last executing test programs:

5.765713388s ago: executing program 3 (id=5585):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0xe, &(0x7f0000001200)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xe, &(0x7f0000002140)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28], 0x230}, 0x8042)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x49405a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={&(0x7f00000002c0), 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.03715268s ago: executing program 3 (id=5592):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000fffffeff00000000000000040300000002000000000000080200000000006100"], 0x0, 0x44}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b1c1880, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000840)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000880)=""/223, 0x41100, 0x10, '\x00', r2, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x2, 0x3, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000d80)=[{0x1, 0x1, 0x7, 0xc}, {0x3, 0x2, 0xf}, {0x0, 0x4, 0x1, 0x5}], 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{}, 0x0, &(0x7f0000000780)='%pI4   \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5}, &(0x7f0000000740), &(0x7f0000000a00)=r3}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3, 0x2, 0x3, 0xd, 0x0, 0x5, 0x2, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xf09, 0x1, @perf_bp={&(0x7f0000000040)}, 0x100000, 0xa79, 0x7, 0x2, 0xc4, 0xffff, 0x1, 0x0, 0x15, 0x0, 0x101}, 0x0, 0x2, r6, 0xa)
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r7)
ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r8 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x400008, 0x2a, &(0x7f00000009c0)=""/42, 0x40f00, 0x0, '\x00', r2, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r7, 0xffffffffffffffff, r0, 0x1, r8, r0], &(0x7f0000001b00), 0x10, 0x7}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000a40)="f9b5", &(0x7f0000000a80), 0x2}, 0x20)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x165, 0x165, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @fwd={0xb}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @enum64={0x8, 0x9, 0x0, 0x13, 0x1, 0xe, [{0xb, 0x3, 0x3}, {0x1, 0x8, 0x1}, {0x9, 0x5, 0x401}, {0xe, 0xffffffff, 0x7fff}, {0x11, 0x9, 0x1}, {0xf, 0x3, 0x6}, {0x2, 0x4, 0xc7}, {0x4, 0x0, 0xffffff61}, {0x6, 0xc, 0x6}]}, @typedef={0xb}, @fwd={0xe}, @datasec={0x8, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x9, 0xa}, {0x5, 0x7, 0x1}, {0x4, 0xf, 0x5d10}, {0x3, 0x8, 0x3ff}, {0x2, 0x5, 0x6}], "1e"}, @enum={0x5, 0xa, 0x0, 0x6, 0x4, [{0x0, 0x2}, {0xc, 0x5}, {0x7, 0x8}, {0x2, 0x42}, {0xd, 0xe1}, {0x6, 0xfffffffc}, {0xd, 0xfff}, {0x6, 0x7ff}, {0xe019, 0xdeb}, {0xe, 0xffffaf0f}]}, @float={0xe, 0x0, 0x0, 0x10, 0xe}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000480)=""/246, 0x184, 0xf6, 0x1, 0x8}, 0x28)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x0, '\x00', r2, r10, 0x4, 0x3, 0x4}, 0x50)
recvmsg$unix(r6, &(0x7f0000000d40)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/191, 0xbf}, {&(0x7f0000000b80)=""/153, 0x99}], 0x2, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x102)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
close(r12)
r13 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r13, 0x6, 0x19, &(0x7f0000000200)=r13, 0x21)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001000)={r11, &(0x7f0000000e80)="c70e8c6a02ef888a1cfa465987fdca66e905e0e49010ba150667fc2815d79db99268d5a45f2e5e9df41d6952d965654f7d31395faa9901614be0ece16ba127e5da4195b69df006963be4b17fd0aed81368218b0f96967b4524f6691389cad42a566fd007d493afa7a2e31d4c677bf92ad23d119aef517704c68680eef4077dc111d82300ad42e8f5e9af7d87fb065d9659ec16f68b10c2b9f72282de5e8bd17cca69c04acb223403ccb150356b78f796475bc0f005ee2cb2d1370b68ab136e08d1cb19cefe4bc6ac1ecd4cb3c1b5f828bfa34d44b9", &(0x7f0000000f80)=""/90}, 0x20)

4.715332524s ago: executing program 3 (id=5595):
close(0xffffffffffffffff)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, 0x0, 0x20008000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
ioctl$SIOCSIFHWADDR(r4, 0x80086601, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

4.656698483s ago: executing program 0 (id=5597):
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x106)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0x7fff, 0x97, &(0x7f0000000bc0)=""/151, 0x40f00, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0], &(0x7f0000000600), 0x10, 0xffffff9e}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.275497207s ago: executing program 0 (id=5598):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x4, 0x0, 0x3be3d60c}, {0x6, 0xb, 0xca}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$kcm(0x11, 0x200000000000003, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000003c0), 0x4)
recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0)

4.241814353s ago: executing program 1 (id=5599):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = socket$kcm(0x11, 0x3, 0x0)
write$cgroup_pid(r0, 0x0, 0x0)
socket$kcm(0xf, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x13, 0x0, 0x0, 0x5, 0x6b, &(0x7f0000000ac0)=""/107, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0xc, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ec0)=[{0x3, 0x5, 0xb, 0x4}], 0x10, 0x3}, 0x94)
socket$kcm(0x1e, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

3.001499759s ago: executing program 1 (id=5600):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

2.885458829s ago: executing program 1 (id=5601):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0xe, &(0x7f0000001200)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xe, &(0x7f0000002140)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28], 0x230}, 0x8042)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x49405a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={&(0x7f00000002c0), 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.173435054s ago: executing program 3 (id=5602):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0xffffffffffffffff)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r2)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80581, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x0, r3, 0x0)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x9a)
socket$kcm(0x2, 0x922000000001, 0x84)
socket$kcm(0xa, 0x2, 0x73)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x894c, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000894)

1.151137868s ago: executing program 2 (id=5603):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)}], 0x1}, 0x10)
sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="9d", 0x1}], 0x1}, 0x10)

1.051919374s ago: executing program 2 (id=5604):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xb5, 0x0, 0x0, 0x8000000000000001, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, @perf_config_ext={0x7, 0x2}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x81, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000840)="a1", 0x1}], 0x1}, 0x4804)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)

1.007338132s ago: executing program 0 (id=5605):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10e, 0xa, &(0x7f0000000000), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="37ba8e9a2c78b2839e6a3f508a77faf1eb88503df753bff462e9ad1f9829aa", 0x1f}, {&(0x7f0000000180)="c4b36208e602457d9808f770aa79de603c63ffee7c7af62af0ec3ce94a978d2f7df180b70a62da9470f9cde443eb51a66c75f0b9a774f2047d88059f10fd663c62c2319abfd20cedb86a8c4dca1525020e76823bc65621207a328ba8f063230e7754254e", 0x64}], 0x2}, 0x8004494)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='a'], 0x9)

1.006140642s ago: executing program 1 (id=5606):
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x106)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x7}], &(0x7f0000000500)='syzkaller\x00', 0x7fff, 0x97, &(0x7f0000000bc0)=""/151, 0x40f00, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0], &(0x7f0000000600), 0x10, 0xffffff9e}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x81a0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
socket$kcm(0x11, 0x3, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

861.285206ms ago: executing program 2 (id=5607):
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80060, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x800000000000001, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x4, 0x7, 0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000300), 0xe}, 0x90000, 0xe, 0x3, 0x7, 0x4, 0x6, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x6, r1, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000200"/28], 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x9, 0x8, 0x3295a, r3, 0x62ed, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xa, @void, @value, @value=r2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x8, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r5], 0xfe33)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8ffdcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000240)=0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

535.99091ms ago: executing program 0 (id=5608):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x2}, 0x2080, 0x9, 0x2, 0x1, 0x7fff, 0x200005, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0x1, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a0000001c0000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='./file0\x00', 0x0, 0x18}, 0x18)
r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
close(r9)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a1, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000008000000030000000008000020000101", @ANYRES32=r2, @ANYBLOB="0300000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r9, <r13=>0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pi6   \x00'}, 0x20)
r14 = getpid()
perf_event_open(0x0, r14, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r15 = getpid()
r16 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="71e9185b619140e53faeff8f245d3fd3c676beba8c87af8d68f2bd3356ce68bce1a35483cd0c0fccdc510193a5b56c32b735b5a4fe49133bb3504b2ab61ff13ec3e77da15309e097a76f65993697852297af9fe0ce0bf5b08e29e5e59eea0080b9f8470cca64130da8455f2811051d22fb69ed748fcbc24819b13a65206553bda91edcc65959b658f67fa143ddf26d7a6c201540a1e6520e03a6f6502494f8bbfedbdb06d9d8c9688e7580", 0xab}, {&(0x7f0000000040)="593b0edc082499b9541b9ed7ab9c4b14a7b899d4ed", 0x15}, {&(0x7f0000000280)="34bdaa9b166c006b77b633991025d21fa5018b743467484f87700599f7eb54796334b638a38757dd55459815325b34dcf3ff752ff705f3ad54c05d419181f6b3c2995bceb8b92657059d15c387f74e1bc85e0ed36b27a5f3d69126d528b18ab6b14853686b07b317d26ecb2f9156a474e488f02fdd5f9cb6e1ae2137dcf462387eb4a27be13046eb405910541592b4a3c308408d2a1d675130ff2e56d16867ef261a8dc4b080b3aa5cf6dca3c05ab0b37d2a28929e2773137376a67aafc7783a007f4b49bffd0184116cdfe7bb02a8a093e5b4440f9b00a2", 0xd8}, {&(0x7f00000004c0)="0e8ea9131c5513a896fb5656e5a4d3463e160b0b7d431c69397264f10c3affe2120904c4df7d3bedad8179d5c453011ea1725fd08cb224f65a2e220b108dab6687d57936a47704726bd249e4abb2af862be24d0cca253af07214483319f5a95c0df6e87aef18949270", 0x69}, {&(0x7f0000000380)="7d8e0c4bf7064e1b663d9a", 0xb}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="2400000000000000010000000100", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="28000000000000000100df3f01000000", @ANYRES32=r13, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="00000000240000000000000001000000010000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r16, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x20008000}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1e, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@call={0x85, 0x0, 0x0, 0x58}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xe6, &(0x7f0000000cc0)=""/230, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x9, 0xffffffff, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r5, r6, r7, r8, r12, r7]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

471.651961ms ago: executing program 2 (id=5609):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

329.475845ms ago: executing program 1 (id=5610):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f00000001c0)=r2, 0xa1)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r6 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x7, '\x00', r7, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xd2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff})
r9 = socket$kcm(0x21, 0x2, 0xa)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x4, @remote}}, 0x24, 0x0, 0x1c, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444)
setsockopt$sock_attach_bpf(r8, 0x1, 0x42, &(0x7f0000000040), 0x3b)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1)
close(r6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$kcm(0x10, 0x2, 0x10)
r10 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x1d, 0x0, 0x0)

287.210841ms ago: executing program 2 (id=5611):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x18010, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1\x00', 0x800})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '})

280.435723ms ago: executing program 3 (id=5612):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0)

211.771304ms ago: executing program 0 (id=5613):
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10)
sendmsg$inet(r0, 0x0, 0x10)

137.767777ms ago: executing program 3 (id=5614):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xc, 0xe, &(0x7f0000001200)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xe, &(0x7f0000002140)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28], 0x230}, 0x8042)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r4}, 0x8)
r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0x49405a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={&(0x7f00000002c0), 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)

136.478437ms ago: executing program 1 (id=5615):
socket$kcm(0x2, 0x3, 0x2)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x60000000, &(0x7f0000000580)="f07d811fad132f10c373077fd50fff1b381ecc820a58433ee3ddeb38e518b7e862e96ea295cf86fbaebfe44e029280925dd77b65efb19194c8d681b282dea617e39429ce65b83b2192f67156c17f9865e1457efa817f160b83a3dafbf68464b8f2cf0c82aee42feca0cb764d7d71500cb8bddfa6b29c01b8f59beee9a99f79f84db871aae1056a87af68109ce724d8d1dc2d2668a5956d0a8c27aa352c8b2c85e0290d5a226b2e91c42a77da0e3ef5e20eee281a1fcbd87fdbee656609fc644f2b6b264cefc492e89050bc8f902b8baa4a6eedca232913ac80d233ec9e3fec5f2dedb901acdf5afcd4b3", 0xea, &(0x7f0000000740), &(0x7f0000000840), &(0x7f0000000940)="bdc7e278f250f0fe26a8c03f6d1544e618bb1fefac50322a61756ad23a4233661da14360fcf7cd57d4701254885c18ba112a6ee9616055854f9c84cd81884a3cc442b4ec3cd2766c31349d36ee41dbe6734184a8483ec1d5ab6f1d6df1f2626cd58474971e064b516bd0e2f5938409219559f56db651ae3cba5022005c5b223de4")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

