.765141][T12365]  xsk_setsockopt+0x4e5/0x760
[  407.769817][T12365]  ? xsk_poll+0x680/0x680
[  407.774140][T12365]  ? aa_sock_opt_perm+0x17/0x100
[  407.779077][T12365]  ? aa_sock_opt_perm+0x1c/0x100
[  407.784013][T12365]  ? aa_sock_opt_perm+0x74/0x100
[  407.788950][T12365]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  407.794591][T12365]  ? security_socket_setsockopt+0x7e/0xa0
[  407.800311][T12365]  ? xsk_poll+0x680/0x680
[  407.804642][T12365]  do_sock_setsockopt+0x175/0x1a0
[  407.809747][T12365]  ? __fdget+0x180/0x210
[  407.813994][T12365]  __x64_sys_setsockopt+0x182/0x200
[  407.819199][T12365]  do_syscall_64+0x55/0xa0
[  407.823615][T12365]  ? clear_bhb_loop+0x40/0x90
[  407.828298][T12365]  ? clear_bhb_loop+0x40/0x90
[  407.832972][T12365]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  407.838861][T12365] RIP: 0033:0x7faf4659c819
[  407.843399][T12365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.863011][T12365] RSP: 002b:00007faf47470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  407.871434][T12365] RAX: ffffffffffffffda RBX: 00007faf46815fa0 RCX: 00007faf4659c819
[  407.879402][T12365] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  407.887368][T12365] RBP: 00007faf46632c91 R08: 0000000000000004 R09: 0000000000000000
[  407.895335][T12365] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  407.903301][T12365] R13: 00007faf46816038 R14: 00007faf46815fa0 R15: 00007fffd85bdd98
[  407.911366][T12365]  </TASK>
[  407.930628][ T7492] hsr_slave_0: left promiscuous mode
[  407.937222][ T7492] hsr_slave_1: left promiscuous mode
[  407.947900][ T7492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.955448][ T7492] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.965979][T12365] Mem-Info:
[  407.970332][T12365] active_anon:5862 inactive_anon:0 isolated_anon:0
[  407.970332][T12365]  active_file:11186 inactive_file:40067 isolated_file:0
[  407.970332][T12365]  unevictable:768 dirty:103 writeback:0
[  407.970332][T12365]  slab_reclaimable:10377 slab_unreclaimable:94469
[  407.970332][T12365]  mapped:24280 shmem:1361 pagetables:560
[  407.970332][T12365]  sec_pagetables:0 bounce:0
[  407.970332][T12365]  kernel_misc_reclaimable:0
[  407.970332][T12365]  free:1346536 free_pcp:13001 free_cma:0
[  408.023483][ T7492] batman_adv: batadv0: Interface deactivated: 
€Â0
[  408.031885][ T7492] batman_adv: batadv0: Removing interface: 
€Â0
[  408.043276][ T7492] bridge_slave_1: left allmulticast mode
[  408.055822][T12365] Node 0 active_anon:23448kB inactive_anon:0kB active_file:44744kB inactive_file:160068kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97120kB dirty:412kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no
[  408.057726][ T7492] bridge_slave_1: left promiscuous mode
[  408.100762][ T7492] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.108498][T12365] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  408.146263][ T7492] bridge_slave_0: left allmulticast mode
[  408.153141][ T7492] bridge_slave_0: left promiscuous mode
[  408.159777][ T7492] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.171981][T12365] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  408.241352][T12365] lowmem_reserve[]: 0 2521 2522 2522 2522
[  408.251609][T12365] Node 0 DMA32 free:1476940kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23408kB inactive_anon:0kB active_file:44744kB inactive_file:159244kB unevictable:1536kB writepending:408kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:32804kB local_pcp:14144kB free_cma:0kB
[  408.285870][ T7492] veth1_macvtap: left promiscuous mode
[  408.285906][T12365] lowmem_reserve[]: 0 0 0 0 0
[  408.302670][ T7492] veth1_vlan: left promiscuous mode
[  408.307561][T12365] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  408.316224][ T7492] veth0_vlan: left promiscuous mode
[  408.346641][T12365] lowmem_reserve[]: 0 0 0 0 0
[  408.352337][T12365] Node 1 Normal free:3893844kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19744kB local_pcp:10464kB free_cma:0kB
[  408.389316][T12365] lowmem_reserve[]: 0 0 0 0 0
[  408.394623][T12365] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  408.408511][T12365] Node 0 DMA32: 1639*4kB (UME) 686*8kB (UM) 598*16kB (UME) 743*32kB (UME) 468*64kB (UME) 166*128kB (UME) 20*256kB (UME) 6*512kB (U) 0*1024kB 4*2048kB (UME) 333*4096kB (UM) = 1476940kB
[  408.435418][T12365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  408.456337][T12365] Node 1 Normal: 189*4kB (UME) 46*8kB (UME) 37*16kB (UME) 57*32kB (UME) 22*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893844kB
[  408.480749][T12365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.492542][T12365] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  408.502323][T12365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  408.519613][T12365] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  408.535648][T12365] 52616 total pagecache pages
[  408.543817][T12365] 0 pages in swap cache
[  408.554087][T12365] Free swap  = 124996kB
[  408.573591][T12365] Total swap = 124996kB
[  408.582384][T12365] 2097051 pages RAM
[  408.589605][T12365] 0 pages HighMem/MovableOnly
[  408.594352][T12365] 416927 pages reserved
[  408.613962][T12365] 0 pages cma reserved
[  409.191503][ T7492] team0 (unregistering): Port device team_slave_1 removed
[  409.242961][ T7492] team0 (unregistering): Port device C removed
[  409.290767][ T7492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.362693][ T7492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.739255][ T7492] bond0 (unregistering): Released all slaves
[  409.853107][T12151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  409.862305][T12151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  409.871136][T12151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  409.879939][T12151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  409.927433][T12376] netlink: 'syz.2.2439': attribute type 4 has an invalid length.
[  409.935317][T12376] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2439'.
[  409.944699][T12376] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  409.960869][T12386] netlink: 'syz.1.2441': attribute type 21 has an invalid length.
[  410.109493][T12390] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2442'.
[  410.224049][ T7506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.244118][ T7506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.276709][ T7506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.298720][ T7506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  410.329375][T12397] netlink: 'syz.2.2445': attribute type 2 has an invalid length.
[  410.351763][T12397] netlink: 'syz.2.2445': attribute type 8 has an invalid length.
[  410.370894][T12397] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2445'.
[  410.391167][T12397] FAULT_INJECTION: forcing a failure.
[  410.391167][T12397] name failslab, interval 1, probability 0, space 0, times 0
[  410.404219][T12397] CPU: 0 PID: 12397 Comm: syz.2.2445 Not tainted syzkaller #0
[  410.411713][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  410.421794][T12397] Call Trace:
[  410.425074][T12397]  <TASK>
[  410.428024][T12397]  dump_stack_lvl+0x18c/0x250
[  410.432725][T12397]  ? verify_lock_unused+0x140/0x140
[  410.437949][T12397]  ? show_regs_print_info+0x20/0x20
[  410.443155][T12397]  ? load_image+0x420/0x420
[  410.447696][T12397]  should_fail_ex+0x39d/0x4d0
[  410.452422][T12397]  should_failslab+0x9/0x20
[  410.456966][T12397]  slab_pre_alloc_hook+0x59/0x310
[  410.462038][T12397]  ? __hw_addr_add_ex+0x202/0x710
[  410.467095][T12397]  __kmem_cache_alloc_node+0x53/0x250
[  410.472491][T12397]  ? __hw_addr_add_ex+0x202/0x710
[  410.477533][T12397]  kmalloc_trace+0x2a/0xe0
[  410.481956][T12397]  __hw_addr_add_ex+0x202/0x710
[  410.486846][T12397]  dev_mc_add+0xa1/0x120
[  410.491135][T12397]  igmp_group_added+0x1e0/0x910
[  410.496006][T12397]  ? __local_bh_enable_ip+0x13a/0x1c0
[  410.501381][T12397]  ? igmpv3_del_delrec+0x6b0/0x6b0
[  410.506495][T12397]  ? _local_bh_enable+0xa0/0xa0
[  410.511514][T12397]  ? do_raw_spin_unlock+0x121/0x230
[  410.516725][T12397]  ____ip_mc_inc_group+0x87b/0xac0
[  410.521847][T12397]  __ip_mc_join_group+0x431/0x510
[  410.526875][T12397]  ip_mc_autojoin_config+0x177/0x240
[  410.532168][T12397]  ? inet_set_link_af+0x4a0/0x4a0
[  410.537204][T12397]  inet_rtm_newaddr+0xbca/0x1ae0
[  410.542144][T12397]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[  410.547962][T12397]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  410.553080][T12397]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  410.558190][T12397]  ? inet_netconf_fill_devconf+0x8f0/0x8f0
[  410.563994][T12397]  rtnetlink_rcv_msg+0x869/0xfa0
[  410.568940][T12397]  ? lockdep_hardirqs_on+0x98/0x150
[  410.574135][T12397]  ? rtnetlink_bind+0x80/0x80
[  410.578808][T12397]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  410.584784][T12397]  ? lock_chain_count+0x20/0x20
[  410.589630][T12397]  ? __local_bh_enable_ip+0x13a/0x1c0
[  410.594993][T12397]  ? lockdep_hardirqs_on+0x98/0x150
[  410.600214][T12397]  ? __local_bh_enable_ip+0x13a/0x1c0
[  410.605665][T12397]  ? _local_bh_enable+0xa0/0xa0
[  410.610508][T12397]  ? __dev_queue_xmit+0x265/0x3660
[  410.615727][T12397]  ? __dev_queue_xmit+0x265/0x3660
[  410.620885][T12397]  ? __dev_queue_xmit+0x1b2c/0x3660
[  410.626382][T12397]  ? __dev_queue_xmit+0x265/0x3660
[  410.631537][T12397]  ? ref_tracker_free+0x690/0x840
[  410.636572][T12397]  netlink_rcv_skb+0x241/0x4d0
[  410.641357][T12397]  ? rtnetlink_bind+0x80/0x80
[  410.646030][T12397]  ? netlink_ack+0x1180/0x1180
[  410.650814][T12397]  ? __lock_acquire+0x7d40/0x7d40
[  410.655838][T12397]  ? netlink_deliver_tap+0x2e/0x1b0
[  410.661038][T12397]  netlink_unicast+0x751/0x8d0
[  410.665806][T12397]  netlink_sendmsg+0x8d0/0xbf0
[  410.670573][T12397]  ? netlink_getsockopt+0x590/0x590
[  410.675779][T12397]  ? aa_sock_msg_perm+0x94/0x150
[  410.680714][T12397]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  410.686077][T12397]  ? security_socket_sendmsg+0x80/0xa0
[  410.691553][T12397]  ? netlink_getsockopt+0x590/0x590
[  410.696778][T12397]  ____sys_sendmsg+0x5ba/0x960
[  410.701537][T12397]  ? __asan_memset+0x22/0x40
[  410.706122][T12397]  ? __sys_sendmsg_sock+0x30/0x30
[  410.711139][T12397]  ? __import_iovec+0x5f2/0x850
[  410.715987][T12397]  ? import_iovec+0x73/0xa0
[  410.720571][T12397]  ___sys_sendmsg+0x2a6/0x360
[  410.725242][T12397]  ? get_pid_task+0x20/0x1e0
[  410.729837][T12397]  ? __sys_sendmsg+0x2a0/0x2a0
[  410.734610][T12397]  ? __lock_acquire+0x7d40/0x7d40
[  410.739646][T12397]  __se_sys_sendmsg+0x1c2/0x2b0
[  410.744499][T12397]  ? __x64_sys_sendmsg+0x80/0x80
[  410.749440][T12397]  ? lockdep_hardirqs_on+0x98/0x150
[  410.754632][T12397]  do_syscall_64+0x55/0xa0
[  410.759037][T12397]  ? clear_bhb_loop+0x40/0x90
[  410.763708][T12397]  ? clear_bhb_loop+0x40/0x90
[  410.768391][T12397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.774323][T12397] RIP: 0033:0x7f1cee39c819
[  410.778757][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.798373][T12397] RSP: 002b:00007f1cef295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.806798][T12397] RAX: ffffffffffffffda RBX: 00007f1cee615fa0 RCX: 00007f1cee39c819
[  410.814929][T12397] RDX: 0000000024048890 RSI: 0000200000000080 RDI: 0000000000000003
[  410.822909][T12397] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  410.830893][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.838882][T12397] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  410.846905][T12397]  </TASK>
[  410.914268][T12399] netlink: 'syz.1.2444': attribute type 21 has an invalid length.
[  411.697889][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  411.708851][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  411.723739][ T5767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  411.747247][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  411.755639][ T5767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  411.764786][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  412.041903][T12417] chnl_net:caif_netlink_parms(): no params data found
[  412.417102][T12417] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.436528][T12417] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.456437][T12417] bridge_slave_0: entered allmulticast mode
[  412.516269][T12417] bridge_slave_0: entered promiscuous mode
[  412.538219][T12427] netlink: 'syz.3.2451': attribute type 21 has an invalid length.
[  412.553144][T12427] IPv6: NLM_F_CREATE should be specified when creating new route
[  412.669097][T12432] FAULT_INJECTION: forcing a failure.