79.830416ms ago: executing program 2 (id=5616):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f00000002c0)=r2, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$unix(r1, &(0x7f0000002640)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000000f80)="7b687cf99a4b7308d1cb1e88d60ce2c1dc4c8b81e2377c50d78cb9fc187cc1c8839a1f37b412ec342c61947b2171880de291e39e976af86685a157ed666380be9e0f6a38a3bfda69c08cf607f6f0f9c71e6929a35ee2c67cccf6fc1d80c7d8a5cccaad27c724a1f58ca6e964964f1b3d16bbb66e4efe3a63bb854427b14b01747b9bf19d5156514249f0932e00767c9e995829b10067be9c7eeade62cebd270db9cee62664a0e0e8eaf08faec5ef7a3ef13c3969a71a906b0079d29962a0003695c5887959b3132d4d003dd100"/216, 0xd8}, {&(0x7f00000005c0)="b65aeb2265", 0x5}, {&(0x7f0000000600)="9917", 0x2}, {&(0x7f0000000640)="61911ef935698dd692ce76600b573ac8d8fae95c11ec88a835ab7a4cde5a841ff65119c5733982981bf96639261b9dad1dc1006923478ef55c466aaba471bfd52eb8", 0x42}, {&(0x7f00000006c0)="51b6c2d83949b2d6a630f009174d5beefcc4b03f03be5c16220b8696ea2194e6edbb21f36b5a9ca3bd6ebf7ffe06558726bc039c44323bdf018e8209025bcbee70263e36bd5e2d3f935a851b64de8c3543c6fda4d392738feaa715fc0b479c5669bc16b8fed2820ec1eccbdafececc1c40a34277f89642a4aa86d2b21d36772b9b8dae83129f6b0c7ef76537587b38131b08da37e89b7c469d8453098d05d6a69774bd09845b5572268d945a02e188c6757d5dccc60c6b1b61c686786f37a385a388f5230cb16931dc5cd4b6e37f59b8a9c267de073edda31fe55dbc9363497936e5910d35cc", 0xe6}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="b19163c05ae80356ada4105a8fd1f5e5635ea3d0354d32d7996646d8c261e730a9dfc211cdffb75a24d532d548e3a6d2c8517e5940298b48530e6abf10b1fe8f63bf420d6a7b13478f33472392cfccda9b15db262ce12cd35bfcbc8bdb56366391f44666c312dafd4344614aba99c752f1351024266295a33b63c1a9fc42242d0a6a200eccc748bd46ce6852998570b38cdbe76ef144632c4b9a3c8e2fc3c910cc4231b803ca", 0xa6}, {&(0x7f0000002480)="8c3986c5fc811d8bfcac9deeb995cd62fa17d8b52dfee8a8798d61a3cdb7a797cc5f61bde6d92f24da6c65cd10841cc70da6bd26498f666f8c517a65d999a94e63e5758645446f36561f413a084d83b2be1a9114bbee63c6de7fa7048997b674ced49c079b968e1a214f3c027a8fc7de1d082131aabb0f2314867dff728d76c8229630fd53b364b944e27c376d0d67b909d3fa7e6129705540c35193b6d1f248ae7486f0fa527605", 0xa8}, {&(0x7f0000002540)="2d9cf39123525a5439493dd91cc31212", 0x10}], 0x9, 0x0, 0x0, 0x4}, 0x20004000)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbd}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="c0", 0x1}], 0x1}, 0x0)
sendmsg$inet(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000007c0)="1b4be8f0dce32772c28f03bd2c54549700e4d4440a390b9f94700257dff68b49f95a630f7ecd759a4f4880d6b63737d600038cce8677753d5ca802aaf48e00d7386f2e70ea6a627c8c756c344a3ce20c33362e6bc1bf09dcf9be6f05ac38f9053d1b21788518806f8959376c9b9e023e0172164c18a18a534df2de1f749fe1712e7d8a0b2f638973994a932240ffd40cc576741754cc128d001057fae680873ad71290d0535d859e06e93a2edf35eb45bc4ba2c0e8f07921452cc4405e8057", 0xbf}, {&(0x7f00000009c0)="d3a8087665a47c19edd2fb78a00407686ae1f830f3a03534acea262f2ea138bf934760bdbbeef4e269b8b44e8849eb2632838590670127feeadda5fa2b45c684db4e3468f60ce1c6285e4125c6447e5e58526bef2ab6a50ab3968df92eefaddc0a0025370c669b51fbdeae165a1c3d3fc026", 0x72}, {&(0x7f0000000a40)="b8deb1933a707d8a280b1028b3301b1ab1a11e51ffec19bb0b42597dfb383228a94bf5c806b9baef6fe81aa41fb024eb5577354c9fc87649c5476fd32543c37928fbc2dffc681cbc8d3bad100506ae6eec4e64cb944d72878aeabcdf2dd9e60a213ff8ab5009192ef8e732dc4228d9e8da9ba6cd7e4375e6f6c6288cf6aaec07d301eb5fc17324a4229bdc8cdcc835742be05fbdd8fc4ce41d85e419d732a02dda7250b6f46e9106bb2557a56d5b88f8d1bd3e56dd95e13e52b6bf3c92b9ee3483108b13670c68b2418ecd", 0xcb}, {&(0x7f0000000c40)="93f8210afaf9693ece6a80868ad56f04055b3eba564c1858939cccee056e86ef5f804d09005feddfcbd34ab2bfee95e47ac6a8f791a562364e21be3cf3c69933feaa97cd7272e793eef38faa191b0560e8ee761aefad7836cdd8d6572a4959de60a4eb394eb3f45a0d52f054bc5faf58bbc480c5798d2c9553bf421faa7e52f2b85dc9717b999634a0f2bc91c77b967c7beccb94500ec0224e4ac0f9192cc9983c639796ac2cf58dec26622e169d9d0231b6e2980bac79b63d7a2412e7a1120e2a5c902d3857fa5f7562a695b228a57d5288c11ebf7f3177ddbd129b0ff0493abb13c6240673f6f4429ecc329a6ef9396e", 0xf1}, {&(0x7f0000000d40)="15383c5e1c1c1564468f90f03f8c3a6d4bb9f29cf7ad6e8c308d8b5a6ab43d4dce3b57ea9675d0f35932dee66aaad858a8294891f998a43458e667b6e2ffb682b5ea851d0e6c0b0a46074e53a069ba8a604959b0bf980ce56e774c2a9affd195b74f18e2bf33ba138668506e56f5d03c434dee9dfd125634b07db549081749f6ede441ee89fd00cc5fbd85e6652160d2c1573b42f070fd82dfd0a0aabd703c7a05b60a14bec9fecdb97aabb2962c8de9e54ffbdadd598c19761565fcc1e6ae8c5fb2e6b07d5c0f7dd3354dc2ee862d17e5aa75ef0002c194e50ce4d6875357530c", 0xe1}, {&(0x7f0000000e40)="1b039d53a5b72e53ec3ed625ea53cca3fe67a8ce7a3d", 0x16}], 0x6, &(0x7f0000000f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x40040)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000000000000007005b7108e884f1b57fc6d3ef00000009000095000000292c0a"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x14, &(0x7f00000000c0)={0x9, 0x11}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

0s ago: executing program 0 (id=5617):
r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80060, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x800000000000001, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x38000, 0x9e4, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f0000000340)={0x5, 0x80, 0x4, 0x7, 0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000300), 0xe}, 0x90000, 0xe, 0x3, 0x7, 0x4, 0x6, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x6, r1, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000200"/28], 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYBLOB], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x9, 0x8, 0x3295a, r3, 0x62ed, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xa, @void, @value, @value=r2}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x8, 0xffffffff, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r5], 0xfe33)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000eb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8ffdcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000240)=0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.1.4711'.
[ 1085.176412][T19694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4711'.
[ 1086.613193][T19737] validate_nla: 9 callbacks suppressed
[ 1086.613225][T19737] netlink: 'syz.1.4720': attribute type 10 has an invalid length.
[ 1087.126497][T19748] __nla_validate_parse: 4 callbacks suppressed
[ 1087.126534][T19748] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.4726'.
[ 1087.464506][T19754] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4729'.
[ 1088.041591][T19768] netlink: 'syz.1.4734': attribute type 10 has an invalid length.
[ 1088.453449][T19778] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4738'.
[ 1088.523422][T19781] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4738'.
[ 1088.546075][T19778] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4738'.
[ 1088.757500][T19780] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.4739'.
[ 1089.356453][T19796] netlink: 'syz.2.4747': attribute type 10 has an invalid length.
[ 1089.396408][T19798] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4745'.
[ 1089.406487][T19799] netlink: 'syz.1.4746': attribute type 22 has an invalid length.
[ 1089.415020][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'.
[ 1089.437600][T19799] pim6reg0: tun_chr_ioctl cmd 2147767520
[ 1089.454529][T19799] pim6reg0: tun_chr_ioctl cmd 1074025673
[ 1089.483874][T19800] netlink: 'syz.1.4746': attribute type 22 has an invalid length.
[ 1089.500618][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'.
[ 1090.140860][T19813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1090.152266][T19813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1090.161605][T19813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1090.169018][T19816] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4752'.
[ 1090.181485][T19813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1090.224218][T19813] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1090.231791][T19813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1090.915983][T19811] chnl_net:caif_netlink_parms(): no params data found
[ 1091.023596][T19811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.033758][T19811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.046591][T19811] bridge_slave_0: entered allmulticast mode
[ 1091.057433][T19811] bridge_slave_0: entered promiscuous mode
[ 1091.074278][T19811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.081664][T19811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.091986][T19811] bridge_slave_1: entered allmulticast mode
[ 1091.099934][T19811] bridge_slave_1: entered promiscuous mode
[ 1091.144447][T19811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.165934][T19811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.217383][T19811] team0: Port device team_slave_0 added
[ 1091.226801][T19811] team0: Port device team_slave_1 added
[ 1091.273370][T19811] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.280722][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.312524][T19811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.327621][T19811] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.336502][T19811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.367003][T19811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.341066][T13180] Bluetooth: hci2: command tx timeout
[ 1093.765745][T19811] hsr_slave_0: entered promiscuous mode
[ 1093.775519][T19811] hsr_slave_1: entered promiscuous mode
[ 1093.883826][T19837] netlink: 'syz.1.4757': attribute type 10 has an invalid length.
[ 1094.164625][T19844] FAULT_INJECTION: forcing a failure.
[ 1094.164625][T19844] name failslab, interval 1, probability 0, space 0, times 0
[ 1094.185501][T19844] CPU: 1 PID: 19844 Comm: syz.1.4760 Not tainted syzkaller #0
[ 1094.193025][T19844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1094.203098][T19844] Call Trace:
[ 1094.206382][T19844]  <TASK>
[ 1094.209320][T19844]  dump_stack_lvl+0x18c/0x250
[ 1094.214019][T19844]  ? show_regs_print_info+0x20/0x20
[ 1094.219236][T19844]  ? load_image+0x420/0x420
[ 1094.223749][T19844]  ? verify_lock_unused+0x140/0x140
[ 1094.228952][T19844]  ? perf_trace_lock+0x304/0x3b0
[ 1094.233905][T19844]  should_fail_ex+0x39d/0x4d0
[ 1094.238596][T19844]  should_failslab+0x9/0x20
[ 1094.243107][T19844]  slab_pre_alloc_hook+0x59/0x310
[ 1094.248147][T19844]  kmem_cache_alloc+0x5a/0x2d0
[ 1094.252916][T19844]  ? skb_clone+0x1eb/0x370
[ 1094.257343][T19844]  skb_clone+0x1eb/0x370
[ 1094.261592][T19844]  __netlink_deliver_tap+0x41c/0x830
[ 1094.266989][T19844]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1094.272289][T19844]  netlink_deliver_tap+0x19c/0x1b0
[ 1094.277444][T19844]  netlink_unicast+0x72c/0x8d0
[ 1094.282228][T19844]  netlink_sendmsg+0x8d0/0xbf0
[ 1094.287000][T19844]  ? perf_trace_lock+0x304/0x3b0
[ 1094.291955][T19844]  ? netlink_getsockopt+0x590/0x590
[ 1094.297194][T19844]  ? aa_sock_msg_perm+0x94/0x150
[ 1094.302147][T19844]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1094.307431][T19844]  ? security_socket_sendmsg+0x80/0xa0
[ 1094.312911][T19844]  ? netlink_getsockopt+0x590/0x590
[ 1094.318134][T19844]  ____sys_sendmsg+0x5ba/0x960
[ 1094.322931][T19844]  ? __asan_memset+0x22/0x40
[ 1094.327554][T19844]  ? __sys_sendmsg_sock+0x30/0x30
[ 1094.332592][T19844]  ? __import_iovec+0x5f2/0x850
[ 1094.337462][T19844]  ? import_iovec+0x73/0xa0
[ 1094.342059][T19844]  ___sys_sendmsg+0x2a6/0x360
[ 1094.346777][T19844]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1094.351572][T19844]  ? trace_call_bpf+0xc3/0x6c0
[ 1094.356376][T19844]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1094.361281][T19844]  ? __x64_sys_sendmsg+0x80/0x80
[ 1094.366238][T19844]  ? lockdep_hardirqs_on+0x98/0x150
[ 1094.371446][T19844]  do_syscall_64+0x55/0xa0
[ 1094.375863][T19844]  ? clear_bhb_loop+0x40/0x90
[ 1094.380573][T19844]  ? clear_bhb_loop+0x40/0x90
[ 1094.385305][T19844]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1094.391222][T19844] RIP: 0033:0x7fa93819c819
[ 1094.395643][T19844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1094.415435][T19844] RSP: 002b:00007fa93911b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1094.423865][T19844] RAX: ffffffffffffffda RBX: 00007fa938415fa0 RCX: 00007fa93819c819
[ 1094.431921][T19844] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003
[ 1094.439928][T19844] RBP: 00007fa93911b090 R08: 0000000000000000 R09: 0000000000000000
[ 1094.447902][T19844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1094.455879][T19844] R13: 00007fa938416038 R14: 00007fa938415fa0 R15: 00007fff3c446278
[ 1094.463874][T19844]  </TASK>
[ 1094.468695][T13180] Bluetooth: hci2: command tx timeout
[ 1094.504480][T19811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.642383][T19811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.669195][T19848] __nla_validate_parse: 2 callbacks suppressed
[ 1094.669214][T19848] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4762'.
[ 1094.863662][T19811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1096.489008][T13180] Bluetooth: hci2: command tx timeout
[ 1096.508022][T19854] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4762'.
[ 1096.529358][T19848] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4762'.
[ 1097.542893][T19864] netlink: 'syz.2.4767': attribute type 10 has an invalid length.
[ 1097.976811][T19811] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1098.207296][T19811] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1098.356325][T19811] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1098.445138][T19811] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1098.566629][T19871] FAULT_INJECTION: forcing a failure.
[ 1098.566629][T19871] name failslab, interval 1, probability 0, space 0, times 0
[ 1098.589162][T13180] Bluetooth: hci2: command tx timeout
[ 1098.599139][T19871] CPU: 1 PID: 19871 Comm: syz.1.4770 Not tainted syzkaller #0
[ 1098.606648][T19871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1098.616723][T19871] Call Trace:
[ 1098.620018][T19871]  <TASK>
[ 1098.622965][T19871]  dump_stack_lvl+0x18c/0x250
[ 1098.627670][T19871]  ? show_regs_print_info+0x20/0x20
[ 1098.632891][T19871]  ? load_image+0x420/0x420
[ 1098.637508][T19871]  ? __might_sleep+0xe0/0xe0
[ 1098.642116][T19871]  ? __lock_acquire+0x7d40/0x7d40
[ 1098.647159][T19871]  should_fail_ex+0x39d/0x4d0
[ 1098.651844][T19871]  should_failslab+0x9/0x20
[ 1098.656345][T19871]  slab_pre_alloc_hook+0x59/0x310
[ 1098.661372][T19871]  ? __lock_acquire+0x7d40/0x7d40
[ 1098.666402][T19871]  kmem_cache_alloc_node+0x60/0x320
[ 1098.671602][T19871]  ? __alloc_skb+0x103/0x2c0
[ 1098.676198][T19871]  __alloc_skb+0x103/0x2c0
[ 1098.680607][T19871]  netlink_sendmsg+0x66a/0xbf0
[ 1098.685378][T19871]  ? netlink_getsockopt+0x590/0x590
[ 1098.690666][T19871]  ? aa_sock_msg_perm+0x94/0x150
[ 1098.695600][T19871]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1098.700886][T19871]  ? security_socket_sendmsg+0x80/0xa0
[ 1098.706336][T19871]  ? netlink_getsockopt+0x590/0x590
[ 1098.711534][T19871]  ____sys_sendmsg+0x5ba/0x960
[ 1098.716297][T19871]  ? __asan_memset+0x22/0x40
[ 1098.720884][T19871]  ? __sys_sendmsg_sock+0x30/0x30
[ 1098.725898][T19871]  ? __import_iovec+0x5f2/0x850
[ 1098.730747][T19871]  ? import_iovec+0x73/0xa0
[ 1098.735248][T19871]  ___sys_sendmsg+0x2a6/0x360
[ 1098.739924][T19871]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1098.744694][T19871]  ? trace_call_bpf+0xc3/0x6c0
[ 1098.749471][T19871]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1098.754317][T19871]  ? __x64_sys_sendmsg+0x80/0x80
[ 1098.759255][T19871]  ? lockdep_hardirqs_on+0x98/0x150
[ 1098.764449][T19871]  do_syscall_64+0x55/0xa0
[ 1098.769030][T19871]  ? clear_bhb_loop+0x40/0x90
[ 1098.773705][T19871]  ? clear_bhb_loop+0x40/0x90
[ 1098.778465][T19871]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1098.784354][T19871] RIP: 0033:0x7fa93819c819
[ 1098.788765][T19871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.808364][T19871] RSP: 002b:00007fa93911b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1098.816803][T19871] RAX: ffffffffffffffda RBX: 00007fa938415fa0 RCX: 00007fa93819c819
[ 1098.824774][T19871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[ 1098.832909][T19871] RBP: 00007fa93911b090 R08: 0000000000000000 R09: 0000000000000000
[ 1098.840873][T19871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1098.848836][T19871] R13: 00007fa938416038 R14: 00007fa938415fa0 R15: 00007fff3c446278
[ 1098.856811][T19871]  </TASK>
[ 1098.884594][T19811] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1098.919329][T19811] 8021q: adding VLAN 0 to HW filter on device team0
[ 1098.939674][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.946826][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1099.025252][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.032462][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1099.060149][T19875] netlink: 'syz.2.4772': attribute type 10 has an invalid length.
[ 1099.165224][T19881] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4774'.
[ 1099.221434][T19882] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4773'.
[ 1099.245411][T19885] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4774'.
[ 1099.262015][T19881] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4774'.
[ 1099.568260][T19811] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1099.762523][T19811] veth0_vlan: entered promiscuous mode
[ 1099.840850][T19811] veth1_vlan: entered promiscuous mode
[ 1100.012790][T19891] netlink: 'syz.0.4776': attribute type 10 has an invalid length.
[ 1100.095044][T19811] veth0_macvtap: entered promiscuous mode
[ 1100.121561][T19811] veth1_macvtap: entered promiscuous mode
[ 1100.174355][T19811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1100.188421][T19811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.209711][T19811] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1100.233472][T19811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1100.246916][T19811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1100.260441][T19811] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1100.280598][T19811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.292500][T19811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.302973][T19811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1100.318456][T19811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1102.431511][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1102.443022][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1102.715323][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1102.730380][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1109.401239][T19976] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4807'.
[ 1110.336428][T19989] netlink: 'syz.3.4812': attribute type 2 has an invalid length.
[ 1110.352963][T19989] netlink: 'syz.3.4812': attribute type 8 has an invalid length.
[ 1110.390647][T19989] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4812'.
[ 1110.411449][T19991] netlink: 'syz.3.4812': attribute type 2 has an invalid length.
[ 1110.421906][T19991] netlink: 'syz.3.4812': attribute type 8 has an invalid length.
[ 1110.506611][T19991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4812'.
[ 1111.765694][T20003] netlink: 'syz.2.4819': attribute type 2 has an invalid length.
[ 1112.018788][T20003] netlink: 'syz.2.4819': attribute type 8 has an invalid length.
[ 1112.060020][T20003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4819'.
[ 1112.076875][T20003] netlink: 'syz.2.4819': attribute type 2 has an invalid length.
[ 1112.085453][T20003] netlink: 'syz.2.4819': attribute type 8 has an invalid length.