[  412.669097][T12432] name failslab, interval 1, probability 0, space 0, times 0
[  412.676660][T12417] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.687076][T12432] CPU: 0 PID: 12432 Comm: syz.2.2452 Not tainted syzkaller #0
[  412.693444][T12417] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.696295][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  412.704724][T12417] bridge_slave_1: entered allmulticast mode
[  412.713346][T12432] Call Trace:
[  412.713356][T12432]  <TASK>
[  412.713362][T12432]  dump_stack_lvl+0x18c/0x250
[  412.713394][T12432]  ? show_regs_print_info+0x20/0x20
[  412.713416][T12432]  ? load_image+0x420/0x420
[  412.713448][T12432]  should_fail_ex+0x39d/0x4d0
[  412.713476][T12432]  should_failslab+0x9/0x20
[  412.713499][T12432]  slab_pre_alloc_hook+0x59/0x310
[  412.713522][T12432]  ? find_exception+0x175/0xa30
[  412.713548][T12432]  kmem_cache_alloc+0x5a/0x2d0
[  412.713568][T12432]  ? dst_alloc+0x105/0x170
[  412.713591][T12432]  dst_alloc+0x105/0x170
[  412.729264][T12417] bridge_slave_1: entered promiscuous mode
[  412.730629][T12432]  ip_route_output_key_hash_rcu+0x14f6/0x2370
[  412.730668][T12432]  ? ip_route_output_key_hash+0x13d/0x330
[  412.790298][T12432]  ip_route_output_key_hash+0x1f3/0x330
[  412.795957][T12432]  ? ip_route_input_rcu+0x30f0/0x30f0
[  412.801343][T12432]  ? crng_make_state+0x350/0x700
[  412.806272][T12432]  ? lockdep_hardirqs_on+0x98/0x150
[  412.811471][T12432]  ip_route_output_flow+0x2a/0x150
[  412.817111][T12432]  sctp_v4_get_dst+0x400/0x1230
[  412.821969][T12432]  ? sctp_v4_xmit+0xde0/0xde0
[  412.826636][T12432]  ? _get_random_bytes+0x1e8/0x250
[  412.831820][T12432]  ? _raw_spin_unlock+0x40/0x40
[  412.836685][T12432]  ? dst_release+0x72/0x1a0
[  412.841189][T12432]  sctp_transport_route+0x10b/0x2c0
[  412.846415][T12432]  sctp_assoc_add_peer+0x650/0x1390
[  412.851642][T12432]  sctp_connect_new_asoc+0x323/0x6a0
[  412.856959][T12432]  ? __sctp_connect+0xd80/0xd80
[  412.861822][T12432]  ? __local_bh_enable_ip+0x13a/0x1c0
[  412.867371][T12432]  ? _local_bh_enable+0xa0/0xa0
[  412.872225][T12432]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  412.878049][T12432]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  412.883891][T12432]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  412.889449][T12432]  ? security_sctp_bind_connect+0x89/0xb0
[  412.895176][T12432]  sctp_sendmsg+0x1575/0x28c0
[  412.899867][T12432]  ? sctp_getsockopt+0xb60/0xb60
[  412.904809][T12432]  ? aa_sk_perm+0x83c/0x970
[  412.909314][T12432]  ? aa_af_perm+0x330/0x330
[  412.913815][T12432]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  412.920227][T12432]  ? sock_rps_record_flow+0x19/0x3f0
[  412.925513][T12432]  ? inet_sendmsg+0x7c/0x2f0
[  412.930096][T12432]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  412.935467][T12432]  ? security_socket_sendmsg+0x80/0xa0
[  412.940916][T12432]  ? inet_send_prepare+0x260/0x260
[  412.946027][T12432]  ____sys_sendmsg+0x5ba/0x960
[  412.950825][T12432]  ? __lock_acquire+0x7d40/0x7d40
[  412.955846][T12432]  ? __asan_memset+0x22/0x40
[  412.960435][T12432]  ? __sys_sendmsg_sock+0x30/0x30
[  412.965460][T12432]  ? __import_iovec+0x5f2/0x850
[  412.970314][T12432]  ? import_iovec+0x73/0xa0
[  412.974811][T12432]  ___sys_sendmsg+0x2a6/0x360
[  412.979486][T12432]  ? __sys_sendmsg+0x2a0/0x2a0
[  412.984259][T12432]  ? trace_call_bpf+0xc3/0x6c0
[  412.989040][T12432]  __se_sys_sendmsg+0x1c2/0x2b0
[  412.993898][T12432]  ? __x64_sys_sendmsg+0x80/0x80
[  412.998842][T12432]  ? lockdep_hardirqs_on+0x98/0x150
[  413.004062][T12432]  do_syscall_64+0x55/0xa0
[  413.008632][T12432]  ? clear_bhb_loop+0x40/0x90
[  413.013325][T12432]  ? clear_bhb_loop+0x40/0x90
[  413.018020][T12432]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.023940][T12432] RIP: 0033:0x7f1cee39c819
[  413.028365][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.047973][T12432] RSP: 002b:00007f1cef295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.056387][T12432] RAX: ffffffffffffffda RBX: 00007f1cee615fa0 RCX: 00007f1cee39c819
[  413.064376][T12432] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  413.072440][T12432] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  413.080431][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.088416][T12432] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  413.096412][T12432]  </TASK>
[  413.152405][T12417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.213401][T12417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  413.306968][T12439] FAULT_INJECTION: forcing a failure.
[  413.306968][T12439] name failslab, interval 1, probability 0, space 0, times 0
[  413.320105][T12439] CPU: 0 PID: 12439 Comm: syz.3.2455 Not tainted syzkaller #0
[  413.327594][T12439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  413.337719][T12439] Call Trace:
[  413.341012][T12439]  <TASK>
[  413.343954][T12439]  dump_stack_lvl+0x18c/0x250
[  413.348664][T12439]  ? show_regs_print_info+0x20/0x20
[  413.353890][T12439]  ? load_image+0x420/0x420
[  413.358421][T12439]  ? mark_lock+0x94/0x320
[  413.362776][T12439]  ? mark_lock+0x94/0x320
[  413.367131][T12439]  should_fail_ex+0x39d/0x4d0
[  413.371847][T12439]  should_failslab+0x9/0x20
[  413.376373][T12439]  slab_pre_alloc_hook+0x59/0x310
[  413.381430][T12439]  kmem_cache_alloc_node+0x60/0x320
[  413.386736][T12439]  ? __alloc_skb+0x103/0x2c0
[  413.391346][T12439]  __alloc_skb+0x103/0x2c0
[  413.395866][T12439]  alloc_skb_with_frags+0xca/0x7b0
[  413.400999][T12439]  ? mark_lock+0x94/0x320
[  413.405352][T12439]  ? __lock_acquire+0x1273/0x7d40
[  413.410402][T12439]  sock_alloc_send_pskb+0x883/0x9a0
[  413.415648][T12439]  ? sock_kzfree_s+0x50/0x50
[  413.420263][T12439]  ? verify_lock_unused+0x140/0x140
[  413.425494][T12439]  __ip6_append_data+0x29f3/0x3c50
[  413.430659][T12439]  ? ip6_mtu+0x7d/0x3f0
[  413.434840][T12439]  ? __in6_dev_get+0xd0/0xd0
[  413.439460][T12439]  ? ip6_mtu+0x7d/0x3f0
[  413.443647][T12439]  ? ip6_setup_cork+0xfe0/0xfe0
[  413.448527][T12439]  ip6_append_data+0x1b0/0x350
[  413.453318][T12439]  ? __in6_dev_get+0xd0/0xd0
[  413.457932][T12439]  icmp6_send+0x136a/0x1b40
[  413.462464][T12439]  ? icmp6_send+0x233/0x1b40
[  413.467095][T12439]  ? icmpv6_push_pending_frames+0x400/0x400
[  413.473020][T12439]  ? ip6_neigh_lookup+0x14b/0x480
[  413.478089][T12439]  ? ip6_neigh_lookup+0x14b/0x480
[  413.483137][T12439]  ? rt6_uncached_list_del+0x150/0x150
[  413.488657][T12439]  ip6_link_failure+0x3b/0x4c0
[  413.493468][T12439]  ip_tunnel_xmit+0x1728/0x2410
[  413.498344][T12439]  ? __lock_acquire+0x1273/0x7d40
[  413.503388][T12439]  ? ip_tunnel_xmit+0x120/0x2410
[  413.508359][T12439]  ? validate_xmit_xfrm+0xbc/0x12c0
[  413.513578][T12439]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  413.518645][T12439]  ? gre_build_header+0x25b/0x990
[  413.523793][T12439]  gre_tap_xmit+0x4fe/0x6f0
[  413.528336][T12439]  dev_hard_start_xmit+0x246/0x740
[  413.533486][T12439]  sch_direct_xmit+0x25e/0x4c0
[  413.538271][T12439]  ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[  413.544284][T12439]  __dev_queue_xmit+0x165d/0x3660
[  413.549362][T12439]  ? __dev_queue_xmit+0x265/0x3660
[  413.554489][T12439]  ? lockdep_hardirqs_on+0x98/0x150
[  413.559722][T12439]  ? read_seqbegin+0x1c8/0x270
[  413.564520][T12439]  ? lockdep_hardirqs_on+0x98/0x150
[  413.569767][T12439]  ? neigh_event_send+0x110/0x110
[  413.574812][T12439]  ? netdev_core_pick_tx+0x340/0x340
[  413.580134][T12439]  ? __asan_memcpy+0x40/0x70
[  413.584754][T12439]  ? eth_header+0x11b/0x200
[  413.589307][T12439]  ? llc_sysctl_exit+0x70/0x70
[  413.594109][T12439]  ? neigh_resolve_output+0x618/0x730
[  413.599533][T12439]  ip6_finish_output2+0xe3d/0x1630
[  413.604695][T12439]  ? ip6_finish_output2+0x645/0x1630
[  413.610023][T12439]  ? ip6_mtu+0x7d/0x3f0
[  413.614217][T12439]  ? nf_hook+0x390/0x390
[  413.618483][T12439]  ? ip6_finish_output+0x57b/0x820
[  413.623637][T12439]  rawv6_send_hdrinc+0xd9e/0x1640
[  413.628770][T12439]  ? txopt_get+0x3f0/0x3f0
[  413.633243][T12439]  ? txopt_get+0x344/0x3f0
[  413.637676][T12439]  ? rawv6_push_pending_frames+0x8d0/0x8d0
[  413.643500][T12439]  ? fl6_sock_lookup+0xc0/0xc0
[  413.648292][T12439]  rawv6_sendmsg+0x12cc/0x1770
[  413.653107][T12439]  ? compat_rawv6_ioctl+0x70/0x70
[  413.658167][T12439]  ? aa_sk_perm+0x83c/0x970
[  413.662695][T12439]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  413.669137][T12439]  ? inet_sendmsg+0x7c/0x2f0
[  413.673748][T12439]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  413.679056][T12439]  ? security_socket_sendmsg+0x80/0xa0
[  413.684543][T12439]  ? inet_send_prepare+0x260/0x260
[  413.689691][T12439]  ____sys_sendmsg+0x5ba/0x960
[  413.694475][T12439]  ? __lock_acquire+0x7d40/0x7d40
[  413.699545][T12439]  ? __asan_memset+0x22/0x40
[  413.704163][T12439]  ? __sys_sendmsg_sock+0x30/0x30
[  413.709214][T12439]  ? __import_iovec+0x5f2/0x850
[  413.714114][T12439]  ? import_iovec+0x73/0xa0
[  413.718644][T12439]  ___sys_sendmsg+0x2a6/0x360
[  413.723361][T12439]  ? get_pid_task+0x20/0x1e0
[  413.727994][T12439]  ? __sys_sendmsg+0x2a0/0x2a0
[  413.732797][T12439]  ? __lock_acquire+0x7d40/0x7d40
[  413.737883][T12439]  __se_sys_sendmsg+0x1c2/0x2b0
[  413.742755][T12439]  ? __x64_sys_sendmsg+0x80/0x80
[  413.747813][T12439]  ? lockdep_hardirqs_on+0x98/0x150
[  413.753046][T12439]  do_syscall_64+0x55/0xa0
[  413.757493][T12439]  ? clear_bhb_loop+0x40/0x90
[  413.762181][T12439]  ? clear_bhb_loop+0x40/0x90
[  413.766874][T12439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  413.772843][T12439] RIP: 0033:0x7f30df79c819
[  413.777282][T12439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  413.796912][T12439] RSP: 002b:00007f30e060f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.805355][T12439] RAX: ffffffffffffffda RBX: 00007f30dfa15fa0 RCX: 00007f30df79c819
[  413.813432][T12439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  413.821416][T12439] RBP: 00007f30e060f090 R08: 0000000000000000 R09: 0000000000000000
[  413.829401][T12439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.837391][T12439] R13: 00007f30dfa16038 R14: 00007f30dfa15fa0 R15: 00007ffc597cad88
[  413.845395][T12439]  </TASK>
[  413.858547][ T5767] Bluetooth: hci3: command tx timeout
[  413.981234][ T4805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.081588][T12417] team0: Port device team_slave_0 added
[  414.118993][T12417] team0: Port device team_slave_1 added
[  414.696019][ T4805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.333137][T12417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.348686][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.403626][T12417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.907556][ T5767] Bluetooth: hci3: command tx timeout
[  416.740821][ T4805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.794894][T12417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.804406][T12417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  416.840596][T12417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.894773][ T4805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.458037][T12417] hsr_slave_0: entered promiscuous mode
[  417.464867][T12417] hsr_slave_1: entered promiscuous mode
[  417.500871][T12417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  417.509190][T12417] Cannot create hsr debugfs directory
[  417.529549][T12472] netlink: 'syz.2.2465': attribute type 21 has an invalid length.
[  417.572009][T12475] FAULT_INJECTION: forcing a failure.
[  417.572009][T12475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  417.585989][T12475] CPU: 1 PID: 12475 Comm: syz.3.2466 Not tainted syzkaller #0
[  417.593491][T12475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  417.603578][T12475] Call Trace:
[  417.606880][T12475]  <TASK>
[  417.609825][T12475]  dump_stack_lvl+0x18c/0x250
[  417.614527][T12475]  ? show_regs_print_info+0x20/0x20
[  417.619748][T12475]  ? load_image+0x420/0x420
[  417.624292][T12475]  ? __might_fault+0xaa/0x120
[  417.629096][T12475]  ? __lock_acquire+0x7d40/0x7d40
[  417.634167][T12475]  should_fail_ex+0x39d/0x4d0
[  417.638918][T12475]  _copy_from_user+0x2f/0xe0
[  417.643533][T12475]  sk_setsockopt+0x2b2/0x2bc0
[  417.648324][T12475]  ? sockopt_capable+0x60/0x60
[  417.653104][T12475]  ? aa_sk_perm+0x83c/0x970
[  417.657639][T12475]  ? __fget_files+0x28/0x4b0
[  417.662251][T12475]  ? aa_af_perm+0x330/0x330
[  417.666772][T12475]  ? __fget_files+0x28/0x4b0
[  417.671459][T12475]  ? __fget_files+0x28/0x4b0
[  417.676060][T12475]  ? aa_sock_opt_perm+0x74/0x100
[  417.681011][T12475]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  417.686570][T12475]  ? security_socket_setsockopt+0x7e/0xa0
[  417.692306][T12475]  do_sock_setsockopt+0x11b/0x1a0
[  417.697340][T12475]  __x64_sys_setsockopt+0x182/0x200
[  417.702547][T12475]  do_syscall_64+0x55/0xa0
[  417.706973][T12475]  ? clear_bhb_loop+0x40/0x90
[  417.711754][T12475]  ? clear_bhb_loop+0x40/0x90
[  417.716437][T12475]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  417.722335][T12475] RIP: 0033:0x7f30df79c819
[  417.726839][T12475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.746455][T12475] RSP: 002b:00007f30e060f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  417.754886][T12475] RAX: ffffffffffffffda RBX: 00007f30dfa15fa0 RCX: 00007f30df79c819
[  417.762949][T12475] RDX: 0000000000000022 RSI: 0000000000000001 RDI: 0000000000000005
[  417.770926][T12475] RBP: 00007f30e060f090 R08: 0000000000000004 R09: 0000000000000000
[  417.778897][T12475] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  417.786870][T12475] R13: 00007f30dfa16038 R14: 00007f30dfa15fa0 R15: 00007ffc597cad88
[  417.794875][T12475]  </TASK>
[  417.992869][ T5767] Bluetooth: hci3: command tx timeout
[  418.639079][ T4805] tipc: Left network mode
[  418.653804][T12489] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2471'.
[  418.739427][T12487] netlink: 'syz.0.2470': attribute type 4 has an invalid length.
[  418.767624][T12487] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2470'.
[  418.780250][T12487] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  419.625565][T12509] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2475'.
[  419.860644][T12511] netlink: 'syz.2.2476': attribute type 21 has an invalid length.
[  420.077793][ T5767] Bluetooth: hci3: command tx timeout
[  420.674485][T12537] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2478'.
[  420.683857][T12417] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  420.700538][T12417] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  420.844401][T12417] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  420.873676][T12541] netlink: 'syz.0.2479': attribute type 21 has an invalid length.
[  420.940787][T12417] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  421.164173][T12417] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.246895][T12417] 8021q: adding VLAN 0 to HW filter on device team0
[  421.289344][T12550] netlink: 'syz.2.2484': attribute type 4 has an invalid length.
[  421.300949][T12550] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2484'.
[  421.310730][T12550] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  421.361309][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.368571][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.386436][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.393709][ T7506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  421.458262][ T4805] hsr_slave_0: left promiscuous mode
[  421.465321][ T4805] hsr_slave_1: left promiscuous mode
[  421.483044][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.507534][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.531969][ T4805] batman_adv: batadv0: Interface deactivated: 
€Â0
[  421.539816][ T4805] batman_adv: batadv0: Removing interface: 
€Â0
[  421.556447][ T4805] bridge_slave_1: left allmulticast mode
[  421.562689][ T4805] bridge_slave_1: left promiscuous mode
[  421.568751][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.028335][ T4805] bridge_slave_0: left allmulticast mode
[  422.037084][ T4805] bridge_slave_0: left promiscuous mode
[  422.044057][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.554062][ T4805] veth1_macvtap: left promiscuous mode
[  422.559798][ T4805] veth0_macvtap: left promiscuous mode
[  422.566610][ T4805] veth1_vlan: left promiscuous mode
[  422.591816][ T4805] veth0_vlan: left promiscuous mode
[  424.824231][ T4805] team0 (unregistering): Port device team_slave_1 removed
[  424.867184][ T4805] team0 (unregistering): Port device C removed
[  424.930032][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  424.971920][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.274790][ T4805] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  425.284368][ T4805] bond0 (unregistering): Released all slaves
[  425.395614][T12565] netlink: 'syz.2.2489': attribute type 21 has an invalid length.
[  425.413712][T12571] netlink: 'syz.3.2491': attribute type 21 has an invalid length.
[  425.624924][T12589] netlink: 'syz.3.2493': attribute type 4 has an invalid length.
[  425.651503][T12589] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2493'.
[  425.743281][T12589] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  425.812305][T12592] netlink: 'syz.2.2500': attribute type 21 has an invalid length.
[  426.246894][T12417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.353170][T12417] veth0_vlan: entered promiscuous mode
[  426.377044][T12417] veth1_vlan: entered promiscuous mode
[  426.443699][T12417] veth0_macvtap: entered promiscuous mode
[  426.458166][T12417] veth1_macvtap: entered promiscuous mode
[  426.495668][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.506910][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.520643][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.531952][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.549704][T12417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.572595][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.591584][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.610874][T12417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.621956][T12417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.637589][T12417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.650693][T12417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.663301][T12417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.673244][T12417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.686217][T12417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.184468][ T7492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.197856][ T7492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.246515][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  427.256955][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  427.857045][T12621] netlink: 'syz.3.2501': attribute type 21 has an invalid length.
[  428.486663][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  428.502393][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  428.510898][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  428.520544][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  428.530113][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  428.539595][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  428.837205][T12625] chnl_net:caif_netlink_parms(): no params data found
[  428.916802][T12634] netlink: 'syz.2.2503': attribute type 21 has an invalid length.
[  429.181866][T12641] netlink: 'syz.3.2504': attribute type 21 has an invalid length.
[  429.372124][T12625] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.384629][T12625] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.393546][T12625] bridge_slave_0: entered allmulticast mode
[  429.407551][T12625] bridge_slave_0: entered promiscuous mode
[  429.423426][T12625] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.435056][T12625] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.447618][T12625] bridge_slave_1: entered allmulticast mode
[  429.455963][T12625] bridge_slave_1: entered promiscuous mode
[  429.506636][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.527236][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.584651][T12625] team0: Port device team_slave_0 added
[  429.600356][T12625] team0: Port device team_slave_1 added
[  429.647190][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.661980][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.694618][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.713394][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.721771][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.755102][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.066190][T12625] hsr_slave_0: entered promiscuous mode
[  430.082875][T12625] hsr_slave_1: entered promiscuous mode
[  430.095183][T12625] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  430.104576][T12625] Cannot create hsr debugfs directory
[  430.211157][T12659] netlink: 'syz.1.2508': attribute type 21 has an invalid length.
[  430.224297][T12659] IPv6: NLM_F_CREATE should be specified when creating new route
[  430.632416][ T5772] Bluetooth: hci0: command tx timeout
[  431.173540][T12625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.310084][T12625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.366231][T12674] netlink: 'syz.3.2512': attribute type 21 has an invalid length.
[  431.832385][ T5772] Bluetooth: hci2: ISO packet for unknown connection handle 1854
[  432.184032][T12625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.326721][T12625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.707485][ T5772] Bluetooth: hci0: command tx timeout
[  433.142315][T12692] netlink: 'syz.2.2517': attribute type 21 has an invalid length.
[  433.432267][T12625] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  433.818039][T12709] netlink: 'syz.3.2520': attribute type 21 has an invalid length.
[  433.879880][T12625] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  434.084795][T12625] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  434.095912][T12625] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  434.263442][T12625] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.297583][T12625] 8021q: adding VLAN 0 to HW filter on device team0
[  434.331311][ T7492] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.338544][ T7492] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.363751][ T7492] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.371057][ T7492] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.464102][T12722] netlink: 'syz.3.2522': attribute type 21 has an invalid length.
[  434.787634][ T5772] Bluetooth: hci0: command tx timeout
[  434.918083][T12625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.004984][T12625] veth0_vlan: entered promiscuous mode
[  435.033354][T12625] veth1_vlan: entered promiscuous mode
[  435.096665][T12625] veth0_macvtap: entered promiscuous mode
[  435.130165][T12625] veth1_macvtap: entered promiscuous mode
[  435.162813][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.197710][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.216567][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.227437][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.237278][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  435.253448][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.266252][T12625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.288133][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.319699][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.338592][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.355579][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.373963][T12625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  435.407308][T12625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  435.419097][T12625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.442969][T12625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.460308][T12625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.517768][T12625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.575726][T12625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.107058][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.121066][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.171299][ T7506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.192535][ T7506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.883056][ T5772] Bluetooth: hci0: command tx timeout
[  438.296947][T12751] netlink: 'syz.2.2532': attribute type 29 has an invalid length.
[  438.317514][T12751] netlink: 'syz.2.2532': attribute type 3 has an invalid length.
[  438.326554][T12751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2532'.
[  438.362879][T12754] netlink: 'syz.0.2530': attribute type 21 has an invalid length.
[  438.396361][T12754] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.482602][T12762] FAULT_INJECTION: forcing a failure.
[  438.482602][T12762] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  438.527069][T12762] CPU: 1 PID: 12762 Comm: syz.1.2534 Not tainted syzkaller #0
[  438.534605][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  438.544858][T12762] Call Trace:
[  438.548164][T12762]  <TASK>
[  438.551116][T12762]  dump_stack_lvl+0x18c/0x250
[  438.555829][T12762]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  438.562011][T12762]  ? show_regs_print_info+0x20/0x20
[  438.567243][T12762]  ? load_image+0x420/0x420
[  438.571777][T12762]  should_fail_ex+0x39d/0x4d0
[  438.576663][T12762]  _copy_from_user+0x2f/0xe0
[  438.581279][T12762]  __sys_bpf+0x23e/0x890
[  438.585535][T12762]  ? bpf_link_show_fdinfo+0x390/0x390
[  438.590936][T12762]  ? lock_chain_count+0x20/0x20
[  438.595822][T12762]  __x64_sys_bpf+0x7c/0x90
[  438.600266][T12762]  do_syscall_64+0x55/0xa0
[  438.604704][T12762]  ? clear_bhb_loop+0x40/0x90
[  438.609402][T12762]  ? clear_bhb_loop+0x40/0x90
[  438.614097][T12762]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  438.620006][T12762] RIP: 0033:0x7f467e99c819
[  438.624515][T12762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  438.644216][T12762] RSP: 002b:00007f467f854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  438.652642][T12762] RAX: ffffffffffffffda RBX: 00007f467ec15fa0 RCX: 00007f467e99c819
[  438.660621][T12762] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  438.668596][T12762] RBP: 00007f467f854090 R08: 0000000000000000 R09: 0000000000000000
[  438.676573][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  438.684556][T12762] R13: 00007f467ec16038 R14: 00007f467ec15fa0 R15: 00007ffd3e326e98
[  438.692548][T12762]  </TASK>
[  438.724058][T12767] netlink: 'syz.3.2533': attribute type 21 has an invalid length.
[  440.633186][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.640576][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  442.504307][T12790] FAULT_INJECTION: forcing a failure.