[ 1112.116696][T20003] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4819'.
[ 1112.201848][T20010] netlink: 'syz.3.4821': attribute type 10 has an invalid length.
[ 1112.227848][T20010] bond0: (slave bond_slave_0): Releasing backup interface
[ 1112.411526][T20017] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4823'.
[ 1113.392868][T20023] netlink: 'syz.2.4826': attribute type 2 has an invalid length.
[ 1113.408133][T20023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4826'.
[ 1113.439600][T20023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4826'.
[ 1113.603995][T20032] FAULT_INJECTION: forcing a failure.
[ 1113.603995][T20032] name failslab, interval 1, probability 0, space 0, times 0
[ 1113.617297][T20032] CPU: 1 PID: 20032 Comm: syz.2.4830 Not tainted syzkaller #0
[ 1113.624807][T20032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1113.634881][T20032] Call Trace:
[ 1113.638176][T20032]  <TASK>
[ 1113.641153][T20032]  dump_stack_lvl+0x18c/0x250
[ 1113.645876][T20032]  ? show_regs_print_info+0x20/0x20
[ 1113.651107][T20032]  ? load_image+0x420/0x420
[ 1113.655652][T20032]  should_fail_ex+0x39d/0x4d0
[ 1113.660384][T20032]  should_failslab+0x9/0x20
[ 1113.664937][T20032]  slab_pre_alloc_hook+0x59/0x310
[ 1113.669992][T20032]  kmem_cache_alloc_node+0x60/0x320
[ 1113.675215][T20032]  ? __alloc_skb+0x103/0x2c0
[ 1113.679827][T20032]  __alloc_skb+0x103/0x2c0
[ 1113.684356][T20032]  fdb_notify+0xa6/0x160
[ 1113.688623][T20032]  fdb_delete+0xdd6/0x1060
[ 1113.693091][T20032]  ? __vlan_flush+0x3c0/0x3c0
[ 1113.697796][T20032]  ? fdb_delete+0x33a/0x1060
[ 1113.702429][T20032]  ? fdb_notify+0x160/0x160
[ 1113.706975][T20032]  br_fdb_find_delete_local+0x122/0x140
[ 1113.713070][T20032]  nbp_vlan_delete+0x183/0x210
[ 1113.717859][T20032]  br_vlan_info+0x13e/0x460
[ 1113.722380][T20032]  ? br_process_vlan_info+0x8a0/0x8a0
[ 1113.727793][T20032]  ? mark_lock+0x94/0x320
[ 1113.732146][T20032]  br_process_vlan_info+0x316/0x8a0
[ 1113.737360][T20032]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1113.743466][T20032]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1113.750091][T20032]  ? br_getlink+0x180/0x180
[ 1113.754679][T20032]  br_afspec+0x399/0x5f0
[ 1113.758957][T20032]  ? br_setport+0x1680/0x1680
[ 1113.763652][T20032]  ? __mutex_trylock_common+0x159/0x260
[ 1113.769234][T20032]  br_dellink+0x220/0x2c0
[ 1113.773590][T20032]  ? br_afspec+0x5f0/0x5f0
[ 1113.778024][T20032]  ? mutex_is_locked+0x12/0x40
[ 1113.782806][T20032]  rtnl_bridge_dellink+0x489/0x6f0
[ 1113.787937][T20032]  ? rtnl_bridge_getlink+0xd10/0xd10
[ 1113.793254][T20032]  ? rtnl_bridge_getlink+0xd10/0xd10
[ 1113.798572][T20032]  rtnetlink_rcv_msg+0x869/0xfa0
[ 1113.803547][T20032]  ? rtnetlink_rcv_msg+0x221/0xfa0
[ 1113.808693][T20032]  ? lockdep_hardirqs_on+0x98/0x150
[ 1113.813945][T20032]  ? rtnetlink_bind+0x80/0x80
[ 1113.818744][T20032]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1113.824923][T20032]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1113.830924][T20032]  ? lock_chain_count+0x20/0x20
[ 1113.835794][T20032]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1113.841239][T20032]  ? lockdep_hardirqs_on+0x98/0x150
[ 1113.846459][T20032]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1113.851843][T20032]  ? _local_bh_enable+0xa0/0xa0
[ 1113.856711][T20032]  ? __dev_queue_xmit+0x265/0x3660
[ 1113.861835][T20032]  ? __dev_queue_xmit+0x265/0x3660
[ 1113.866966][T20032]  ? __dev_queue_xmit+0x1b2c/0x3660
[ 1113.872197][T20032]  ? __dev_queue_xmit+0x265/0x3660
[ 1113.877355][T20032]  ? ref_tracker_free+0x690/0x840
[ 1113.882411][T20032]  netlink_rcv_skb+0x241/0x4d0
[ 1113.887208][T20032]  ? rtnetlink_bind+0x80/0x80
[ 1113.891997][T20032]  ? netlink_ack+0x1180/0x1180
[ 1113.896896][T20032]  ? __lock_acquire+0x7d40/0x7d40
[ 1113.902041][T20032]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1113.907261][T20032]  netlink_unicast+0x751/0x8d0
[ 1113.912055][T20032]  netlink_sendmsg+0x8d0/0xbf0
[ 1113.916850][T20032]  ? netlink_getsockopt+0x590/0x590
[ 1113.922080][T20032]  ? aa_sock_msg_perm+0x94/0x150
[ 1113.927045][T20032]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1113.932353][T20032]  ? security_socket_sendmsg+0x80/0xa0
[ 1113.937829][T20032]  ? netlink_getsockopt+0x590/0x590
[ 1113.943049][T20032]  ____sys_sendmsg+0x5ba/0x960
[ 1113.947837][T20032]  ? __asan_memset+0x22/0x40
[ 1113.952444][T20032]  ? __sys_sendmsg_sock+0x30/0x30
[ 1113.957478][T20032]  ? __import_iovec+0x3fa/0x850
[ 1113.962359][T20032]  ? import_iovec+0x73/0xa0
[ 1113.966885][T20032]  ___sys_sendmsg+0x2a6/0x360
[ 1113.971593][T20032]  ? get_pid_task+0x20/0x1e0
[ 1113.976206][T20032]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1113.981008][T20032]  ? __lock_acquire+0x7d40/0x7d40
[ 1113.986075][T20032]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1113.990959][T20032]  ? __x64_sys_sendmsg+0x80/0x80
[ 1113.996023][T20032]  ? lockdep_hardirqs_on+0x98/0x150
[ 1114.001245][T20032]  do_syscall_64+0x55/0xa0
[ 1114.005674][T20032]  ? clear_bhb_loop+0x40/0x90
[ 1114.010366][T20032]  ? clear_bhb_loop+0x40/0x90
[ 1114.015064][T20032]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1114.020973][T20032] RIP: 0033:0x7f49d979c819
[ 1114.025406][T20032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1114.045039][T20032] RSP: 002b:00007f49da728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1114.053485][T20032] RAX: ffffffffffffffda RBX: 00007f49d9a15fa0 RCX: 00007f49d979c819
[ 1114.061476][T20032] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1114.069467][T20032] RBP: 00007f49da728090 R08: 0000000000000000 R09: 0000000000000000
[ 1114.077473][T20032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1114.085463][T20032] R13: 00007f49d9a16038 R14: 00007f49d9a15fa0 R15: 00007ffdf8b656c8
[ 1114.093471][T20032]  </TASK>
[ 1114.593969][T19813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1114.630600][T19813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1114.671562][T19813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1114.690895][T19813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1114.711185][T19813] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1114.728774][T19813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1115.206742][T20035] chnl_net:caif_netlink_parms(): no params data found
[ 1115.297861][T20052] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4835'.
[ 1115.382910][T20035] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1115.392059][T20035] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1115.402413][T20035] bridge_slave_0: entered allmulticast mode
[ 1115.411210][T20035] bridge_slave_0: entered promiscuous mode
[ 1115.423252][T20035] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1115.431974][T20035] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.442094][T20035] bridge_slave_1: entered allmulticast mode
[ 1115.459651][T20035] bridge_slave_1: entered promiscuous mode
[ 1115.494566][T20035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1115.506771][T20035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1115.543712][T20035] team0: Port device team_slave_0 added
[ 1115.552668][T20035] team0: Port device team_slave_1 added
[ 1115.588562][T20035] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1115.595963][T20035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1115.628046][T20035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1115.641676][T20035] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1115.649164][T20035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1115.676231][T20035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1115.731986][T20035] hsr_slave_0: entered promiscuous mode
[ 1115.742811][T20035] hsr_slave_1: entered promiscuous mode
[ 1115.750601][T20035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1115.762420][T20035] Cannot create hsr debugfs directory
[ 1115.979183][T20035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.222308][T20035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.247733][T20057] validate_nla: 5 callbacks suppressed
[ 1116.247768][T20057] netlink: 'syz.0.4844': attribute type 10 has an invalid length.
[ 1116.284057][T20062] netlink: 'syz.3.4838': attribute type 2 has an invalid length.
[ 1116.296539][T20062] netlink: 'syz.3.4838': attribute type 8 has an invalid length.
[ 1116.305325][T20062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4838'.
[ 1116.362603][T20062] netlink: 'syz.3.4838': attribute type 2 has an invalid length.
[ 1116.372914][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.379516][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.392673][T20062] netlink: 'syz.3.4838': attribute type 8 has an invalid length.
[ 1116.409668][T20062] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4838'.
[ 1116.765073][T20035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1116.809109][T19813] Bluetooth: hci4: command tx timeout
[ 1116.924440][T20035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.073135][T20074] netlink: 'syz.1.4842': attribute type 10 has an invalid length.
[ 1117.253209][T20035] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1117.905686][T20035] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1117.943436][T20035] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1117.979104][T20035] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1118.015744][T20079] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4845'.
[ 1118.103640][T20084] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4845'.
[ 1118.118689][T20083] netlink: 'syz.3.4847': attribute type 10 has an invalid length.
[ 1118.127682][T20079] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4845'.
[ 1118.168147][T20035] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1118.203842][T20085] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4846'.
[ 1118.301588][T20035] 8021q: adding VLAN 0 to HW filter on device team0
[ 1118.347957][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1118.355271][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1118.401722][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1118.409000][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1118.724580][T20092] netlink: 'syz.3.4849': attribute type 2 has an invalid length.
[ 1118.734581][T20092] netlink: 'syz.3.4849': attribute type 8 has an invalid length.
[ 1118.747281][T20092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4849'.
[ 1118.792675][T20092] netlink: 'syz.3.4849': attribute type 2 has an invalid length.
[ 1118.817833][T20092] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4849'.
[ 1118.900266][T19813] Bluetooth: hci4: command tx timeout
[ 1119.208113][T20099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4850'.
[ 1119.266870][T20035] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1119.385594][T20035] veth0_vlan: entered promiscuous mode
[ 1119.431629][T20035] veth1_vlan: entered promiscuous mode
[ 1119.507778][T20035] veth0_macvtap: entered promiscuous mode
[ 1119.561842][T20035] veth1_macvtap: entered promiscuous mode
[ 1119.653853][T20035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.665000][T20035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.675363][T20035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1119.686159][T20035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.702090][T20035] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1119.725538][T20035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.741452][T20035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.760876][T20035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1119.772096][T20035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1119.783531][T20035] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1119.794725][T20035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.803603][T20035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.812917][T20035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1119.834565][T20035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.303421][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1120.380406][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1120.968671][T19813] Bluetooth: hci4: command tx timeout
[ 1123.012012][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1123.042455][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1123.050246][T19813] Bluetooth: hci4: command tx timeout
[ 1123.115191][T20114] __nla_validate_parse: 5 callbacks suppressed
[ 1123.115210][T20114] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4855'.
[ 1123.160543][T20116] validate_nla: 13 callbacks suppressed
[ 1123.160578][T20116] netlink: 'syz.1.4856': attribute type 10 has an invalid length.
[ 1123.197551][T20119] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4855'.
[ 1123.224375][T20114] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4855'.
[ 1123.281122][T20124] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4858'.
[ 1124.346098][T20133] netlink: 'syz.3.4863': attribute type 2 has an invalid length.
[ 1124.367863][T20133] netlink: 'syz.3.4863': attribute type 8 has an invalid length.
[ 1124.408501][T20133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4863'.
[ 1124.452155][T20133] netlink: 'syz.3.4863': attribute type 2 has an invalid length.
[ 1124.478647][T20133] netlink: 'syz.3.4863': attribute type 8 has an invalid length.
[ 1124.503391][T20133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4863'.
[ 1125.110468][T13180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1125.120982][T13180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1125.130785][T13180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1125.139862][T13180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1125.150296][T13180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1125.157968][T20148] netlink: 'syz.3.4868': attribute type 10 has an invalid length.
[ 1125.157964][T13180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1125.515888][T20146] chnl_net:caif_netlink_parms(): no params data found
[ 1125.676609][T20146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1125.687634][T20146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1125.705706][T20146] bridge_slave_0: entered allmulticast mode
[ 1125.716177][T20146] bridge_slave_0: entered promiscuous mode
[ 1125.733761][T20146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1125.746452][T20146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.756515][T20146] bridge_slave_1: entered allmulticast mode
[ 1125.779297][T20146] bridge_slave_1: entered promiscuous mode
[ 1125.855344][T20146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1125.884317][T20146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1125.970146][T20146] team0: Port device team_slave_0 added
[ 1125.981762][T20146] team0: Port device team_slave_1 added