[  442.504307][T12790] name failslab, interval 1, probability 0, space 0, times 0
[  442.522500][T12790] CPU: 0 PID: 12790 Comm: syz.3.2543 Not tainted syzkaller #0
[  442.530033][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  442.540115][T12790] Call Trace:
[  442.543414][T12790]  <TASK>
[  442.546361][T12790]  dump_stack_lvl+0x18c/0x250
[  442.551082][T12790]  ? show_regs_print_info+0x20/0x20
[  442.556330][T12790]  ? load_image+0x420/0x420
[  442.560855][T12790]  ? __might_sleep+0xe0/0xe0
[  442.565463][T12790]  ? __lock_acquire+0x7d40/0x7d40
[  442.570491][T12790]  should_fail_ex+0x39d/0x4d0
[  442.575176][T12790]  should_failslab+0x9/0x20
[  442.579699][T12790]  slab_pre_alloc_hook+0x59/0x310
[  442.584745][T12790]  ? verify_lock_unused+0x140/0x140
[  442.589961][T12790]  ? kvmalloc_node+0x70/0x180
[  442.594637][T12790]  ? kvmalloc_node+0x70/0x180
[  442.599337][T12790]  __kmem_cache_alloc_node+0x53/0x250
[  442.604730][T12790]  ? kvmalloc_node+0x70/0x180
[  442.609439][T12790]  __kmalloc_node+0xa4/0x230
[  442.614067][T12790]  kvmalloc_node+0x70/0x180
[  442.618583][T12790]  alloc_netdev_mqs+0x87/0x1040
[  442.623475][T12790]  ? mr_dump+0x700/0x700
[  442.627729][T12790]  __ip_tunnel_create+0x303/0x4d0
[  442.632783][T12790]  ? ip_tunnel_init_net+0x790/0x790
[  442.637992][T12790]  ? bpf_lsm_capable+0x9/0x10
[  442.642668][T12790]  ? security_capable+0x89/0xb0
[  442.647524][T12790]  ip_tunnel_ctl+0x98c/0x1970
[  442.652200][T12790]  ip_tunnel_siocdevprivate+0x138/0x1f0
[  442.657748][T12790]  ? dev_ioctl+0x83c/0x1140
[  442.662253][T12790]  ? ip_tunnel_update+0xb10/0xb10
[  442.667276][T12790]  ? dev_ifsioc+0x958/0xc40
[  442.671781][T12790]  dev_ioctl+0x84c/0x1140
[  442.676116][T12790]  sock_ioctl+0x74c/0x7e0
[  442.680440][T12790]  ? sock_poll+0x3e0/0x3e0
[  442.684857][T12790]  ? bpf_lsm_file_ioctl+0x9/0x10
[  442.689788][T12790]  ? security_file_ioctl+0x80/0xa0
[  442.694981][T12790]  ? sock_poll+0x3e0/0x3e0
[  442.699397][T12790]  __se_sys_ioctl+0xfd/0x170
[  442.703987][T12790]  do_syscall_64+0x55/0xa0
[  442.708422][T12790]  ? clear_bhb_loop+0x40/0x90
[  442.713092][T12790]  ? clear_bhb_loop+0x40/0x90
[  442.717790][T12790]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  442.723679][T12790] RIP: 0033:0x7f30df79c819
[  442.728178][T12790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.747912][T12790] RSP: 002b:00007f30e060f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  442.756323][T12790] RAX: ffffffffffffffda RBX: 00007f30dfa15fa0 RCX: 00007f30df79c819
[  442.764292][T12790] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000045
[  442.772280][T12790] RBP: 00007f30e060f090 R08: 0000000000000000 R09: 0000000000000000
[  442.780273][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  442.788259][T12790] R13: 00007f30dfa16038 R14: 00007f30dfa15fa0 R15: 00007ffc597cad88
[  442.796265][T12790]  </TASK>
[  442.839598][T12795] netlink: 'syz.2.2545': attribute type 10 has an invalid length.
[  442.861180][T12795] hsr_slave_0: left promiscuous mode
[  442.873806][T12795] hsr_slave_1: left promiscuous mode
[  443.255978][T12811] netlink: 'syz.1.2549': attribute type 21 has an invalid length.
[  444.758243][T12851] netlink: 'syz.1.2561': attribute type 21 has an invalid length.
[  445.744224][T12873] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2572'.
[  445.790874][T12873] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  445.851909][T12873] sctp: [Deprecated]: syz.2.2572 (pid 12873) Use of struct sctp_assoc_value in delayed_ack socket option.
[  445.851909][T12873] Use struct sctp_sack_info instead
[  446.591617][T12888] netlink: 'syz.0.2578': attribute type 21 has an invalid length.
[  447.598556][T12931] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2590'.
[  447.869883][T12940] bond0: entered promiscuous mode
[  447.875221][T12940] bond_slave_0: entered promiscuous mode
[  447.912568][T12940] bond_slave_1: entered promiscuous mode
[  447.928072][T12940] bond0: entered allmulticast mode
[  447.954942][T12940] bond_slave_0: entered allmulticast mode
[  447.961721][T12940] bond_slave_1: entered allmulticast mode
[  448.830736][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'.
[  448.848008][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'.
[  448.871338][T12968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'.
[  449.247173][T12981] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2607'.
[  449.468598][T12987] FAULT_INJECTION: forcing a failure.
[  449.468598][T12987] name failslab, interval 1, probability 0, space 0, times 0
[  449.505824][T12987] CPU: 1 PID: 12987 Comm: syz.1.2609 Not tainted syzkaller #0
[  449.513376][T12987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  449.523472][T12987] Call Trace:
[  449.526788][T12987]  <TASK>
[  449.529787][T12987]  dump_stack_lvl+0x18c/0x250
[  449.534587][T12987]  ? show_regs_print_info+0x20/0x20
[  449.539820][T12987]  ? load_image+0x420/0x420
[  449.544445][T12987]  ? __might_sleep+0xe0/0xe0
[  449.549069][T12987]  ? __lock_acquire+0x7d40/0x7d40
[  449.554127][T12987]  should_fail_ex+0x39d/0x4d0
[  449.558848][T12987]  should_failslab+0x9/0x20
[  449.563399][T12987]  slab_pre_alloc_hook+0x59/0x310
[  449.568461][T12987]  ? __lock_acquire+0x7d40/0x7d40
[  449.573516][T12987]  ? dev_ethtool+0x129/0x18d0
[  449.578222][T12987]  __kmem_cache_alloc_node+0x53/0x250
[  449.583622][T12987]  ? __might_fault+0xaa/0x120
[  449.588323][T12987]  ? dev_ethtool+0x129/0x18d0
[  449.593107][T12987]  kmalloc_trace+0x2a/0xe0
[  449.597553][T12987]  dev_ethtool+0x129/0x18d0
[  449.602096][T12987]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  449.608370][T12987]  ? __lock_acquire+0x7d40/0x7d40
[  449.613435][T12987]  ? __might_fault+0xaa/0x120
[  449.618146][T12987]  ? full_name_hash+0x92/0xe0
[  449.622927][T12987]  ? dev_load+0x21/0x1f0
[  449.625922][T12994] netlink: 'syz.3.2610': attribute type 10 has an invalid length.
[  449.627215][T12987]  dev_ioctl+0x392/0x1140
[  449.639374][T12987]  sock_do_ioctl+0x239/0x310
[  449.644017][T12987]  ? sock_show_fdinfo+0xb0/0xb0
[  449.648993][T12987]  sock_ioctl+0x5ba/0x7e0
[  449.653351][T12987]  ? sock_poll+0x3e0/0x3e0
[  449.657800][T12987]  ? bpf_lsm_file_ioctl+0x9/0x10
[  449.661355][T12994] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2610'.
[  449.662746][T12987]  ? security_file_ioctl+0x80/0xa0
[  449.676894][T12987]  ? sock_poll+0x3e0/0x3e0
[  449.681334][T12987]  __se_sys_ioctl+0xfd/0x170
[  449.685379][T12994] bond0: entered promiscuous mode
[  449.686026][T12987]  do_syscall_64+0x55/0xa0
[  449.686050][T12987]  ? clear_bhb_loop+0x40/0x90
[  449.700348][T12987]  ? clear_bhb_loop+0x40/0x90
[  449.705061][T12987]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  449.710974][T12987] RIP: 0033:0x7f467e99c819
[  449.715417][T12987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.735036][T12987] RSP: 002b:00007f467f854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  449.743455][T12987] RAX: ffffffffffffffda RBX: 00007f467ec15fa0 RCX: 00007f467e99c819
[  449.751429][T12987] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005
[  449.759489][T12987] RBP: 00007f467f854090 R08: 0000000000000000 R09: 0000000000000000
[  449.767457][T12987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.775419][T12987] R13: 00007f467ec16038 R14: 00007f467ec15fa0 R15: 00007ffd3e326e98
[  449.783830][T12987]  </TASK>
[  449.793365][T12994] bond_slave_0: entered promiscuous mode
[  449.823889][T12994] bond_slave_1: entered promiscuous mode
[  449.846578][T12994] bridge0: port 3(bond0) entered blocking state
[  449.897683][T12994] bridge0: port 3(bond0) entered disabled state
[  449.904546][T12994] bond0: entered allmulticast mode
[  449.943714][T12994] bond_slave_0: entered allmulticast mode
[  449.959943][T12994] bond_slave_1: entered allmulticast mode
[  449.990538][T12994] bridge0: port 3(bond0) entered blocking state
[  449.997053][T12994] bridge0: port 3(bond0) entered forwarding state
[  450.058130][T13003] netlink: 'syz.2.2613': attribute type 21 has an invalid length.
[  450.831602][T13029] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2622'.
[  450.853251][T13032] FAULT_INJECTION: forcing a failure.
[  450.853251][T13032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.876737][T13032] CPU: 0 PID: 13032 Comm: syz.2.2624 Not tainted syzkaller #0
[  450.884268][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  450.894452][T13032] Call Trace:
[  450.897850][T13032]  <TASK>
[  450.901237][T13032]  dump_stack_lvl+0x18c/0x250
[  450.905962][T13032]  ? show_regs_print_info+0x20/0x20
[  450.911203][T13032]  ? load_image+0x420/0x420
[  450.915732][T13032]  ? __might_fault+0xaa/0x120
[  450.920428][T13032]  ? __lock_acquire+0x7d40/0x7d40
[  450.925485][T13032]  should_fail_ex+0x39d/0x4d0
[  450.930191][T13032]  _copy_from_user+0x2f/0xe0
[  450.934799][T13032]  kstrtouint_from_user+0xde/0x170
[  450.939946][T13032]  ? kstrtol_from_user+0x190/0x190
[  450.945139][T13032]  proc_fail_nth_write+0x8f/0x250
[  450.950202][T13032]  ? proc_fail_nth_read+0x260/0x260
[  450.955443][T13032]  ? proc_fail_nth_read+0x260/0x260
[  450.960686][T13032]  vfs_write+0x296/0x990
[  450.965147][T13032]  ? file_end_write+0x250/0x250
[  450.970559][T13032]  ? __fget_files+0x28/0x4b0
[  450.975177][T13032]  ? __fget_files+0x28/0x4b0
[  450.979812][T13032]  ? __fget_files+0x43d/0x4b0
[  450.984619][T13032]  ? __fdget_pos+0x2a3/0x330
[  450.989230][T13032]  ? ksys_write+0x75/0x260
[  450.993683][T13032]  ksys_write+0x150/0x260
[  450.998052][T13032]  ? __ia32_sys_read+0x90/0x90
[  451.002868][T13032]  ? lockdep_hardirqs_on+0x98/0x150
[  451.008099][T13032]  do_syscall_64+0x55/0xa0
[  451.012542][T13032]  ? clear_bhb_loop+0x40/0x90
[  451.017238][T13032]  ? clear_bhb_loop+0x40/0x90
[  451.021935][T13032]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.027848][T13032] RIP: 0033:0x7f1cee35d04e
[  451.032280][T13032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  451.052175][T13032] RSP: 002b:00007f1cef294fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  451.060615][T13032] RAX: ffffffffffffffda RBX: 00007f1cef2956c0 RCX: 00007f1cee35d04e
[  451.068653][T13032] RDX: 0000000000000001 RSI: 00007f1cef2950a0 RDI: 0000000000000004
[  451.076649][T13032] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  451.084688][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  451.092683][T13032] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  451.100702][T13032]  </TASK>
[  452.290932][T13050] netlink: 'syz.3.2628': attribute type 21 has an invalid length.
[  455.475248][T13073] netlink: 'syz.2.2635': attribute type 4 has an invalid length.
[  455.489916][T13073] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2635'.
[  455.507784][T13073] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  457.402891][T13099] netlink: 'syz.3.2647': attribute type 21 has an invalid length.
[  458.107047][T13115] netlink: 'syz.1.2648': attribute type 4 has an invalid length.
[  458.116859][T13115] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2648'.
[  458.142195][T13115] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  463.121888][T13149] netlink: 'syz.1.2660': attribute type 21 has an invalid length.
[  463.144540][T13165] netlink: 'syz.3.2664': attribute type 4 has an invalid length.
[  463.153445][T13165] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2664'.
[  463.188169][T13165] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  465.009674][T13210] netlink: 'syz.2.2684': attribute type 21 has an invalid length.
[  465.253299][T13223] netlink: 'syz.1.2686': attribute type 4 has an invalid length.
[  465.262196][T13223] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2686'.
[  465.278571][T13223] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  470.916508][T13253] netlink: 'syz.2.2700': attribute type 21 has an invalid length.
[  473.224410][T13309] netlink: 'syz.2.2723': attribute type 21 has an invalid length.
[  473.376860][T13312] netlink: 'syz.0.2724': attribute type 1 has an invalid length.
[  473.413272][T13312] netlink: 'syz.0.2724': attribute type 2 has an invalid length.
[  473.424827][T13312] netlink: 'syz.0.2724': attribute type 2 has an invalid length.
[  473.448625][T13312] netlink: 'syz.0.2724': attribute type 3 has an invalid length.
[  473.465216][T13312] netlink: 'syz.0.2724': attribute type 4 has an invalid length.
[  473.481529][T13312] netlink: 'syz.0.2724': attribute type 5 has an invalid length.
[  473.511952][T13312] netlink: 'syz.0.2724': attribute type 6 has an invalid length.
[  473.525034][T13315] netlink: 'syz.1.2725': attribute type 4 has an invalid length.
[  473.530079][T13312] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.2724'.
[  473.541059][T13315] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2725'.
[  473.576530][T13315] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  475.748895][T13351] FAULT_INJECTION: forcing a failure.
[  475.748895][T13351] name failslab, interval 1, probability 0, space 0, times 0
[  475.768916][T13351] CPU: 0 PID: 13351 Comm: syz.2.2740 Not tainted syzkaller #0
[  475.776454][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  475.786555][T13351] Call Trace:
[  475.789863][T13351]  <TASK>
[  475.792815][T13351]  dump_stack_lvl+0x18c/0x250
[  475.797654][T13351]  ? show_regs_print_info+0x20/0x20
[  475.803074][T13351]  ? load_image+0x420/0x420
[  475.807656][T13351]  should_fail_ex+0x39d/0x4d0
[  475.812378][T13351]  should_failslab+0x9/0x20
[  475.816938][T13351]  slab_pre_alloc_hook+0x59/0x310
[  475.822012][T13351]  kmem_cache_alloc+0x5a/0x2d0
[  475.826811][T13351]  ? __nf_conntrack_alloc+0x99/0x380
[  475.832141][T13351]  __nf_conntrack_alloc+0x99/0x380
[  475.837304][T13351]  init_conntrack+0x177/0xf10
[  475.842025][T13351]  ? early_drop+0x7f0/0x7f0
[  475.846578][T13351]  ? nf_conntrack_find_get+0x650/0x650
[  475.852076][T13351]  ? __local_bh_enable_ip+0x13a/0x1c0
[  475.857489][T13351]  ? __siphash_unaligned+0x22e/0x3a0
[  475.862832][T13351]  nf_conntrack_in+0xc06/0x15c0
[  475.867757][T13351]  ? nf_ct_pernet+0x270/0x270
[  475.872483][T13351]  ? ipt_do_table+0x2c1/0x15e0
[  475.877303][T13351]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  475.882788][T13351]  ? ipv4_conntrack_local+0x123/0x200
[  475.888215][T13351]  ? ipv4_conntrack_in+0x20/0x20
[  475.893296][T13351]  nf_hook_slow+0xbd/0x200
[  475.897759][T13351]  ? nf_hook+0x390/0x390
[  475.902049][T13351]  nf_hook+0x228/0x390
[  475.906154][T13351]  ? nf_hook+0xa2/0x390
[  475.910351][T13351]  ? __ip_local_out+0x5f0/0x5f0
[  475.915250][T13351]  ? nf_hook+0x390/0x390
[  475.919534][T13351]  ? __lock_acquire+0x7d40/0x7d40
[  475.924624][T13351]  __ip_local_out+0x4db/0x5f0
[  475.929338][T13351]  ? nf_hook+0x390/0x390
[  475.933623][T13351]  ? __ip_queue_xmit+0x5d/0x1950
[  475.938593][T13351]  __ip_queue_xmit+0xf7c/0x1950
[  475.943515][T13351]  ? __ip_queue_xmit+0x5d/0x1950
[  475.948511][T13351]  __tcp_transmit_skb+0x1d6b/0x33f0
[  475.953745][T13351]  ? __tcp_get_metrics+0x7ec/0x870
[  475.958937][T13351]  ? __tcp_send_ack+0x5a0/0x5a0
[  475.963862][T13351]  ? tcp_fastopen_cookie_check+0x26d/0x3c0
[  475.969736][T13351]  tcp_connect+0x327a/0x5190
[  475.974452][T13351]  ? tcp_options_write+0xc70/0xc70
[  475.979629][T13351]  ? get_random_u16+0x16e/0x970
[  475.984530][T13351]  ? get_random_u16+0x513/0x970
[  475.989534][T13351]  ? __asan_memset+0x22/0x40
[  475.994183][T13351]  ? tcp_fastopen_active_should_disable+0x240/0x240
[  476.000824][T13351]  ? sk_setup_caps+0x7dc/0xa10
[  476.005635][T13351]  ? dst_release+0x72/0x1a0
[  476.010190][T13351]  tcp_v4_connect+0xfee/0x18e0
[  476.014994][T13351]  ? __stack_depot_save+0x1f/0x630
[  476.020191][T13351]  ? tcp_twsk_unique+0x990/0x990
[  476.025187][T13351]  __inet_stream_connect+0x254/0xdc0
[  476.030530][T13351]  ? inet_dgram_connect+0x360/0x360
[  476.035807][T13351]  tcp_sendmsg_fastopen+0x3a7/0x5d0
[  476.041071][T13351]  tcp_sendmsg_locked+0x4621/0x4bd0
[  476.046310][T13351]  ? verify_lock_unused+0x140/0x140
[  476.051538][T13351]  ? perf_trace_lock_acquire+0x34f/0x410
[  476.057225][T13351]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  476.063869][T13351]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  476.070515][T13351]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  476.076306][T13351]  ? __might_sleep+0xe0/0xe0
[  476.080919][T13351]  ? mark_lock+0x94/0x320
[  476.085265][T13351]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  476.091262][T13351]  ? lock_chain_count+0x20/0x20
[  476.096130][T13351]  ? tcp_set_state+0x680/0x680
[  476.100925][T13351]  tcp_sendmsg+0x2f/0x50
[  476.105169][T13351]  ? inet_send_prepare+0x260/0x260
[  476.110317][T13351]  ____sys_sendmsg+0x5ba/0x960
[  476.115122][T13351]  ? __lock_acquire+0x7d40/0x7d40
[  476.120189][T13351]  ? __asan_memset+0x22/0x40
[  476.124813][T13351]  ? __sys_sendmsg_sock+0x30/0x30
[  476.129874][T13351]  ? __import_iovec+0x3fa/0x850
[  476.134945][T13351]  ? import_iovec+0x73/0xa0
[  476.139458][T13351]  ___sys_sendmsg+0x2a6/0x360
[  476.144160][T13351]  ? get_pid_task+0x20/0x1e0
[  476.148766][T13351]  ? __sys_sendmsg+0x2a0/0x2a0
[  476.153562][T13351]  ? __lock_acquire+0x7d40/0x7d40
[  476.158718][T13351]  __se_sys_sendmsg+0x1c2/0x2b0
[  476.163581][T13351]  ? __x64_sys_sendmsg+0x80/0x80
[  476.168547][T13351]  ? lockdep_hardirqs_on+0x98/0x150
[  476.173756][T13351]  do_syscall_64+0x55/0xa0
[  476.178180][T13351]  ? clear_bhb_loop+0x40/0x90
[  476.182861][T13351]  ? clear_bhb_loop+0x40/0x90
[  476.187546][T13351]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  476.193465][T13351] RIP: 0033:0x7f1cee39c819
[  476.198083][T13351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.217719][T13351] RSP: 002b:00007f1cef295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.226168][T13351] RAX: ffffffffffffffda RBX: 00007f1cee615fa0 RCX: 00007f1cee39c819
[  476.234143][T13351] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000007
[  476.242124][T13351] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  476.250114][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  476.258091][T13351] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  476.266091][T13351]  </TASK>
[  476.410935][T13348] validate_nla: 5 callbacks suppressed
[  476.410953][T13348] netlink: 'syz.3.2738': attribute type 21 has an invalid length.
[  477.124711][T13357] netlink: 'syz.1.2741': attribute type 4 has an invalid length.
[  477.142915][T13357] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2741'.
[  477.178110][T13357] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  477.495937][ T1129] hsr_slave_0: left promiscuous mode
[  477.556771][ T1129] hsr_slave_1: left promiscuous mode
[  477.567118][ T1129] bridge_slave_1: left allmulticast mode
[  477.585733][ T1129] bridge_slave_1: left promiscuous mode
[  477.618489][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.815007][ T1129] bridge_slave_0: left allmulticast mode
[  477.825839][ T1129] bridge_slave_0: left promiscuous mode
[  477.832299][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state
[  478.354531][ T1129] veth1_macvtap: left promiscuous mode
[  478.382211][ T1129] veth0_macvtap: left promiscuous mode
[  478.397722][ T1129] veth1_vlan: left promiscuous mode
[  478.408096][ T1129] veth0_vlan: left promiscuous mode
[  481.144037][ T1129] team0 (unregistering): Port device team_slave_1 removed
[  481.203990][ T1129] team0 (unregistering): Port device team_slave_0 removed
[  481.278396][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  481.320033][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.629263][ T1129] bond0 (unregistering): Released all slaves
[  481.859457][T13396] netlink: 'syz.0.2754': attribute type 21 has an invalid length.
[  481.874335][T13401] netlink: 'syz.3.2753': attribute type 4 has an invalid length.
[  481.927308][T13401] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2753'.
[  481.947434][T13401] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  483.802955][T13456] netlink: 'syz.0.2780': attribute type 4 has an invalid length.
[  483.842364][T13456] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2780'.
[  483.862062][T13456] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  483.910974][T13454] netlink: 'syz.1.2779': attribute type 21 has an invalid length.
[  485.616282][T13494] netlink: 204416 bytes leftover after parsing attributes in process `syz.1.2794'.
[  485.631387][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'.
[  485.666005][T13498] netlink: 'syz.3.2795': attribute type 21 has an invalid length.
[  486.058723][T13509] netlink: 'syz.1.2796': attribute type 4 has an invalid length.
[  486.077479][T13509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2796'.
[  486.088429][T13509] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  487.611770][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2805'.
[  488.337103][T13545] netlink: 'syz.0.2810': attribute type 21 has an invalid length.
[  488.420603][T13544] netlink: 'syz.2.2812': attribute type 4 has an invalid length.
[  488.438169][T13544] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2812'.
[  488.471205][T13544] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  490.344147][T13587] netlink: 'syz.2.2827': attribute type 4 has an invalid length.
[  490.356519][T13587] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2827'.
[  490.366713][T13587] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  490.384723][T13590] netlink: 'syz.3.2826': attribute type 21 has an invalid length.
[  492.127256][T13623] netlink: 'syz.1.2840': attribute type 21 has an invalid length.
[  492.348839][T13626] netlink: 'syz.2.2842': attribute type 4 has an invalid length.
[  492.362820][T13626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'.
[  492.379907][T13626] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  494.681256][T13676] netlink: 'syz.3.2856': attribute type 4 has an invalid length.
[  494.693614][T13676] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2856'.
[  494.705472][T13676] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  494.736547][T13677] netlink: 'syz.2.2858': attribute type 21 has an invalid length.
[  496.947260][T13711] netlink: 'syz.1.2869': attribute type 4 has an invalid length.
[  496.983007][T13711] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2869'.
[  497.007455][T13711] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  497.250474][T13724] netlink: 'syz.2.2871': attribute type 21 has an invalid length.
[  499.323101][T13749] netlink: 'syz.2.2883': attribute type 4 has an invalid length.
[  499.332326][T13749] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2883'.
[  499.343366][T13749] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  499.360179][T13760] netlink: 'syz.0.2886': attribute type 21 has an invalid length.
[  500.507979][T13774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  500.576567][ T7492] tipc: Subscription rejected, illegal request
[  502.074243][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  502.082464][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  504.151421][T13788] netlink: 'syz.3.2896': attribute type 4 has an invalid length.
[  504.159769][T13788] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2896'.
[  504.168876][T13788] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  504.186418][T13803] netlink: 'syz.0.2902': attribute type 21 has an invalid length.
[  505.774365][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'.
[  506.221575][T13841] netlink: 'syz.0.2915': attribute type 10 has an invalid length.
[  506.243793][T13841] team0: Device hsr_slave_0 failed to register rx_handler
[  506.295242][T13844] netlink: 'syz.1.2917': attribute type 4 has an invalid length.
[  506.303220][T13844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2917'.
[  506.313526][T13844] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  506.423650][T13853] netlink: 'syz.2.2919': attribute type 21 has an invalid length.
[  509.162264][T13881] netlink: 'syz.2.2929': attribute type 4 has an invalid length.
[  509.171151][T13881] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2929'.
[  509.202002][T13881] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  509.910004][T13886] netlink: 'syz.3.2931': attribute type 21 has an invalid length.
[  510.360555][T13910] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  510.367496][T13910] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  512.214766][T13926] netlink: 'syz.2.2945': attribute type 21 has an invalid length.
[  512.288763][T13932] netlink: 'syz.3.2946': attribute type 4 has an invalid length.
[  512.301584][T13932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2946'.
[  512.347844][T13932] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  512.475056][T13944] FAULT_INJECTION: forcing a failure.