[ 1126.047150][T20146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1126.054835][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1126.089434][T20146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1126.117763][T20146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1126.127057][T20146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1126.161685][T20146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1127.772948][T20146] hsr_slave_0: entered promiscuous mode
[ 1127.796157][T20146] hsr_slave_1: entered promiscuous mode
[ 1127.824044][T20146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1127.834111][T20146] Cannot create hsr debugfs directory
[ 1128.006257][T20163] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4870'.
[ 1128.654844][T20146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1128.715563][T20170] C: renamed from team_slave_0 (while UP)
[ 1128.801566][T20170] netlink: 'syz.2.4874': attribute type 3 has an invalid length.
[ 1128.824304][T20170] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4874'.
[ 1129.254280][T20146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1129.464328][T20146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1129.769420][T19813] Bluetooth: hci0: command tx timeout
[ 1131.850355][T19813] Bluetooth: hci0: command tx timeout
[ 1132.948037][T20146] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1132.982023][T20146] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1133.030487][T20195] netlink: 'syz.1.4882': attribute type 10 has an invalid length.
[ 1133.049566][T20146] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1133.072167][T20146] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1133.199665][T20146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1133.251808][T20146] 8021q: adding VLAN 0 to HW filter on device team0
[ 1133.541843][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.549064][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1133.559928][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.567086][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1133.850476][T20204] netlink: 'syz.1.4891': attribute type 10 has an invalid length.
[ 1133.933638][T19813] Bluetooth: hci0: command tx timeout
[ 1134.377332][T20216] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4888'.
[ 1134.585936][T20146] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1134.656662][T20146] veth0_vlan: entered promiscuous mode
[ 1134.706753][T20146] veth1_vlan: entered promiscuous mode
[ 1134.816396][T20146] veth0_macvtap: entered promiscuous mode
[ 1134.859625][T20146] veth1_macvtap: entered promiscuous mode
[ 1134.914703][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1134.943593][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1134.971943][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1134.998508][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1135.028318][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1135.067871][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1135.120296][T20146] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1135.194574][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1135.214219][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1135.226987][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1135.238471][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1135.248399][T20146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1135.259787][T20146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1135.275938][T20146] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1135.443652][T20146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.453488][T20146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.462404][T20146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.471253][T20146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1135.840401][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1135.894456][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1136.011274][T19813] Bluetooth: hci0: command tx timeout
[ 1136.177411][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1136.194771][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1136.271234][T20234] netlink: 'syz.3.4896': attribute type 10 has an invalid length.
[ 1136.313825][T20236] netlink: 'syz.2.4897': attribute type 10 has an invalid length.
[ 1136.396106][T20236] bond0: (slave bond_slave_0): Releasing backup interface
[ 1136.599369][T20240] netlink: 'syz.0.4862': attribute type 10 has an invalid length.
[ 1136.670189][T20240] bond0: (slave bond_slave_0): Releasing backup interface
[ 1137.039127][T20253] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4900'.
[ 1139.233709][T13180] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1139.243008][T13180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1139.255296][T13180] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1139.269417][T13180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1139.279246][T13180] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1139.286707][T13180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1139.663394][T20269] chnl_net:caif_netlink_parms(): no params data found
[ 1139.674740][T20277] netlink: 'syz.0.4906': attribute type 10 has an invalid length.
[ 1139.751324][T20269] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1139.758827][T20269] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.766121][T20269] bridge_slave_0: entered allmulticast mode
[ 1139.774248][T20269] bridge_slave_0: entered promiscuous mode
[ 1139.783445][T20269] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1139.791069][T20269] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.803188][T20269] bridge_slave_1: entered allmulticast mode
[ 1139.833545][T20269] bridge_slave_1: entered promiscuous mode
[ 1139.903062][T20269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1139.939719][T20269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1139.956703][T20286] netlink: 'syz.0.4907': attribute type 10 has an invalid length.
[ 1140.089721][T20269] team0: Port device team_slave_0 added
[ 1140.107719][T20269] team0: Port device team_slave_1 added
[ 1140.177364][T20269] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1140.195890][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1140.285856][T20269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1140.324681][T20269] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1140.347697][T20269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1140.395510][T20269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1140.613878][T20269] hsr_slave_0: entered promiscuous mode
[ 1140.676909][T20269] hsr_slave_1: entered promiscuous mode
[ 1140.707543][T20269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1140.748631][T20269] Cannot create hsr debugfs directory
[ 1140.754202][T20297] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4914'.
[ 1140.967693][T20299] netlink: 'syz.3.4916': attribute type 10 has an invalid length.
[ 1141.368713][T13180] Bluetooth: hci3: command tx timeout
[ 1141.597894][T20269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.740223][T20269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1142.935752][T20313] netlink: 'syz.3.4920': attribute type 9 has an invalid length.
[ 1142.961363][T20313] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4920'.
[ 1143.333598][T20269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.461287][T13180] Bluetooth: hci3: command tx timeout
[ 1143.499124][T20314] netlink: 'syz.3.4920': attribute type 9 has an invalid length.
[ 1143.508734][T20314] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4920'.
[ 1143.522859][T20269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1143.937994][T20324] FAULT_INJECTION: forcing a failure.
[ 1143.937994][T20324] name failslab, interval 1, probability 0, space 0, times 0
[ 1143.976067][T20324] CPU: 0 PID: 20324 Comm: syz.0.4924 Not tainted syzkaller #0
[ 1143.983584][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1143.993649][T20324] Call Trace:
[ 1143.996936][T20324]  <TASK>
[ 1143.999886][T20324]  dump_stack_lvl+0x18c/0x250
[ 1144.004591][T20324]  ? show_regs_print_info+0x20/0x20
[ 1144.009811][T20324]  ? load_image+0x420/0x420
[ 1144.014344][T20324]  should_fail_ex+0x39d/0x4d0
[ 1144.019045][T20324]  should_failslab+0x9/0x20
[ 1144.023574][T20324]  slab_pre_alloc_hook+0x59/0x310
[ 1144.028629][T20324]  kmem_cache_alloc+0x5a/0x2d0
[ 1144.033419][T20324]  ? __nf_conntrack_alloc+0x99/0x380
[ 1144.038752][T20324]  __nf_conntrack_alloc+0x99/0x380
[ 1144.043899][T20324]  init_conntrack+0x177/0xf10
[ 1144.048606][T20324]  ? early_drop+0x7f0/0x7f0
[ 1144.053132][T20324]  ? nf_conntrack_find_get+0x650/0x650
[ 1144.058606][T20324]  ? __local_bh_enable_ip+0x13a/0x1c0
[ 1144.063996][T20324]  ? __siphash_unaligned+0x22e/0x3a0
[ 1144.069320][T20324]  nf_conntrack_in+0xc06/0x15c0
[ 1144.074206][T20324]  ? nf_ct_pernet+0x270/0x270
[ 1144.078904][T20324]  ? ipt_do_table+0x2c1/0x15e0
[ 1144.083695][T20324]  ? read_lock_is_recursive+0x20/0x20
[ 1144.089084][T20324]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[ 1144.094556][T20324]  ? ipv4_conntrack_local+0x123/0x200
[ 1144.099943][T20324]  ? ipv4_conntrack_in+0x20/0x20
[ 1144.104892][T20324]  nf_hook_slow+0xbd/0x200
[ 1144.109327][T20324]  ? nf_hook+0x390/0x390
[ 1144.113580][T20324]  nf_hook+0x228/0x390
[ 1144.117668][T20324]  ? nf_hook+0xa2/0x390
[ 1144.121835][T20324]  ? __ip_local_out+0x5f0/0x5f0
[ 1144.126698][T20324]  ? nf_hook+0x390/0x390
[ 1144.130955][T20324]  ? csum_partial+0x241/0x2c0
[ 1144.135652][T20324]  ? ip_fast_csum+0x1ee/0x2b0
[ 1144.140348][T20324]  __ip_local_out+0x4db/0x5f0
[ 1144.145040][T20324]  ? nf_hook+0x390/0x390
[ 1144.149296][T20324]  ip_send_skb+0x4c/0x1d0
[ 1144.153642][T20324]  udp_send_skb+0xa37/0x13a0
[ 1144.158269][T20324]  udp_sendmsg+0x1b16/0x23b0
[ 1144.162876][T20324]  ? __lock_acquire+0x1347/0x7d40
[ 1144.167921][T20324]  ? udp_sendmsg+0x23b0/0x23b0
[ 1144.172710][T20324]  ? udp_cmsg_send+0x350/0x350
[ 1144.177510][T20324]  ? __lock_acquire+0x1347/0x7d40
[ 1144.182558][T20324]  ? verify_lock_unused+0x140/0x140
[ 1144.187802][T20324]  udpv6_sendmsg+0x790/0x2390
[ 1144.192659][T20324]  ? print_unlock_imbalance_bug+0x160/0x160
[ 1144.198582][T20324]  ? udp_v6_early_demux+0xf80/0xf80
[ 1144.200712][T20269] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1144.203799][T20324]  ? lock_chain_count+0x20/0x20
[ 1144.215387][T20324]  ? _local_bh_enable+0xa0/0xa0
[ 1144.220262][T20324]  ? inet_send_prepare+0x1b3/0x260
[ 1144.225397][T20324]  ? inet_send_prepare+0x1b3/0x260
[ 1144.230524][T20324]  ? inet6_sendmsg+0x5f/0xd0
[ 1144.235125][T20324]  ? inet6_compat_ioctl+0x3c0/0x3c0
[ 1144.240337][T20324]  ____sys_sendmsg+0x5ba/0x960
[ 1144.245110][T20324]  ? __lock_acquire+0x7d40/0x7d40
[ 1144.250153][T20324]  ? __sys_sendmsg_sock+0x30/0x30
[ 1144.255195][T20324]  ? __import_iovec+0x3fa/0x850
[ 1144.260076][T20324]  ? import_iovec+0x73/0xa0
[ 1144.264592][T20324]  ___sys_sendmsg+0x2a6/0x360
[ 1144.269300][T20324]  ? get_pid_task+0x20/0x1e0
[ 1144.273908][T20324]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1144.278713][T20324]  ? __lock_acquire+0x7d40/0x7d40
[ 1144.283778][T20324]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1144.288645][T20324]  ? __x64_sys_sendmsg+0x80/0x80
[ 1144.293700][T20324]  ? lockdep_hardirqs_on+0x98/0x150
[ 1144.298916][T20324]  do_syscall_64+0x55/0xa0
[ 1144.303350][T20324]  ? clear_bhb_loop+0x40/0x90
[ 1144.308216][T20324]  ? clear_bhb_loop+0x40/0x90
[ 1144.312908][T20324]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1144.318821][T20324] RIP: 0033:0x7efde659c819
[ 1144.323254][T20324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1144.342962][T20324] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1144.351483][T20324] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1144.359467][T20324] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[ 1144.367453][T20324] RBP: 00007efde74d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1144.375955][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1144.383934][T20324] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1144.391935][T20324]  </TASK>
[ 1144.444843][T20269] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1144.485168][T20269] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1144.512071][T20269] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1144.593924][T20329] netlink: 'syz.0.4926': attribute type 10 has an invalid length.
[ 1144.765844][T20334] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4927'.
[ 1144.844978][T20269] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1144.990441][T20269] 8021q: adding VLAN 0 to HW filter on device team0
[ 1145.080354][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.087618][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1145.152885][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.160152][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1145.545000][T13180] Bluetooth: hci3: command tx timeout
[ 1145.653586][T20269] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1145.765537][T20269] veth0_vlan: entered promiscuous mode
[ 1145.803781][T20269] veth1_vlan: entered promiscuous mode
[ 1145.867979][T20269] veth0_macvtap: entered promiscuous mode
[ 1145.895996][T20269] veth1_macvtap: entered promiscuous mode
[ 1145.917547][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1145.929340][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1145.939933][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1145.950952][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1145.961477][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1145.973778][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1145.987880][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1146.001775][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.015140][T20269] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1146.029379][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.040081][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.050849][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.071885][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.082566][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.101147][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.115291][T20269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1146.129268][T20269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1146.145606][T20269] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1146.296047][T20269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.338421][T20269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.347202][T20269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.402965][T20269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.858618][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1146.910710][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.489357][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.513790][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.608858][T13180] Bluetooth: hci3: command tx timeout