[  512.475056][T13944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.497070][T13944] CPU: 1 PID: 13944 Comm: syz.1.2950 Not tainted syzkaller #0
[  512.504602][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  512.514694][T13944] Call Trace:
[  512.517992][T13944]  <TASK>
[  512.520927][T13944]  dump_stack_lvl+0x18c/0x250
[  512.525642][T13944]  ? show_regs_print_info+0x20/0x20
[  512.530879][T13944]  ? load_image+0x420/0x420
[  512.535406][T13944]  ? __might_fault+0xaa/0x120
[  512.540112][T13944]  ? __lock_acquire+0x7d40/0x7d40
[  512.545179][T13944]  should_fail_ex+0x39d/0x4d0
[  512.549905][T13944]  _copy_to_user+0x2f/0xa0
[  512.554345][T13944]  bpf_test_finish+0x19f/0x650
[  512.559112][T13944]  ? convert___skb_to_skb+0x590/0x590
[  512.564484][T13944]  ? convert_skb_to___skb+0x420/0x420
[  512.569874][T13944]  bpf_prog_test_run_skb+0xcc3/0x12b0
[  512.575256][T13944]  ? cpu_online+0x60/0x60
[  512.579672][T13944]  bpf_prog_test_run+0x321/0x390
[  512.584610][T13944]  __sys_bpf+0x49d/0x890
[  512.588851][T13944]  ? bpf_link_show_fdinfo+0x390/0x390
[  512.594235][T13944]  ? lock_chain_count+0x20/0x20
[  512.599086][T13944]  __x64_sys_bpf+0x7c/0x90
[  512.603502][T13944]  do_syscall_64+0x55/0xa0
[  512.607919][T13944]  ? clear_bhb_loop+0x40/0x90
[  512.612596][T13944]  ? clear_bhb_loop+0x40/0x90
[  512.617271][T13944]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.623161][T13944] RIP: 0033:0x7f467e99c819
[  512.627575][T13944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.647200][T13944] RSP: 002b:00007f467f854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.655702][T13944] RAX: ffffffffffffffda RBX: 00007f467ec15fa0 RCX: 00007f467e99c819
[  512.663757][T13944] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  512.671726][T13944] RBP: 00007f467f854090 R08: 0000000000000000 R09: 0000000000000000
[  512.679701][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.687697][T13944] R13: 00007f467ec16038 R14: 00007f467ec15fa0 R15: 00007ffd3e326e98
[  512.695757][T13944]  </TASK>
[  512.807946][T13950] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  512.814552][T13950] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  513.522663][ T7506] bridge_slave_1: left allmulticast mode
[  513.539888][ T7506] bridge_slave_1: left promiscuous mode
[  513.557625][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.402344][T13937] Bluetooth: hci4: command 0x0406 tx timeout
[  514.579886][ T7506] bridge_slave_0: left allmulticast mode
[  514.585622][ T7506] bridge_slave_0: left promiscuous mode
[  514.600777][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.687995][ T7506] veth1_macvtap: left promiscuous mode
[  514.693708][ T7506] veth0_macvtap: left promiscuous mode
[  516.051748][ T7506] team0 (unregistering): Port device team_slave_1 removed
[  516.135752][ T7506] team0 (unregistering): Port device C removed
[  516.180933][ T7506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.237126][ T7506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  517.654293][ T7506] bond0 (unregistering): Released all slaves
[  517.760239][T13972] netlink: 'syz.2.2959': attribute type 21 has an invalid length.
[  517.792151][T13993] netlink: 'syz.3.2962': attribute type 4 has an invalid length.
[  517.808709][T13993] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2962'.
[  517.837590][T13993] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  517.893679][T14013] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.2973'.
[  518.070443][T14020] pim6reg: tun_chr_ioctl cmd 2147767521
[  519.325888][T14033] netlink: 'syz.3.2982': attribute type 21 has an invalid length.
[  519.508623][ T5772] Bluetooth: hci2: command 0x0406 tx timeout
[  519.588760][T14045] netlink: 'syz.1.2983': attribute type 4 has an invalid length.
[  519.596674][T14045] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2983'.
[  519.655390][T14045] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  521.466219][T14078] netlink: 'syz.3.2996': attribute type 4 has an invalid length.
[  521.480245][T14078] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2996'.
[  521.490764][T14078] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  521.608598][T14087] netlink: 'syz.1.2997': attribute type 21 has an invalid length.
[  523.004426][T14110] pim6reg1: entered promiscuous mode
[  523.037483][T14110] pim6reg1: entered allmulticast mode
[  523.497761][T14119] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3011'.
[  523.569629][T14115] netlink: 'syz.2.3010': attribute type 4 has an invalid length.
[  523.604215][T14115] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3010'.
[  523.625574][T14115] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  523.839819][T14122] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3012'.
[  524.097723][T14133] netlink: 'syz.1.3014': attribute type 21 has an invalid length.
[  525.291609][T14144] FAULT_INJECTION: forcing a failure.
[  525.291609][T14144] name failslab, interval 1, probability 0, space 0, times 0
[  525.309785][T14144] CPU: 0 PID: 14144 Comm: syz.2.3021 Not tainted syzkaller #0
[  525.317307][T14144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  525.327382][T14144] Call Trace:
[  525.330673][T14144]  <TASK>
[  525.333615][T14144]  dump_stack_lvl+0x18c/0x250
[  525.338325][T14144]  ? show_regs_print_info+0x20/0x20
[  525.343550][T14144]  ? load_image+0x420/0x420
[  525.348089][T14144]  ? __might_sleep+0xe0/0xe0
[  525.352708][T14144]  ? __lock_acquire+0x7d40/0x7d40
[  525.357769][T14144]  should_fail_ex+0x39d/0x4d0
[  525.362479][T14144]  should_failslab+0x9/0x20
[  525.367000][T14144]  slab_pre_alloc_hook+0x59/0x310
[  525.372044][T14144]  ? tomoyo_encode+0x28b/0x540
[  525.376828][T14144]  ? tomoyo_encode+0x28b/0x540
[  525.381609][T14144]  __kmem_cache_alloc_node+0x53/0x250
[  525.387010][T14144]  ? tomoyo_encode+0x28b/0x540
[  525.391790][T14144]  __kmalloc+0xa4/0x230
[  525.395976][T14144]  tomoyo_encode+0x28b/0x540
[  525.400592][T14144]  tomoyo_realpath_from_path+0x592/0x5d0
[  525.406342][T14144]  tomoyo_path_number_perm+0x248/0x620
[  525.411859][T14144]  ? tomoyo_path_number_perm+0x217/0x620
[  525.417520][T14144]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  525.423009][T14144]  ? ksys_write+0x1c4/0x260
[  525.427576][T14144]  ? __fget_files+0x28/0x4b0
[  525.432291][T14144]  ? __fget_files+0x28/0x4b0
[  525.436921][T14144]  security_file_ioctl+0x70/0xa0
[  525.441906][T14144]  __se_sys_ioctl+0x48/0x170
[  525.446534][T14144]  do_syscall_64+0x55/0xa0
[  525.450977][T14144]  ? clear_bhb_loop+0x40/0x90
[  525.455677][T14144]  ? clear_bhb_loop+0x40/0x90
[  525.460380][T14144]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  525.466308][T14144] RIP: 0033:0x7f1cee39c819
[  525.470836][T14144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  525.490868][T14144] RSP: 002b:00007f1cef295028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  525.499358][T14144] RAX: ffffffffffffffda RBX: 00007f1cee615fa0 RCX: 00007f1cee39c819
[  525.507353][T14144] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a
[  525.515351][T14144] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  525.523525][T14144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  525.531519][T14144] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  525.539529][T14144]  </TASK>
[  525.554195][T14144] ERROR: Out of memory at tomoyo_realpath_from_path.
[  525.675888][T14148] netlink: 'syz.0.3022': attribute type 4 has an invalid length.
[  525.685176][T14148] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3022'.
[  525.695045][T14148] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  525.798883][T14153] delete_channel: no stack
[  526.089496][T14169] netlink: 'syz.0.3028': attribute type 21 has an invalid length.
[  527.562639][T14184] netlink: 'syz.1.3035': attribute type 4 has an invalid length.
[  527.571984][T14184] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3035'.
[  527.582522][T14184] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  527.700285][T14187] FAULT_INJECTION: forcing a failure.
[  527.700285][T14187] name failslab, interval 1, probability 0, space 0, times 0
[  527.726074][T14187] CPU: 1 PID: 14187 Comm: syz.3.3037 Not tainted syzkaller #0
[  527.733611][T14187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  527.743692][T14187] Call Trace:
[  527.746991][T14187]  <TASK>
[  527.749942][T14187]  dump_stack_lvl+0x18c/0x250
[  527.754659][T14187]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  527.760848][T14187]  ? show_regs_print_info+0x20/0x20
[  527.766090][T14187]  ? load_image+0x420/0x420
[  527.770639][T14187]  should_fail_ex+0x39d/0x4d0
[  527.775348][T14187]  should_failslab+0x9/0x20
[  527.779885][T14187]  slab_pre_alloc_hook+0x59/0x310
[  527.785107][T14187]  ? bpf_test_init+0x9f/0x140
[  527.789790][T14187]  ? bpf_test_init+0x9f/0x140
[  527.794461][T14187]  __kmem_cache_alloc_node+0x53/0x250
[  527.799840][T14187]  ? bpf_test_init+0x9f/0x140
[  527.804507][T14187]  __kmalloc+0xa4/0x230
[  527.808659][T14187]  bpf_test_init+0x9f/0x140
[  527.813157][T14187]  bpf_prog_test_run_xdp+0x4d1/0x10e0
[  527.818616][T14187]  ? dev_put+0x80/0x80
[  527.822748][T14187]  ? dev_put+0x80/0x80
[  527.826849][T14187]  bpf_prog_test_run+0x321/0x390
[  527.831801][T14187]  __sys_bpf+0x49d/0x890
[  527.836044][T14187]  ? bpf_link_show_fdinfo+0x390/0x390
[  527.841421][T14187]  ? lock_chain_count+0x20/0x20
[  527.846559][T14187]  __x64_sys_bpf+0x7c/0x90
[  527.850991][T14187]  do_syscall_64+0x55/0xa0
[  527.855407][T14187]  ? clear_bhb_loop+0x40/0x90
[  527.860082][T14187]  ? clear_bhb_loop+0x40/0x90
[  527.864756][T14187]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  527.870646][T14187] RIP: 0033:0x7f30df79c819
[  527.875058][T14187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  527.894663][T14187] RSP: 002b:00007f30e060f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  527.903079][T14187] RAX: ffffffffffffffda RBX: 00007f30dfa15fa0 RCX: 00007f30df79c819
[  527.911046][T14187] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[  527.919050][T14187] RBP: 00007f30e060f090 R08: 0000000000000000 R09: 0000000000000000
[  527.927029][T14187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.935016][T14187] R13: 00007f30dfa16038 R14: 00007f30dfa15fa0 R15: 00007ffc597cad88
[  527.942999][T14187]  </TASK>
[  528.003064][T14194] netlink: 'syz.2.3039': attribute type 21 has an invalid length.
[  528.047678][T14194] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3039'.
[  528.078110][T14194] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3039'.
[  528.116471][T14198] netlink: 'syz.0.3041': attribute type 21 has an invalid length.
[  529.677911][T13937] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17
[  530.149777][T14221] netlink: 'syz.2.3048': attribute type 4 has an invalid length.
[  530.191954][T14221] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3048'.
[  530.213342][T14221] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  530.232945][T14223] netlink: 'syz.0.3050': attribute type 17 has an invalid length.
[  530.244986][T14223] netlink: 'syz.0.3050': attribute type 41 has an invalid length.
[  530.253321][T14223] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3050'.
[  530.853618][T14240] netlink: 'syz.0.3053': attribute type 153 has an invalid length.
[  530.856572][T14236] netlink: 'syz.3.3054': attribute type 21 has an invalid length.
[  530.904072][T14240] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3053'.
[  532.026593][T14251] netlink: 'syz.0.3060': attribute type 11 has an invalid length.
[  532.035528][T14251] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.3060'.
[  532.240427][T14260] netlink: 'syz.3.3063': attribute type 4 has an invalid length.
[  532.250369][T14260] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3063'.
[  532.260551][T14260] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  532.521085][T14268] netlink: 'syz.2.3066': attribute type 21 has an invalid length.
[  534.867605][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[  535.149003][T14301] FAULT_INJECTION: forcing a failure.
[  535.149003][T14301] name failslab, interval 1, probability 0, space 0, times 0
[  535.207752][T14301] CPU: 0 PID: 14301 Comm: syz.0.3076 Not tainted syzkaller #0
[  535.215312][T14301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  535.225426][T14301] Call Trace:
[  535.228742][T14301]  <TASK>
[  535.231710][T14301]  dump_stack_lvl+0x18c/0x250
[  535.236439][T14301]  ? show_regs_print_info+0x20/0x20
[  535.241664][T14301]  ? load_image+0x420/0x420
[  535.246290][T14301]  ? __might_sleep+0xe0/0xe0
[  535.250908][T14301]  ? __lock_acquire+0x7d40/0x7d40
[  535.255963][T14301]  should_fail_ex+0x39d/0x4d0
[  535.260670][T14301]  should_failslab+0x9/0x20
[  535.265182][T14301]  slab_pre_alloc_hook+0x59/0x310
[  535.270235][T14301]  kmem_cache_alloc_node+0x60/0x320
[  535.275444][T14301]  ? __alloc_skb+0x103/0x2c0
[  535.280070][T14301]  __alloc_skb+0x103/0x2c0
[  535.284510][T14301]  __ip6_append_data+0x2abc/0x3c50
[  535.289685][T14301]  ? ip6_mtu+0x7d/0x3f0
[  535.293857][T14301]  ? rawv6_send_hdrinc+0x1640/0x1640
[  535.299168][T14301]  ? ip6_mtu+0x7d/0x3f0
[  535.303347][T14301]  ? ip6_setup_cork+0xfe0/0xfe0
[  535.308233][T14301]  ip6_append_data+0x1b0/0x350
[  535.313031][T14301]  ? rawv6_send_hdrinc+0x1640/0x1640
[  535.318354][T14301]  rawv6_sendmsg+0x1264/0x1770
[  535.323168][T14301]  ? compat_rawv6_ioctl+0x70/0x70
[  535.328315][T14301]  ? aa_sk_perm+0x83c/0x970
[  535.332858][T14301]  ? tomoyo_socket_sendmsg_permission+0x216/0x2f0
[  535.339339][T14301]  ? inet_sendmsg+0x7c/0x2f0
[  535.344049][T14301]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  535.349351][T14301]  ? security_socket_sendmsg+0x80/0xa0
[  535.354818][T14301]  ? inet_send_prepare+0x260/0x260
[  535.359949][T14301]  ____sys_sendmsg+0x5ba/0x960
[  535.364728][T14301]  ? __lock_acquire+0x7d40/0x7d40
[  535.369776][T14301]  ? __asan_memset+0x22/0x40
[  535.374382][T14301]  ? __sys_sendmsg_sock+0x30/0x30
[  535.379424][T14301]  ? __import_iovec+0x3fa/0x850
[  535.384300][T14301]  ? import_iovec+0x73/0xa0
[  535.388826][T14301]  ___sys_sendmsg+0x2a6/0x360
[  535.393544][T14301]  ? get_pid_task+0x20/0x1e0
[  535.398157][T14301]  ? __sys_sendmsg+0x2a0/0x2a0
[  535.402976][T14301]  ? __lock_acquire+0x7d40/0x7d40
[  535.408065][T14301]  __se_sys_sendmsg+0x1c2/0x2b0
[  535.412937][T14301]  ? __x64_sys_sendmsg+0x80/0x80
[  535.417921][T14301]  ? lockdep_hardirqs_on+0x98/0x150
[  535.423143][T14301]  do_syscall_64+0x55/0xa0
[  535.427565][T14301]  ? clear_bhb_loop+0x40/0x90
[  535.432367][T14301]  ? clear_bhb_loop+0x40/0x90
[  535.437091][T14301]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.443040][T14301] RIP: 0033:0x7fc6efd9c819
[  535.447490][T14301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.467233][T14301] RSP: 002b:00007fc6f0cbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.475665][T14301] RAX: ffffffffffffffda RBX: 00007fc6f0016090 RCX: 00007fc6efd9c819
[  535.483651][T14301] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000c
[  535.491639][T14301] RBP: 00007fc6f0cbb090 R08: 0000000000000000 R09: 0000000000000000
[  535.499709][T14301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.507774][T14301] R13: 00007fc6f0016128 R14: 00007fc6f0016090 R15: 00007ffd58e86808
[  535.515800][T14301]  </TASK>
[  538.063255][T14320] netlink: 'syz.0.3083': attribute type 9 has an invalid length.
[  538.071417][T14320] netlink: 84908 bytes leftover after parsing attributes in process `syz.0.3083'.
[  538.732409][T14296] netlink: 'syz.3.3074': attribute type 4 has an invalid length.
[  538.740569][T14296] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3074'.
[  538.750120][T14296] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  538.770642][T14308] netlink: 'syz.1.3079': attribute type 21 has an invalid length.
[  539.017036][T14327] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3086'.
[  540.785673][T14348] netlink: 'syz.2.3093': attribute type 1 has an invalid length.
[  540.806366][T14351] netlink: 'syz.0.3094': attribute type 4 has an invalid length.
[  540.827751][T14351] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3094'.
[  540.837198][T14351] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  540.956393][T14356] netlink: 'syz.3.3095': attribute type 21 has an invalid length.
[  542.232419][T14372] netlink: 'syz.0.3101': attribute type 10 has an invalid length.
[  542.240717][T14372] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3101'.
[  542.438873][T14385] FAULT_INJECTION: forcing a failure.
[  542.438873][T14385] name failslab, interval 1, probability 0, space 0, times 0
[  542.467541][T14385] CPU: 0 PID: 14385 Comm: syz.2.3106 Not tainted syzkaller #0
[  542.475774][T14385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  542.485857][T14385] Call Trace:
[  542.489153][T14385]  <TASK>
[  542.492098][T14385]  dump_stack_lvl+0x18c/0x250
[  542.496805][T14385]  ? sctp_sendmsg+0x1575/0x28c0
[  542.501674][T14385]  ? ___sys_sendmsg+0x2a6/0x360
[  542.506545][T14385]  ? show_regs_print_info+0x20/0x20
[  542.511775][T14385]  ? load_image+0x420/0x420
[  542.516317][T14385]  should_fail_ex+0x39d/0x4d0
[  542.521064][T14385]  should_failslab+0x9/0x20
[  542.525587][T14385]  slab_pre_alloc_hook+0x59/0x310
[  542.530636][T14385]  ? sctp_add_bind_addr+0x8c/0x360
[  542.535769][T14385]  __kmem_cache_alloc_node+0x53/0x250
[  542.541171][T14385]  ? sctp_add_bind_addr+0x8c/0x360
[  542.546301][T14385]  kmalloc_trace+0x2a/0xe0
[  542.550742][T14385]  sctp_add_bind_addr+0x8c/0x360
[  542.555708][T14385]  sctp_copy_local_addr_list+0x315/0x4f0
[  542.561368][T14385]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  542.567109][T14385]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  542.573194][T14385]  ? sctp_v6_is_any+0x64/0x70
[  542.577895][T14385]  ? sctp_copy_one_addr+0x8c/0x350
[  542.583031][T14385]  sctp_bind_addr_copy+0xb3/0x3c0
[  542.588094][T14385]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  542.594538][T14385]  sctp_connect_new_asoc+0x2f9/0x6a0
[  542.600022][T14385]  ? __sctp_connect+0xd80/0xd80
[  542.604890][T14385]  ? __local_bh_enable_ip+0x13a/0x1c0
[  542.610284][T14385]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  542.615937][T14385]  ? security_sctp_bind_connect+0x89/0xb0
[  542.621693][T14385]  sctp_sendmsg+0x1575/0x28c0
[  542.626456][T14385]  ? sctp_getsockopt+0xb60/0xb60
[  542.631420][T14385]  ? aa_sk_perm+0x83c/0x970
[  542.635969][T14385]  ? aa_af_perm+0x330/0x330
[  542.640490][T14385]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  542.646959][T14385]  ? sock_rps_record_flow+0x19/0x3f0
[  542.652267][T14385]  ? inet_sendmsg+0xe9/0x2f0
[  542.656877][T14385]  ? inet_send_prepare+0x260/0x260
[  542.662189][T14385]  ____sys_sendmsg+0x5ba/0x960
[  542.666991][T14385]  ? __lock_acquire+0x7d40/0x7d40
[  542.672045][T14385]  ? __sys_sendmsg_sock+0x30/0x30
[  542.677081][T14385]  ? __import_iovec+0x5f2/0x850
[  542.681955][T14385]  ? import_iovec+0x73/0xa0
[  542.686475][T14385]  ___sys_sendmsg+0x2a6/0x360
[  542.691174][T14385]  ? get_pid_task+0x20/0x1e0
[  542.695788][T14385]  ? __sys_sendmsg+0x2a0/0x2a0
[  542.700592][T14385]  ? __lock_acquire+0x7d40/0x7d40
[  542.705659][T14385]  __se_sys_sendmsg+0x1c2/0x2b0
[  542.710530][T14385]  ? __x64_sys_sendmsg+0x80/0x80
[  542.715507][T14385]  ? lockdep_hardirqs_on+0x98/0x150
[  542.720729][T14385]  do_syscall_64+0x55/0xa0
[  542.725168][T14385]  ? clear_bhb_loop+0x40/0x90
[  542.729860][T14385]  ? clear_bhb_loop+0x40/0x90
[  542.734561][T14385]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.740477][T14385] RIP: 0033:0x7f1cee39c819
[  542.744918][T14385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  542.764556][T14385] RSP: 002b:00007f1cef295028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.773008][T14385] RAX: ffffffffffffffda RBX: 00007f1cee615fa0 RCX: 00007f1cee39c819
[  542.781009][T14385] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003
[  542.789003][T14385] RBP: 00007f1cef295090 R08: 0000000000000000 R09: 0000000000000000
[  542.797009][T14385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  542.805003][T14385] R13: 00007f1cee616038 R14: 00007f1cee615fa0 R15: 00007ffc4f4d8a58
[  542.813015][T14385]  </TASK>
[  543.125471][T14388] netlink: 'syz.2.3107': attribute type 4 has an invalid length.
[  543.153774][T14388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3107'.
[  543.192839][T14388] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  543.321358][T14396] netlink: 'syz.0.3109': attribute type 21 has an invalid length.
[  545.062183][T14420] netlink: 'syz.3.3120': attribute type 4 has an invalid length.
[  545.086595][T14420] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3120'.
[  545.104007][T14420] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  545.632109][T14424] netlink: 'syz.1.3121': attribute type 21 has an invalid length.
[  547.373508][T14457] netlink: 'syz.0.3134': attribute type 4 has an invalid length.
[  547.384756][T14457] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3134'.
[  547.408523][T14457] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  547.503467][T14460] netlink: 'syz.3.3135': attribute type 21 has an invalid length.
[  547.668884][T14462] netlink: 'syz.1.3136': attribute type 6 has an invalid length.
[  547.676719][T14462] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3136'.
[  549.016436][T14486] FAULT_INJECTION: forcing a failure.
[  549.016436][T14486] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  549.035544][T14486] CPU: 1 PID: 14486 Comm: syz.0.3146 Not tainted syzkaller #0
[  549.043074][T14486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  549.053160][T14486] Call Trace:
[  549.056456][T14486]  <TASK>
[  549.059398][T14486]  dump_stack_lvl+0x18c/0x250
[  549.064100][T14486]  ? show_regs_print_info+0x20/0x20
[  549.069331][T14486]  ? load_image+0x420/0x420
[  549.073881][T14486]  ? __lock_acquire+0x7d40/0x7d40
[  549.078941][T14486]  ? mark_lock+0x94/0x320
[  549.083400][T14486]  should_fail_ex+0x39d/0x4d0
[  549.088126][T14486]  prepare_alloc_pages+0x1e2/0x5f0
[  549.093270][T14486]  __alloc_pages+0x134/0x460
[  549.097883][T14486]  ? zone_statistics+0x170/0x170
[  549.102844][T14486]  ? do_wp_page+0x7ca/0x35f0
[  549.107457][T14486]  ? do_wp_page+0xfc5/0x35f0
[  549.112066][T14486]  __folio_alloc+0x10/0x20
[  549.116496][T14486]  vma_alloc_folio+0x47a/0x8f0
[  549.121285][T14486]  do_wp_page+0x1243/0x35f0
[  549.125819][T14486]  ? folio_put+0xd0/0xd0
[  549.130081][T14486]  ? do_raw_spin_lock+0x11f/0x2c0
[  549.135141][T14486]  ? __rwlock_init+0x150/0x150
[  549.139943][T14486]  handle_mm_fault+0x135d/0x4c00
[  549.144904][T14486]  ? handle_mm_fault+0xe7/0x4c00
[  549.149883][T14486]  ? numa_migrate_prep+0x350/0x350
[  549.155029][T14486]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  549.160374][T14486]  do_user_addr_fault+0x730/0x12c0
[  549.165607][T14486]  exc_page_fault+0x64/0x100
[  549.170221][T14486]  asm_exc_page_fault+0x26/0x30
[  549.175098][T14486] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  549.180934][T14486] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  549.200743][T14486] RSP: 0018:ffffc9001140f5d8 EFLAGS: 00050202
[  549.206929][T14486] RAX: ffffffff8427bb01 RBX: 1ffff92002281fc7 RCX: 00000000000004f4
[  549.214915][T14486] RDX: 0000000000000000 RSI: ffff88805ae68954 RDI: 0000200000004000
[  549.222907][T14486] RBP: ffffc9001140f728 R08: ffff88805ae68e47 R09: 1ffff1100b5cd1c8
[  549.230922][T14486] R10: dffffc0000000000 R11: ffffed100b5cd1c9 R12: ffff88805ae680f8
[  549.238962][T14486] R13: 0000000000000d50 R14: 0000000000000d50 R15: ffffc9001140fe48
[  549.246965][T14486]  ? _copy_to_iter+0x1c1/0x1120
[  549.251853][T14486]  _copy_to_iter+0x24f/0x1120
[  549.256562][T14486]  ? __virt_addr_valid+0x18c/0x540
[  549.261690][T14486]  ? iov_iter_init+0x1e0/0x1e0
[  549.266466][T14486]  ? __virt_addr_valid+0x18c/0x540
[  549.271594][T14486]  ? __virt_addr_valid+0x469/0x540
[  549.276725][T14486]  ? __phys_addr_symbol+0x2f/0x70
[  549.281769][T14486]  ? __check_object_size+0x506/0xa20
[  549.287079][T14486]  __skb_datagram_iter+0xdb/0x780
[  549.292131][T14486]  ? skb_copy_datagram_iter+0x200/0x200
[  549.297700][T14486]  __skb_datagram_iter+0x561/0x780
[  549.302837][T14486]  ? skb_copy_datagram_iter+0x200/0x200
[  549.308405][T14486]  skb_copy_datagram_iter+0xb1/0x200
[  549.313720][T14486]  tipc_recvmsg+0x7cc/0x1400
[  549.318354][T14486]  ? tipc_send_packet+0x90/0x90
[  549.323238][T14486]  ? aa_sock_msg_perm+0x94/0x150
[  549.328193][T14486]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  549.333502][T14486]  ? security_socket_recvmsg+0x89/0xb0
[  549.338975][T14486]  ? tipc_send_packet+0x90/0x90
[  549.343847][T14486]  ____sys_recvmsg+0x2ce/0x5e0
[  549.348650][T14486]  ? __sys_recvmsg_sock+0x50/0x50
[  549.353724][T14486]  ? import_iovec+0x73/0xa0
[  549.358257][T14486]  ___sys_recvmsg+0x216/0x590
[  549.363046][T14486]  ? __sys_recvmsg+0x2a0/0x2a0
[  549.367844][T14486]  ? ksys_write+0x1c4/0x260
[  549.372378][T14486]  ? __fget_files+0x43d/0x4b0
[  549.377286][T14486]  __x64_sys_recvmsg+0x20c/0x2e0
[  549.382245][T14486]  ? perf_trace_preemptirq_template+0x269/0x330
[  549.388514][T14486]  ? ___sys_recvmsg+0x590/0x590
[  549.393401][T14486]  ? lockdep_hardirqs_on+0x98/0x150
[  549.398620][T14486]  do_syscall_64+0x55/0xa0
[  549.403485][T14486]  ? clear_bhb_loop+0x40/0x90
[  549.408181][T14486]  ? clear_bhb_loop+0x40/0x90
[  549.412888][T14486]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  549.418798][T14486] RIP: 0033:0x7fc6efd9c819
[  549.423241][T14486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  549.442975][T14486] RSP: 002b:00007fc6f0cdc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  549.451409][T14486] RAX: ffffffffffffffda RBX: 00007fc6f0015fa0 RCX: 00007fc6efd9c819
[  549.459389][T14486] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000007
[  549.467368][T14486] RBP: 00007fc6f0cdc090 R08: 0000000000000000 R09: 0000000000000000
[  549.475360][T14486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.483436][T14486] R13: 00007fc6f0016038 R14: 00007fc6f0015fa0 R15: 00007ffd58e86808
[  549.491460][T14486]  </TASK>
[  549.512625][T14487] netlink: 'syz.2.3145': attribute type 4 has an invalid length.