[ 1147.879716][T20367] netlink: 'syz.3.4937': attribute type 10 has an invalid length.
[ 1149.112897][T20386] netlink: 'syz.2.4944': attribute type 39 has an invalid length.
[ 1149.161239][T20388] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4945'.
[ 1149.302108][T20396] netlink: 'syz.0.4946': attribute type 9 has an invalid length.
[ 1149.341263][T20396] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4946'.
[ 1149.587253][T20390] netlink: 'syz.0.4946': attribute type 10 has an invalid length.
[ 1149.743308][T20394] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4945'.
[ 1149.792806][T20388] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4945'.
[ 1149.941978][T20398] netlink: 'syz.0.4946': attribute type 9 has an invalid length.
[ 1149.988828][T20398] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4946'.
[ 1150.207117][T20404] netlink: 'syz.2.4950': attribute type 10 has an invalid length.
[ 1150.263183][T20407] netlink: 'syz.2.4950': attribute type 9 has an invalid length.
[ 1150.289046][T20407] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4950'.
[ 1150.317261][T20409] FAULT_INJECTION: forcing a failure.
[ 1150.317261][T20409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1150.350239][T20409] CPU: 0 PID: 20409 Comm: syz.2.4950 Not tainted syzkaller #0
[ 1150.357761][T20409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1150.367829][T20409] Call Trace:
[ 1150.371120][T20409]  <TASK>
[ 1150.374061][T20409]  dump_stack_lvl+0x18c/0x250
[ 1150.378765][T20409]  ? show_regs_print_info+0x20/0x20
[ 1150.383981][T20409]  ? load_image+0x420/0x420
[ 1150.388504][T20409]  ? __might_fault+0xaa/0x120
[ 1150.393193][T20409]  ? __lock_acquire+0x7d40/0x7d40
[ 1150.398236][T20409]  should_fail_ex+0x39d/0x4d0
[ 1150.402938][T20409]  _copy_from_user+0x2f/0xe0
[ 1150.407543][T20409]  ___sys_sendmsg+0x1c7/0x360
[ 1150.412231][T20409]  ? get_pid_task+0x20/0x1e0
[ 1150.417100][T20409]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1150.421917][T20409]  ? __lock_acquire+0x7d40/0x7d40
[ 1150.426992][T20409]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1150.431864][T20409]  ? __x64_sys_sendmsg+0x80/0x80
[ 1150.436835][T20409]  ? lockdep_hardirqs_on+0x98/0x150
[ 1150.442138][T20409]  do_syscall_64+0x55/0xa0
[ 1150.446563][T20409]  ? clear_bhb_loop+0x40/0x90
[ 1150.451257][T20409]  ? clear_bhb_loop+0x40/0x90
[ 1150.455951][T20409]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1150.461860][T20409] RIP: 0033:0x7fb21b19c819
[ 1150.466296][T20409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.485927][T20409] RSP: 002b:00007fb21c030028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1150.494355][T20409] RAX: ffffffffffffffda RBX: 00007fb21b416180 RCX: 00007fb21b19c819
[ 1150.502348][T20409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[ 1150.510339][T20409] RBP: 00007fb21c030090 R08: 0000000000000000 R09: 0000000000000000
[ 1150.518329][T20409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1150.526317][T20409] R13: 00007fb21b416218 R14: 00007fb21b416180 R15: 00007fff261da498
[ 1150.534322][T20409]  </TASK>
[ 1151.658410][T20406] netlink: 'syz.3.4949': attribute type 10 has an invalid length.
[ 1151.967393][T20429] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4957'.
[ 1152.042982][T20431] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4957'.
[ 1152.060922][T20429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4957'.
[ 1152.294027][T20434] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4958'.
[ 1152.660277][T20441] netlink: 'syz.2.4962': attribute type 10 has an invalid length.
[ 1153.837068][T20457] netlink: 'syz.2.4967': attribute type 2 has an invalid length.
[ 1153.846473][T20457] netlink: 'syz.2.4967': attribute type 8 has an invalid length.
[ 1154.283381][T20465] netlink: 'syz.0.4971': attribute type 10 has an invalid length.
[ 1155.416586][T20481] __nla_validate_parse: 4 callbacks suppressed
[ 1155.416603][T20481] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4974'.
[ 1155.494000][T20471] netlink: 'syz.2.4972': attribute type 10 has an invalid length.
[ 1155.609810][T20472] netlink: 'syz.2.4972': attribute type 9 has an invalid length.
[ 1155.637053][T20472] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4972'.
[ 1156.962984][T20485] netlink: 'syz.2.4972': attribute type 9 has an invalid length.
[ 1157.005871][T20485] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4972'.
[ 1157.520080][T20501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4981'.
[ 1157.687482][T20506] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4981'.
[ 1157.718052][T20501] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4981'.
[ 1158.259107][T20519] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4985'.
[ 1158.793741][T20522] netlink: 'syz.1.4987': attribute type 2 has an invalid length.
[ 1158.809292][T20522] netlink: 'syz.1.4987': attribute type 8 has an invalid length.
[ 1158.827254][T20522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4987'.
[ 1160.219332][T20537] netlink: 'syz.3.4992': attribute type 10 has an invalid length.
[ 1163.114874][T20549] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4995'.
[ 1163.162286][T20547] netlink: 'syz.2.4998': attribute type 10 has an invalid length.
[ 1163.188145][T20551] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4995'.
[ 1163.212934][T20549] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4995'.
[ 1164.236631][T20562] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4999'.
[ 1164.397699][T20556] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5001'.
[ 1165.430547][T20574] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 1165.935775][T20576] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 1166.011662][T20574] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5007'.
[ 1166.353753][T20579] netlink: 'syz.1.5008': attribute type 39 has an invalid length.
[ 1166.687729][T20581] netlink: 'syz.3.5009': attribute type 10 has an invalid length.
[ 1167.237047][T20595] netlink: 'syz.2.5013': attribute type 2 has an invalid length.
[ 1167.252871][T20595] netlink: 'syz.2.5013': attribute type 1 has an invalid length.
[ 1167.262199][T20595] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5013'.
[ 1167.453878][T20601] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5015'.
[ 1168.982525][T20614] netlink: 'syz.0.5020': attribute type 10 has an invalid length.
[ 1169.100434][T20616] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5019'.
[ 1169.227317][T20618] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5019'.
[ 1169.237310][T20616] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5019'.
[ 1170.005577][T20627] netlink: 'syz.3.5024': attribute type 2 has an invalid length.
[ 1170.022064][T20627] netlink: 'syz.3.5024': attribute type 1 has an invalid length.
[ 1170.040950][T20627] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5024'.
[ 1171.272240][T13180] Bluetooth: hci0: ISO packet for unknown connection handle 33
[ 1171.332697][T20644] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5030'.
[ 1171.482026][T20649] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5033'.
[ 1171.565329][T20652] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5033'.
[ 1171.597814][T20649] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5033'.
[ 1172.874517][T20664] netlink: 'syz.1.5039': attribute type 10 has an invalid length.
[ 1173.397465][T20664] bond0: (slave bond_slave_0): Releasing backup interface
[ 1174.071976][T20677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1174.083293][T20677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1174.410504][T20677] bridge0: entered promiscuous mode
[ 1174.673396][T20683] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5045'.
[ 1174.738225][T20685] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5047'.
[ 1174.772287][T20687] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5045'.
[ 1174.782343][T20683] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5045'.
[ 1175.040861][T20691] netlink: 'syz.1.5049': attribute type 10 has an invalid length.
[ 1175.059129][T20691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5049'.
[ 1175.085248][T20691] batman_adv: batadv0: Adding interface: veth0_vlan
[ 1175.094889][T20691] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1175.125447][T20691] batman_adv: batadv0: Interface activated: veth0_vlan
[ 1175.657362][T20698] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5051'.
[ 1176.048294][T20705] netlink: 'syz.3.5052': attribute type 10 has an invalid length.
[ 1176.083407][T20707] netlink: 'syz.2.5053': attribute type 10 has an invalid length.
[ 1177.786262][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.792780][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.551756][T20716] netlink: 'syz.0.5063': attribute type 10 has an invalid length.
[ 1178.989304][T20719] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5058'.
[ 1179.902531][T20732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1179.918181][T20732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1179.942909][T20731] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5062'.
[ 1180.004517][T20732] bridge0: entered promiscuous mode
[ 1180.073825][T20736] netlink: 'syz.0.5064': attribute type 10 has an invalid length.
[ 1180.211423][T20743] netlink: 'syz.3.5068': attribute type 10 has an invalid length.
[ 1180.428050][T13180] Bluetooth: hci4: ISO packet for unknown connection handle 33
[ 1180.765208][T20759] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5074'.
[ 1181.320593][T20770] netlink: 'syz.1.5079': attribute type 29 has an invalid length.
[ 1181.335278][T20772] netlink: 'syz.0.5080': attribute type 10 has an invalid length.
[ 1181.376265][T20770] netlink: 'syz.1.5079': attribute type 29 has an invalid length.
[ 1181.404711][T20770] netlink: 'syz.1.5079': attribute type 29 has an invalid length.
[ 1181.847501][T20787] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5086'.
[ 1182.576193][T20801] FAULT_INJECTION: forcing a failure.
[ 1182.576193][T20801] name failslab, interval 1, probability 0, space 0, times 0
[ 1182.608508][T20801] CPU: 0 PID: 20801 Comm: syz.0.5092 Not tainted syzkaller #0
[ 1182.616011][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1182.626069][T20801] Call Trace:
[ 1182.629349][T20801]  <TASK>
[ 1182.632279][T20801]  dump_stack_lvl+0x18c/0x250
[ 1182.636972][T20801]  ? show_regs_print_info+0x20/0x20
[ 1182.642173][T20801]  ? load_image+0x420/0x420
[ 1182.646676][T20801]  ? __might_sleep+0xe0/0xe0
[ 1182.651267][T20801]  ? __lock_acquire+0x7d40/0x7d40
[ 1182.656292][T20801]  should_fail_ex+0x39d/0x4d0
[ 1182.660971][T20801]  should_failslab+0x9/0x20
[ 1182.665468][T20801]  slab_pre_alloc_hook+0x59/0x310
[ 1182.670498][T20801]  ? bpf_ctx_init+0xbd/0x1a0
[ 1182.675082][T20801]  ? bpf_ctx_init+0xbd/0x1a0
[ 1182.679665][T20801]  __kmem_cache_alloc_node+0x53/0x250
[ 1182.685036][T20801]  ? bpf_ctx_init+0xbd/0x1a0
[ 1182.689619][T20801]  __kmalloc+0xa4/0x230
[ 1182.693776][T20801]  bpf_ctx_init+0xbd/0x1a0
[ 1182.698189][T20801]  bpf_prog_test_run_skb+0x2c2/0x12b0
[ 1182.703550][T20801]  ? __fget_files+0x28/0x4b0
[ 1182.708138][T20801]  ? __fget_files+0x28/0x4b0
[ 1182.712722][T20801]  ? __fget_files+0x43d/0x4b0
[ 1182.717397][T20801]  ? cpu_online+0x60/0x60
[ 1182.721721][T20801]  bpf_prog_test_run+0x321/0x390
[ 1182.726658][T20801]  __sys_bpf+0x49d/0x890
[ 1182.730983][T20801]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1182.736358][T20801]  ? lock_chain_count+0x20/0x20
[ 1182.741214][T20801]  __x64_sys_bpf+0x7c/0x90
[ 1182.745621][T20801]  do_syscall_64+0x55/0xa0
[ 1182.750038][T20801]  ? clear_bhb_loop+0x40/0x90
[ 1182.754713][T20801]  ? clear_bhb_loop+0x40/0x90
[ 1182.759386][T20801]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1182.765374][T20801] RIP: 0033:0x7efde659c819
[ 1182.769788][T20801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1182.789392][T20801] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1182.797800][T20801] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1182.805766][T20801] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a
[ 1182.813730][T20801] RBP: 00007efde74d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1182.821706][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1182.829672][T20801] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1182.837657][T20801]  </TASK>
[ 1182.870271][T20803] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5093'.
[ 1182.929240][T20803] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5093'.
[ 1182.970972][T20804] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5093'.
[ 1183.044941][T20808] netlink: 'syz.3.5094': attribute type 10 has an invalid length.
[ 1183.267125][T20817] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5099'.
[ 1183.305386][T20817] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5099'.
[ 1183.344637][T20817] FAULT_INJECTION: forcing a failure.
[ 1183.344637][T20817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1183.399764][T20817] CPU: 0 PID: 20817 Comm: syz.0.5099 Not tainted syzkaller #0
[ 1183.407295][T20817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1183.417369][T20817] Call Trace:
[ 1183.420662][T20817]  <TASK>
[ 1183.423692][T20817]  dump_stack_lvl+0x18c/0x250
[ 1183.428406][T20817]  ? show_regs_print_info+0x20/0x20
[ 1183.433627][T20817]  ? load_image+0x420/0x420
[ 1183.438159][T20817]  ? __might_fault+0xaa/0x120
[ 1183.443052][T20817]  should_fail_ex+0x39d/0x4d0
[ 1183.447768][T20817]  copyout+0x1a/0x90
[ 1183.451702][T20817]  _copy_to_iter+0x432/0x1120
[ 1183.456417][T20817]  ? iov_iter_init+0x1e0/0x1e0
[ 1183.461249][T20817]  ? __virt_addr_valid+0x18c/0x540
[ 1183.466441][T20817]  ? __virt_addr_valid+0x469/0x540
[ 1183.471597][T20817]  ? __phys_addr_symbol+0x2f/0x70
[ 1183.476663][T20817]  __skb_datagram_iter+0xdb/0x780
[ 1183.481722][T20817]  ? skb_copy_datagram_iter+0x200/0x200
[ 1183.487330][T20817]  skb_copy_datagram_iter+0xb1/0x200
[ 1183.492655][T20817]  netlink_recvmsg+0x2d4/0xe60
[ 1183.497460][T20817]  ? netlink_sendmsg+0xbf0/0xbf0
[ 1183.502434][T20817]  ? aa_af_perm+0x330/0x330
[ 1183.507089][T20817]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[ 1183.512395][T20817]  ? security_socket_recvmsg+0x89/0xb0
[ 1183.517880][T20817]  ? netlink_sendmsg+0xbf0/0xbf0
[ 1183.522856][T20817]  ____sys_recvmsg+0x2ce/0x5e0
[ 1183.527652][T20817]  ? __sys_recvmsg_sock+0x50/0x50
[ 1183.532711][T20817]  ? import_iovec+0x73/0xa0
[ 1183.537244][T20817]  ___sys_recvmsg+0x216/0x590
[ 1183.542224][T20817]  ? __sys_recvmsg+0x2a0/0x2a0