[  549.521272][T14487] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3145'.
[  549.531566][T14487] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  549.673064][T14496] netlink: 'syz.0.3148': attribute type 21 has an invalid length.
[  553.158922][T14529] netlink: 'syz.2.3159': attribute type 4 has an invalid length.
[  553.172205][T14529] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3159'.
[  553.182009][T14529] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  553.371965][T14538] netlink: 'syz.0.3161': attribute type 21 has an invalid length.
[  555.127473][T14562] netlink: 'syz.0.3171': attribute type 4 has an invalid length.
[  555.152644][T14562] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3171'.
[  555.258375][T14562] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  555.350482][ T5772] Bluetooth: hci0: command 0x0406 tx timeout
[  555.434599][T14571] netlink: 'syz.2.3174': attribute type 21 has an invalid length.
[  557.515157][T14598] netlink: 'syz.3.3185': attribute type 4 has an invalid length.
[  557.531591][T14598] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3185'.
[  557.543625][T14598] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  557.578213][    C1] 
[  557.578221][    C1] ================================
[  557.578226][    C1] WARNING: inconsistent lock state
[  557.578236][    C1] syzkaller #0 Not tainted
[  557.578243][    C1] --------------------------------
[  557.578248][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  557.578255][    C1] syz.0.3186/14600 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  557.578272][    C1] ffff88802db680f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  557.578321][    C1] {INITIAL USE} state was registered at:
[  557.578330][    C1]   lock_acquire+0x19e/0x420
[  557.578348][    C1]   _raw_spin_lock+0x2e/0x40
[  557.578363][    C1]   htab_lock_bucket+0x17d/0x300
[  557.578379][    C1]   htab_map_update_elem+0x229/0x1040
[  557.578392][    C1]   bpf_map_update_value+0x660/0x720
[  557.578401][    C1]   map_update_elem+0x57b/0x700
[  557.578413][    C1]   __sys_bpf+0x6b5/0x890
[  557.578425][    C1]   __x64_sys_bpf+0x7c/0x90
[  557.578436][    C1]   do_syscall_64+0x55/0xa0
[  557.578448][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.578466][    C1] irq event stamp: 2312
[  557.578472][    C1] hardirqs last  enabled at (2311): [<ffffffff8a862985>] exc_debug+0xf5/0x140
[  557.578492][    C1] hardirqs last disabled at (2312): [<ffffffff8a862903>] exc_debug+0x73/0x140
[  557.578510][    C1] softirqs last  enabled at (1720): [<ffffffff819660d6>] bpf_prog_load+0x1266/0x1670
[  557.578530][    C1] softirqs last disabled at (1718): [<ffffffff819469cd>] bpf_ksym_add+0x2d/0x340
[  557.578559][    C1] 
[  557.578559][    C1] other info that might help us debug this:
[  557.578564][    C1]  Possible unsafe locking scenario:
[  557.578564][    C1] 
[  557.578568][    C1]        CPU0
[  557.578571][    C1]        ----
[  557.578573][    C1]   lock(&htab->lockdep_key);
[  557.578584][    C1]   <Interrupt>
[  557.578586][    C1]     lock(&htab->lockdep_key);
[  557.578596][    C1] 
[  557.578596][    C1]  *** DEADLOCK ***
[  557.578596][    C1] 
[  557.578599][    C1] no locks held by syz.0.3186/14600.
[  557.578606][    C1] 
[  557.578606][    C1] stack backtrace:
[  557.578610][    C1] CPU: 1 PID: 14600 Comm: syz.0.3186 Not tainted syzkaller #0
[  557.578626][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  557.578635][    C1] Call Trace:
[  557.578641][    C1]  <#DB>
[  557.578647][    C1]  dump_stack_lvl+0x18c/0x250
[  557.578673][    C1]  ? show_regs_print_info+0x20/0x20
[  557.578699][    C1]  ? print_usage_bug+0x475/0x690
[  557.578717][    C1]  ? verify_lock_unused+0x18/0x140
[  557.578736][    C1]  lock_acquire+0x2c2/0x420
[  557.578752][    C1]  ? look_up_lock_class+0x75/0x140
[  557.578772][    C1]  ? htab_lock_bucket+0x17d/0x300
[  557.578789][    C1]  ? read_lock_is_recursive+0x20/0x20
[  557.578807][    C1]  ? lock_release+0xb5/0x8c0
[  557.578829][    C1]  _raw_spin_lock+0x2e/0x40
[  557.578846][    C1]  ? htab_lock_bucket+0x17d/0x300
[  557.578863][    C1]  htab_lock_bucket+0x17d/0x300
[  557.578881][    C1]  ? htab_lru_map_delete_node+0x760/0x760
[  557.578899][    C1]  ? look_up_lock_class+0x75/0x140
[  557.578918][    C1]  ? verify_lock_unused+0x18/0x140
[  557.578935][    C1]  ? jhash+0x2e8/0x740
[  557.578956][    C1]  htab_map_delete_elem+0x1a4/0x650
[  557.578975][    C1]  ? htab_map_update_elem+0x1040/0x1040
[  557.578991][    C1]  ? perf_callchain+0x220/0x220
[  557.579011][    C1]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  557.579029][    C1]  bpf_overflow_handler+0x1fc/0x510
[  557.579051][    C1]  ? perf_prepare_header+0x1e0/0x1e0
[  557.579069][    C1]  ? bpf_overflow_handler+0xde/0x510
[  557.579090][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  557.579113][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  557.579133][    C1]  __perf_event_overflow+0x447/0x630
[  557.579154][    C1]  perf_swevent_overflow+0x268/0x340
[  557.579177][    C1]  ? perf_event_switch_output+0x790/0x790
[  557.579203][    C1]  perf_swevent_event+0x45c/0x570
[  557.579222][    C1]  ? perf_tp_event+0x1520/0x1520
[  557.579245][    C1]  perf_bp_event+0x319/0x430
[  557.579265][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  557.579296][    C1]  ? lock_acquire+0x2c2/0x420
[  557.579322][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  557.579345][    C1]  notifier_call_chain+0x197/0x380
[  557.579366][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  557.579386][    C1]  atomic_notifier_call_chain+0xda/0x180
[  557.579406][    C1]  notify_die+0x145/0x1a0
[  557.579427][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  557.579451][    C1]  ? rcu_is_watching+0x15/0xb0
[  557.579473][    C1]  notify_debug+0x2e/0x50
[  557.579488][    C1]  exc_debug+0xde/0x140
[  557.579506][    C1]  asm_exc_debug+0x1e/0x40
[  557.579524][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  557.579541][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  557.579561][    C1] RSP: 0018:ffffc900031172f0 EFLAGS: 00050206
[  557.579575][    C1] RAX: ffffffff842a2201 RBX: 0000000000000062 RCX: 0000000000000049
[  557.579586][    C1] RDX: 0000000000000000 RSI: ffff88805e11c6a5 RDI: 0000200000000304
[  557.579597][    C1] RBP: 0000000000000062 R08: ffff88805e11c6ed R09: 1ffff1100bc238dd
[  557.579609][    C1] R10: dffffc0000000000 R11: ffffed100bc238de R12: 000020000000034d
[  557.579620][    C1] R13: 000000000000002b R14: 00002000000002eb R15: ffff88805e11c68c
[  557.579635][    C1]  ? _copy_to_user+0x51/0xa0
[  557.579658][    C1]  </#DB>
[  557.579663][    C1]  <TASK>
[  557.579668][    C1]  _copy_to_user+0x85/0xa0
[  557.579687][    C1]  bpf_verifier_vlog+0x2fa/0x870
[  557.579714][    C1]  verbose+0x11e/0x1a0
[  557.579733][    C1]  ? verbose+0x11e/0x1a0
[  557.579752][    C1]  ? check_func_arg_reg_off+0x2f0/0x2f0
[  557.579773][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  557.579792][    C1]  ? read_tsc+0x9/0x20
[  557.579811][    C1]  bpf_check+0x597f/0xeba0
[  557.579846][    C1]  ? __lock_acquire+0x1273/0x7d40
[  557.579864][    C1]  ? bpf_get_btf_vmlinux+0x20/0x20
[  557.579891][    C1]  ? mark_lock+0x94/0x320
[  557.579910][    C1]  ? __lock_acquire+0x1347/0x7d40
[  557.579938][    C1]  ? verify_lock_unused+0x140/0x140
[  557.579959][    C1]  ? verify_lock_unused+0x140/0x140
[  557.579976][    C1]  ? verify_lock_unused+0x140/0x140
[  557.579995][    C1]  ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[  557.580016][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  557.580040][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  557.580059][    C1]  ? lock_chain_count+0x20/0x20
[  557.580078][    C1]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  557.580097][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  557.580115][    C1]  ? ktime_get_with_offset+0x103/0x330
[  557.580133][    C1]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  557.580153][    C1]  ? ktime_get_real_ts64+0x440/0x440
[  557.580171][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  557.580196][    C1]  ? bpf_obj_name_cpy+0x194/0x1e0
[  557.580221][    C1]  bpf_prog_load+0x1163/0x1670
[  557.580244][    C1]  ? map_freeze+0x420/0x420
[  557.580266][    C1]  ? __might_fault+0xaa/0x120
[  557.580282][    C1]  ? __might_fault+0xc6/0x120
[  557.580295][    C1]  ? __might_fault+0xaa/0x120
[  557.580309][    C1]  ? bpf_lsm_bpf+0x9/0x10
[  557.580329][    C1]  ? security_bpf+0x7e/0xa0
[  557.580349][    C1]  __sys_bpf+0x5ba/0x890
[  557.580367][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  557.580390][    C1]  ? lock_chain_count+0x20/0x20
[  557.580411][    C1]  __x64_sys_bpf+0x7c/0x90
[  557.580427][    C1]  do_syscall_64+0x55/0xa0
[  557.580441][    C1]  ? clear_bhb_loop+0x40/0x90
[  557.580459][    C1]  ? clear_bhb_loop+0x40/0x90
[  557.580479][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.580498][    C1] RIP: 0033:0x7fc6efd9c819
[  557.580509][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.580523][    C1] RSP: 002b:00007fc6f0cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  557.580539][    C1] RAX: ffffffffffffffda RBX: 00007fc6f0015fa0 RCX: 00007fc6efd9c819
[  557.580557][    C1] RDX: 0000000000000080 RSI: 0000200000000500 RDI: 0000000000000005
[  557.580568][    C1] RBP: 00007fc6efe32c91 R08: 0000000000000000 R09: 0000000000000000
[  557.580578][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.580588][    C1] R13: 00007fc6f0016038 R14: 00007fc6f0015fa0 R15: 00007ffd58e86808
[  557.580606][    C1]  </TASK>
[  563.519894][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  563.526265][ T1282] ieee802154 phy1 wpan1: encryption failed: -22