[ 1183.547013][T20817]  ? ksys_write+0x1c4/0x260
[ 1183.551575][T20817]  ? __fget_files+0x43d/0x4b0
[ 1183.556399][T20817]  __x64_sys_recvmsg+0x20c/0x2e0
[ 1183.561359][T20817]  ? ___sys_recvmsg+0x590/0x590
[ 1183.566265][T20817]  ? lockdep_hardirqs_on+0x98/0x150
[ 1183.571494][T20817]  do_syscall_64+0x55/0xa0
[ 1183.575932][T20817]  ? clear_bhb_loop+0x40/0x90
[ 1183.580633][T20817]  ? clear_bhb_loop+0x40/0x90
[ 1183.585339][T20817]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1183.591521][T20817] RIP: 0033:0x7efde659c819
[ 1183.595960][T20817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1183.615679][T20817] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1183.624234][T20817] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1183.632229][T20817] RDX: 0000000000000102 RSI: 0000200000001ac0 RDI: 0000000000000003
[ 1183.640220][T20817] RBP: 00007efde74d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1183.648208][T20817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1183.656202][T20817] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1183.664209][T20817]  </TASK>
[ 1183.738567][T20817] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5099'.
[ 1184.449536][T20828] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.5103'.
[ 1184.858734][T20848] netlink: 'syz.0.5111': attribute type 10 has an invalid length.
[ 1184.865609][T20843] netlink: 'syz.3.5108': attribute type 9 has an invalid length.
[ 1185.076706][T20851] __nla_validate_parse: 8 callbacks suppressed
[ 1185.076745][T20851] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5112'.
[ 1185.160180][T20853] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.5113'.
[ 1187.059966][T20880] netlink: 'syz.0.5121': attribute type 10 has an invalid length.
[ 1188.120913][T20892] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5123'.
[ 1188.270967][T20901] netlink: 'syz.0.5129': attribute type 10 has an invalid length.
[ 1189.114911][T20911] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.5133'.
[ 1189.138680][T20911] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.5133'.
[ 1189.233726][T20917] netlink: 'syz.2.5134': attribute type 10 has an invalid length.
[ 1189.275588][T20911] netlink: 'syz.0.5133': attribute type 10 has an invalid length.
[ 1189.335596][T20911] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5133'.
[ 1189.370129][T20911] ipvlan1: entered promiscuous mode
[ 1189.376767][T20911] ipvlan1: entered allmulticast mode
[ 1189.397497][T20911] veth0_vlan: entered allmulticast mode
[ 1189.450562][T20911] bridge0: port 3(ipvlan1) entered blocking state
[ 1189.475435][T20911] bridge0: port 3(ipvlan1) entered disabled state
[ 1189.623269][T20911] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1190.920022][T20929] netlink: 'syz.1.5139': attribute type 10 has an invalid length.
[ 1191.113002][T20932] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5140'.
[ 1192.191509][T20953] netlink: 'syz.1.5146': attribute type 10 has an invalid length.
[ 1192.342658][T20945] delete_channel: no stack
[ 1192.786941][T20966] netlink: 'syz.0.5151': attribute type 10 has an invalid length.
[ 1193.320487][T20973] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5153'.
[ 1193.770110][T20979] netlink: 'syz.0.5156': attribute type 10 has an invalid length.
[ 1194.031303][T20986] netlink: 'syz.0.5166': attribute type 10 has an invalid length.
[ 1194.242534][T20994] netlink: 'syz.2.5160': attribute type 10 has an invalid length.
[ 1195.167182][T21004] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5164'.
[ 1195.874146][T21011] netlink: 'syz.1.5167': attribute type 2 has an invalid length.
[ 1195.903338][T21011] netlink: 'syz.1.5167': attribute type 8 has an invalid length.
[ 1195.938884][T21011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5167'.
[ 1196.282256][T21018] netlink: 'syz.0.5171': attribute type 10 has an invalid length.
[ 1196.396316][T21022] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5174'.
[ 1196.411122][T21022] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.5174'.
[ 1196.448979][T21025] netlink: 'syz.1.5181': attribute type 2 has an invalid length.
[ 1196.469663][T21025] netlink: 'syz.1.5181': attribute type 8 has an invalid length.
[ 1196.477632][T21025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5181'.
[ 1196.529597][T21027] netlink: 'syz.2.5174': attribute type 10 has an invalid length.
[ 1196.537513][T21027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5174'.
[ 1196.580008][T21027] ipvlan1: entered promiscuous mode
[ 1196.585387][T21027] ipvlan1: entered allmulticast mode
[ 1196.608591][T21027] veth0_vlan: entered allmulticast mode
[ 1196.620249][T21027] bridge0: port 3(ipvlan1) entered blocking state
[ 1196.627100][T21027] bridge0: port 3(ipvlan1) entered disabled state
[ 1196.638058][T21027] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1196.995250][T21040] FAULT_INJECTION: forcing a failure.
[ 1196.995250][T21040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1197.023198][T21040] CPU: 1 PID: 21040 Comm: syz.2.5177 Not tainted syzkaller #0
[ 1197.030724][T21040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1197.040789][T21040] Call Trace:
[ 1197.044101][T21040]  <TASK>
[ 1197.047042][T21040]  dump_stack_lvl+0x18c/0x250
[ 1197.051751][T21040]  ? show_regs_print_info+0x20/0x20
[ 1197.056972][T21040]  ? load_image+0x420/0x420
[ 1197.061510][T21040]  ? __might_fault+0xaa/0x120
[ 1197.066219][T21040]  ? __lock_acquire+0x7d40/0x7d40
[ 1197.071261][T21040]  should_fail_ex+0x39d/0x4d0
[ 1197.075959][T21040]  _copy_from_iter+0x1d9/0x12e0
[ 1197.080842][T21040]  ? rep_movs_alternative+0x4a/0x90
[ 1197.086067][T21040]  ? _copy_from_iter+0x24e/0x12e0
[ 1197.091107][T21040]  ? __virt_addr_valid+0x18c/0x540
[ 1197.096238][T21040]  ? __lock_acquire+0x7d40/0x7d40
[ 1197.101283][T21040]  ? copyout_mc+0x70/0x70
[ 1197.105649][T21040]  ? copyout_mc+0x70/0x70
[ 1197.109998][T21040]  ? __virt_addr_valid+0x18c/0x540
[ 1197.115127][T21040]  ? page_copy_sane+0x16a/0x270
[ 1197.120007][T21040]  copy_page_from_iter+0x7b/0x100
[ 1197.125048][T21040]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[ 1197.130887][T21040]  tun_get_user+0x15db/0x3ca0
[ 1197.135589][T21040]  ? aa_file_perm+0x11b/0xee0
[ 1197.140290][T21040]  ? rcu_read_unlock+0xa0/0xa0
[ 1197.145082][T21040]  ? tun_get+0x1c/0x2e0
[ 1197.149260][T21040]  ? __lock_acquire+0x7d40/0x7d40
[ 1197.154325][T21040]  ? tun_get+0x1c/0x2e0
[ 1197.158506][T21040]  tun_chr_write_iter+0x119/0x200
[ 1197.163543][T21040]  vfs_write+0x46c/0x990
[ 1197.167809][T21040]  ? file_end_write+0x250/0x250
[ 1197.172711][T21040]  ? __fget_files+0x43d/0x4b0
[ 1197.177419][T21040]  ? __fdget_pos+0x1d8/0x330
[ 1197.182058][T21040]  ? ksys_write+0x75/0x260
[ 1197.186492][T21040]  ksys_write+0x150/0x260
[ 1197.190837][T21040]  ? __ia32_sys_read+0x90/0x90
[ 1197.195620][T21040]  ? lockdep_hardirqs_on+0x98/0x150
[ 1197.200834][T21040]  do_syscall_64+0x55/0xa0
[ 1197.205260][T21040]  ? clear_bhb_loop+0x40/0x90
[ 1197.209959][T21040]  ? clear_bhb_loop+0x40/0x90
[ 1197.214668][T21040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1197.220576][T21040] RIP: 0033:0x7fb21b19c819
[ 1197.225001][T21040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1197.244739][T21040] RSP: 002b:00007fb21c072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1197.253338][T21040] RAX: ffffffffffffffda RBX: 00007fb21b415fa0 RCX: 00007fb21b19c819
[ 1197.261303][T21040] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8
[ 1197.269272][T21040] RBP: 00007fb21c072090 R08: 0000000000000000 R09: 0000000000000000
[ 1197.277234][T21040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1197.285486][T21040] R13: 00007fb21b416038 R14: 00007fb21b415fa0 R15: 00007fff261da498
[ 1197.293474][T21040]  </TASK>
[ 1197.466405][T21042] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5178'.
[ 1197.781843][T21053] netlink: 'syz.2.5184': attribute type 10 has an invalid length.
[ 1197.962461][T21055] netlink: 'syz.3.5185': attribute type 2 has an invalid length.
[ 1197.975879][T21055] netlink: 'syz.3.5185': attribute type 8 has an invalid length.
[ 1197.987132][T21055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5185'.
[ 1198.277266][T21062] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.5187'.
[ 1198.329041][T21062] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.5187'.
[ 1198.484373][T21062] netlink: 'syz.1.5187': attribute type 10 has an invalid length.
[ 1198.521563][T21062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5187'.
[ 1198.542716][T21062] ipvlan1: entered promiscuous mode
[ 1198.557205][T21062] ipvlan1: entered allmulticast mode
[ 1198.573666][T21062] veth0_vlan: entered allmulticast mode
[ 1198.613993][T21062] bridge0: port 3(ipvlan1) entered blocking state
[ 1198.626679][T21062] bridge0: port 3(ipvlan1) entered disabled state
[ 1198.671563][T21062] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[ 1199.416430][T21084] netlink: 'syz.0.5194': attribute type 10 has an invalid length.
[ 1199.589136][T21076] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5192'.
[ 1199.821723][T21089] netlink: 'syz.1.5197': attribute type 2 has an invalid length.
[ 1201.504124][T21114] __nla_validate_parse: 4 callbacks suppressed
[ 1201.504144][T21114] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5206'.
[ 1201.508267][T21119] validate_nla: 1 callbacks suppressed
[ 1201.511487][T21119] netlink: 'syz.3.5208': attribute type 10 has an invalid length.
[ 1201.607985][T21122] netlink: 'syz.0.5209': attribute type 2 has an invalid length.
[ 1201.621013][T21122] netlink: 'syz.0.5209': attribute type 8 has an invalid length.
[ 1201.630750][T21122] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5209'.
[ 1203.943889][T21128] delete_channel: no stack
[ 1204.125867][T21153] netlink: 'syz.3.5221': attribute type 2 has an invalid length.
[ 1204.161086][T21151] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5219'.
[ 1204.177285][T21153] netlink: 'syz.3.5221': attribute type 8 has an invalid length.
[ 1204.194037][T21153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5221'.
[ 1204.204807][T21156] netlink: 'syz.0.5220': attribute type 10 has an invalid length.
[ 1204.396131][T21163] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5224'.
[ 1204.425419][T21163] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5224'.
[ 1204.450321][T21163] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5224'.
[ 1206.071669][T21186] netlink: 'syz.2.5232': attribute type 10 has an invalid length.
[ 1206.105622][T21183] netlink: 'syz.3.5233': attribute type 2 has an invalid length.
[ 1206.128517][T21183] netlink: 'syz.3.5233': attribute type 8 has an invalid length.
[ 1206.151588][T21183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5233'.
[ 1206.197041][T21189] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5234'.
[ 1206.953866][T21204] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5238'.
[ 1206.966030][T21204] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5238'.
[ 1206.985904][T21204] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5238'.
[ 1209.055001][T21187] delete_channel: no stack
[ 1210.198561][T21218] netlink: 'syz.3.5244': attribute type 10 has an invalid length.
[ 1210.224304][T21219] netlink: 'syz.2.5245': attribute type 2 has an invalid length.
[ 1210.261489][T21219] netlink: 'syz.2.5245': attribute type 8 has an invalid length.
[ 1210.296215][T21219] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5245'.
[ 1210.813659][T21233] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5249'.
[ 1210.839048][T21233] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5249'.
[ 1210.865663][T21235] FAULT_INJECTION: forcing a failure.
[ 1210.865663][T21235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1210.879103][T21235] CPU: 1 PID: 21235 Comm: syz.1.5251 Not tainted syzkaller #0
[ 1210.886606][T21235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1210.896784][T21235] Call Trace:
[ 1210.900091][T21235]  <TASK>
[ 1210.903064][T21235]  dump_stack_lvl+0x18c/0x250
[ 1210.907796][T21235]  ? show_regs_print_info+0x20/0x20
[ 1210.913121][T21235]  ? load_image+0x420/0x420
[ 1210.917662][T21235]  ? __might_fault+0xaa/0x120
[ 1210.922380][T21235]  ? __lock_acquire+0x7d40/0x7d40
[ 1210.927446][T21235]  should_fail_ex+0x39d/0x4d0
[ 1210.932162][T21235]  _copy_from_iter+0x1d9/0x12e0
[ 1210.937044][T21235]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1210.942361][T21235]  ? __virt_addr_valid+0x18c/0x540
[ 1210.947513][T21235]  ? __lock_acquire+0x7d40/0x7d40
[ 1210.951048][T21229] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5248'.
[ 1210.952551][T21235]  ? rcu_is_watching+0x15/0xb0
[ 1210.952591][T21235]  ? copyout_mc+0x70/0x70
[ 1210.952618][T21235]  ? __virt_addr_valid+0x18c/0x540
[ 1210.976290][T21235]  ? __virt_addr_valid+0x18c/0x540
[ 1210.981433][T21235]  ? __virt_addr_valid+0x469/0x540
[ 1210.986575][T21235]  ? __check_object_size+0x506/0xa20
[ 1210.991896][T21235]  netlink_sendmsg+0x76b/0xbf0
[ 1210.996727][T21235]  ? netlink_getsockopt+0x590/0x590
[ 1211.001969][T21235]  ? aa_sock_msg_perm+0x94/0x150
[ 1211.006957][T21235]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1211.012281][T21235]  ? security_socket_sendmsg+0x80/0xa0
[ 1211.017778][T21235]  ? netlink_getsockopt+0x590/0x590
[ 1211.023109][T21235]  ____sys_sendmsg+0x5ba/0x960
[ 1211.027904][T21235]  ? __asan_memset+0x22/0x40
[ 1211.032507][T21235]  ? __sys_sendmsg_sock+0x30/0x30
[ 1211.037557][T21235]  ? __import_iovec+0x5f2/0x850
[ 1211.042653][T21235]  ? import_iovec+0x73/0xa0
[ 1211.047199][T21235]  ___sys_sendmsg+0x2a6/0x360
[ 1211.051922][T21235]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1211.056857][T21235]  ? __lock_acquire+0x7d40/0x7d40
[ 1211.061959][T21235]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1211.066849][T21235]  ? __x64_sys_sendmsg+0x80/0x80
[ 1211.071852][T21235]  ? lockdep_hardirqs_on+0x98/0x150
[ 1211.077100][T21235]  do_syscall_64+0x55/0xa0
[ 1211.081552][T21235]  ? clear_bhb_loop+0x40/0x90
[ 1211.086262][T21235]  ? clear_bhb_loop+0x40/0x90
[ 1211.091072][T21235]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1211.097005][T21235] RIP: 0033:0x7f602019c819
[ 1211.101491][T21235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.121313][T21235] RSP: 002b:00007f6020ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1211.129776][T21235] RAX: ffffffffffffffda RBX: 00007f6020415fa0 RCX: 00007f602019c819
[ 1211.137787][T21235] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1211.145788][T21235] RBP: 00007f6020ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1211.153802][T21235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1211.162035][T21235] R13: 00007f6020416038 R14: 00007f6020415fa0 R15: 00007ffc60b6ee68
[ 1211.170088][T21235]  </TASK>
[ 1211.178721][T21233] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5249'.
[ 1214.682049][T21246] netlink: 'syz.2.5256': attribute type 2 has an invalid length.
[ 1214.704551][T21246] netlink: 'syz.2.5256': attribute type 8 has an invalid length.
[ 1214.748783][T21246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5256'.
[ 1215.110044][T21248] netlink: 'syz.3.5255': attribute type 10 has an invalid length.
[ 1215.445893][T21270] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5260'.
[ 1215.592275][T21254] delete_channel: no stack
[ 1215.688830][T19813] Bluetooth: hci2: command 0x0406 tx timeout
[ 1216.234905][T21279] netlink: 'syz.1.5265': attribute type 10 has an invalid length.
[ 1216.481345][T21282] netlink: 'syz.0.5266': attribute type 2 has an invalid length.
[ 1216.539796][T21282] netlink: 'syz.0.5266': attribute type 8 has an invalid length.
[ 1216.549028][T21282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5266'.
[ 1219.102658][T21291] FAULT_INJECTION: forcing a failure.
[ 1219.102658][T21291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1219.121695][T21291] CPU: 0 PID: 21291 Comm: syz.1.5270 Not tainted syzkaller #0
[ 1219.129286][T21291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1219.139356][T21291] Call Trace:
[ 1219.142651][T21291]  <TASK>
[ 1219.145601][T21291]  dump_stack_lvl+0x18c/0x250
[ 1219.150315][T21291]  ? show_regs_print_info+0x20/0x20
[ 1219.155535][T21291]  ? load_image+0x420/0x420
[ 1219.160060][T21291]  ? __might_fault+0xaa/0x120
[ 1219.164753][T21291]  ? __lock_acquire+0x7d40/0x7d40
[ 1219.169802][T21291]  should_fail_ex+0x39d/0x4d0
[ 1219.174518][T21291]  _copy_from_iter+0x1d9/0x12e0
[ 1219.179390][T21291]  ? slab_post_alloc_hook+0x8a/0x4b0
[ 1219.184702][T21291]  ? __virt_addr_valid+0x18c/0x540
[ 1219.189834][T21291]  ? __lock_acquire+0x7d40/0x7d40
[ 1219.194872][T21291]  ? rcu_is_watching+0x15/0xb0
[ 1219.199658][T21291]  ? copyout_mc+0x70/0x70
[ 1219.204109][T21291]  ? __virt_addr_valid+0x18c/0x540
[ 1219.209242][T21291]  ? __virt_addr_valid+0x18c/0x540
[ 1219.214377][T21291]  ? __virt_addr_valid+0x469/0x540
[ 1219.219513][T21291]  ? __check_object_size+0x506/0xa20
[ 1219.224825][T21291]  netlink_sendmsg+0x76b/0xbf0
[ 1219.229618][T21291]  ? lockdep_hardirqs_on+0x98/0x150
[ 1219.234852][T21291]  ? netlink_getsockopt+0x590/0x590
[ 1219.240084][T21291]  ? aa_sock_msg_perm+0x94/0x150
[ 1219.245049][T21291]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1219.250352][T21291]  ? security_socket_sendmsg+0x80/0xa0
[ 1219.255832][T21291]  ? netlink_getsockopt+0x590/0x590
[ 1219.261053][T21291]  ____sys_sendmsg+0x5ba/0x960
[ 1219.265843][T21291]  ? __asan_memset+0x22/0x40
[ 1219.270458][T21291]  ? __sys_sendmsg_sock+0x30/0x30
[ 1219.275583][T21291]  ? __import_iovec+0x5f2/0x850
[ 1219.280459][T21291]  ? import_iovec+0x73/0xa0
[ 1219.284992][T21291]  ___sys_sendmsg+0x2a6/0x360
[ 1219.289783][T21291]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1219.294589][T21291]  ? rcu_is_watching+0x3a/0xb0
[ 1219.299832][T21291]  ? __lock_acquire+0x7d40/0x7d40
[ 1219.304906][T21291]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1219.309780][T21291]  ? __x64_sys_sendmsg+0x80/0x80
[ 1219.314751][T21291]  ? lockdep_hardirqs_on+0x98/0x150
[ 1219.319970][T21291]  do_syscall_64+0x55/0xa0
[ 1219.324405][T21291]  ? clear_bhb_loop+0x40/0x90
[ 1219.329099][T21291]  ? clear_bhb_loop+0x40/0x90
[ 1219.333791][T21291]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1219.339700][T21291] RIP: 0033:0x7f602019c819
[ 1219.344134][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1219.364108][T21291] RSP: 002b:00007f6020fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1219.372547][T21291] RAX: ffffffffffffffda RBX: 00007f6020416090 RCX: 00007f602019c819
[ 1219.380536][T21291] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[ 1219.388613][T21291] RBP: 00007f6020fd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1219.396618][T21291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1219.404607][T21291] R13: 00007f6020416128 R14: 00007f6020416090 R15: 00007ffc60b6ee68
[ 1219.412626][T21291]  </TASK>
[ 1219.604860][T21294] netlink: 'syz.1.5271': attribute type 10 has an invalid length.
[ 1219.859443][T21298] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5272'.
[ 1220.208599][T21308] netlink: 'syz.1.5276': attribute type 10 has an invalid length.
[ 1220.739563][T21309] delete_channel: no stack
[ 1221.800278][T21327] netlink: 'syz.0.5282': attribute type 2 has an invalid length.
[ 1221.822174][T21327] netlink: 'syz.0.5282': attribute type 8 has an invalid length.
[ 1221.836754][T21327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5282'.
[ 1223.985884][T21332] FAULT_INJECTION: forcing a failure.
[ 1223.985884][T21332] name failslab, interval 1, probability 0, space 0, times 0
[ 1224.014922][T21332] CPU: 1 PID: 21332 Comm: syz.1.5283 Not tainted syzkaller #0
[ 1224.022436][T21332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1224.032513][T21332] Call Trace:
[ 1224.035816][T21332]  <TASK>
[ 1224.038761][T21332]  dump_stack_lvl+0x18c/0x250
[ 1224.043479][T21332]  ? show_regs_print_info+0x20/0x20
[ 1224.048706][T21332]  ? load_image+0x420/0x420
[ 1224.053232][T21332]  ? __might_sleep+0xe0/0xe0
[ 1224.057847][T21332]  ? __lock_acquire+0x7d40/0x7d40
[ 1224.062896][T21332]  should_fail_ex+0x39d/0x4d0
[ 1224.067601][T21332]  should_failslab+0x9/0x20
[ 1224.072135][T21332]  slab_pre_alloc_hook+0x59/0x310
[ 1224.077181][T21332]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1224.082917][T21332]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1224.088654][T21332]  __kmem_cache_alloc_node+0x53/0x250
[ 1224.094056][T21332]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1224.099799][T21332]  __kmalloc+0xa4/0x230
[ 1224.103989][T21332]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1224.109583][T21332]  tomoyo_path_number_perm+0x248/0x620
[ 1224.115067][T21332]  ? tomoyo_path_number_perm+0x217/0x620
[ 1224.120720][T21332]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1224.126200][T21332]  ? hrtimer_interrupt+0x597/0x9c0
[ 1224.131334][T21332]  ? ktime_get+0x7f/0x280
[ 1224.135714][T21332]  ? __fget_files+0x28/0x4b0
[ 1224.140333][T21332]  ? __fget_files+0x28/0x4b0
[ 1224.144954][T21332]  security_file_ioctl+0x70/0xa0
[ 1224.149913][T21332]  __se_sys_ioctl+0x48/0x170
[ 1224.154523][T21332]  do_syscall_64+0x55/0xa0
[ 1224.158947][T21332]  ? clear_bhb_loop+0x40/0x90
[ 1224.163638][T21332]  ? clear_bhb_loop+0x40/0x90
[ 1224.168332][T21332]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1224.174239][T21332] RIP: 0033:0x7f602019c819
[ 1224.178669][T21332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1224.198294][T21332] RSP: 002b:00007f6020fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1224.206741][T21332] RAX: ffffffffffffffda RBX: 00007f6020416090 RCX: 00007f602019c819
[ 1224.214726][T21332] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000006
[ 1224.222712][T21332] RBP: 00007f6020fd5090 R08: 0000000000000000 R09: 0000000000000000
[ 1224.230694][T21332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1224.238685][T21332] R13: 00007f6020416128 R14: 00007f6020416090 R15: 00007ffc60b6ee68
[ 1224.246688][T21332]  </TASK>
[ 1224.306793][T21332] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1224.575402][T21334] netlink: 'syz.0.5284': attribute type 10 has an invalid length.
[ 1224.700032][T21338] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5286'.
[ 1224.963608][T21342] netlink: 'syz.0.5287': attribute type 10 has an invalid length.
[ 1225.501001][T21348] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5289'.
[ 1225.541717][T21348] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5289'.
[ 1225.643462][T21349] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5289'.
[ 1225.678120][T21348] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5289'.
[ 1226.436430][T21368] netlink: 'syz.3.5293': attribute type 2 has an invalid length.
[ 1226.482242][T21368] netlink: 'syz.3.5293': attribute type 8 has an invalid length.
[ 1226.522142][T21368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5293'.
[ 1229.485262][T21372] netlink: 'syz.1.5295': attribute type 10 has an invalid length.
[ 1229.506586][T21374] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5296'.
[ 1229.521401][T21376] mac80211_hwsim hwsim187 »»»»»»: renamed from wlan0 (while UP)
[ 1229.644855][T21379] FAULT_INJECTION: forcing a failure.
[ 1229.644855][T21379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1229.658221][T21379] CPU: 0 PID: 21379 Comm: syz.3.5297 Not tainted syzkaller #0
[ 1229.665719][T21379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1229.675808][T21379] Call Trace:
[ 1229.679108][T21379]  <TASK>
[ 1229.682095][T21379]  dump_stack_lvl+0x18c/0x250
[ 1229.686812][T21379]  ? show_regs_print_info+0x20/0x20
[ 1229.692053][T21379]  ? load_image+0x420/0x420
[ 1229.696588][T21379]  ? __might_fault+0xaa/0x120
[ 1229.701295][T21379]  should_fail_ex+0x39d/0x4d0
[ 1229.706021][T21379]  copyin+0x1a/0x90
[ 1229.709864][T21379]  _copy_from_iter+0x404/0x12e0
[ 1229.714755][T21379]  ? copyout_mc+0x70/0x70
[ 1229.719114][T21379]  ? __sk_mem_raise_allocated+0xa29/0x1340
[ 1229.724959][T21379]  ? page_copy_sane+0x16a/0x270
[ 1229.729884][T21379]  copy_page_from_iter+0x7b/0x100
[ 1229.734941][T21379]  mptcp_sendmsg+0x9f2/0x16d0
[ 1229.739678][T21379]  ? mptcp_shutdown+0x80/0x80
[ 1229.744377][T21379]  ? inet_send_prepare+0x5c/0x260
[ 1229.749434][T21379]  ? inet6_sendmsg+0x5f/0xd0
[ 1229.754040][T21379]  ? inet6_compat_ioctl+0x3c0/0x3c0
[ 1229.759264][T21379]  ____sys_sendmsg+0x5ba/0x960
[ 1229.764067][T21379]  ? __asan_memset+0x22/0x40
[ 1229.768682][T21379]  ? __sys_sendmsg_sock+0x30/0x30
[ 1229.773736][T21379]  ? __import_iovec+0x3fa/0x850
[ 1229.778613][T21379]  ? import_iovec+0x73/0xa0
[ 1229.783223][T21379]  ___sys_sendmsg+0x2a6/0x360
[ 1229.787938][T21379]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1229.792757][T21379]  ? __lock_acquire+0x7d40/0x7d40
[ 1229.797845][T21379]  __se_sys_sendmsg+0x1c2/0x2b0
[ 1229.802720][T21379]  ? __x64_sys_sendmsg+0x80/0x80
[ 1229.807789][T21379]  ? lockdep_hardirqs_on+0x98/0x150
[ 1229.813022][T21379]  do_syscall_64+0x55/0xa0
[ 1229.817480][T21379]  ? clear_bhb_loop+0x40/0x90
[ 1229.822188][T21379]  ? clear_bhb_loop+0x40/0x90
[ 1229.826896][T21379]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1229.832810][T21379] RIP: 0033:0x7f688c99c819
[ 1229.837251][T21379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1229.856892][T21379] RSP: 002b:00007f688d902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1229.865345][T21379] RAX: ffffffffffffffda RBX: 00007f688cc16090 RCX: 00007f688c99c819
[ 1229.873338][T21379] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 000000000000000a
[ 1229.881327][T21379] RBP: 00007f688d902090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.889326][T21379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.897319][T21379] R13: 00007f688cc16128 R14: 00007f688cc16090 R15: 00007ffd6bb82ff8
[ 1229.905399][T21379]  </TASK>
[ 1230.341417][T21384] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5300'.
[ 1230.412674][T21384] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5300'.
[ 1231.808321][T21387] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5301'.
[ 1231.819024][T21390] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5300'.
[ 1234.822422][T21405] netlink: 'syz.2.5305': attribute type 2 has an invalid length.
[ 1234.834107][T21405] netlink: 'syz.2.5305': attribute type 8 has an invalid length.
[ 1234.842372][T21405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5305'.
[ 1235.418111][T21416] netlink: 'syz.1.5314': attribute type 2 has an invalid length.
[ 1235.433546][T21416] netlink: 'syz.1.5314': attribute type 8 has an invalid length.
[ 1235.444545][T21416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5314'.
[ 1235.513599][T21420] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5308'.
[ 1235.587081][T21420] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5308'.
[ 1235.607098][T21422] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5309'.
[ 1235.680687][T21425] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5308'.
[ 1235.691709][T21420] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5308'.
[ 1236.362046][T21430] netlink: 'syz.2.5311': attribute type 10 has an invalid length.
[ 1236.511171][T21433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5312'.
[ 1237.028243][T21439] netlink: 'syz.2.5315': attribute type 2 has an invalid length.
[ 1237.049425][T21439] netlink: 'syz.2.5315': attribute type 8 has an invalid length.
[ 1237.058246][T21439] __nla_validate_parse: 4 callbacks suppressed
[ 1237.058264][T21439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5315'.
[ 1237.595866][T21452] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5320'.
[ 1237.674222][T21450] netlink: 'syz.1.5319': attribute type 2 has an invalid length.
[ 1237.694179][T21450] netlink: 'syz.1.5319': attribute type 8 has an invalid length.
[ 1237.724176][T21450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5319'.
[ 1238.367037][T21462] netlink: 'syz.2.5324': attribute type 10 has an invalid length.
[ 1238.385316][T21461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5331'.
[ 1238.487628][T21470] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5325'.
[ 1239.254573][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.262921][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.294728][T21470] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5325'.
[ 1239.318627][T21473] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5325'.
[ 1239.463822][ T2931] hsr_slave_0: left promiscuous mode
[ 1239.493342][ T2931] hsr_slave_1: left promiscuous mode
[ 1239.516674][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1239.542998][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1239.580693][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1239.603801][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1239.642151][ T2931] batman_adv: batadv0: Interface deactivated: veth0_vlan
[ 1239.665236][ T2931] batman_adv: batadv0: Removing interface: veth0_vlan
[ 1239.758882][T21486] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5328'.
[ 1239.790172][ T2931] veth0_macvtap: left promiscuous mode
[ 1239.798392][ T2931] veth1_vlan: left promiscuous mode
[ 1239.813669][ T2931] veth0_vlan: left promiscuous mode
[ 1239.953714][T21489] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5330'.
[ 1240.922580][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1241.185911][ T2931] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1241.253246][ T2931] bond0 (unregistering): Released all slaves
[ 1241.287861][T21481] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5327'.
[ 1241.301164][T19813] Bluetooth: hci4: command 0x0406 tx timeout
[ 1241.706856][T21505] validate_nla: 2 callbacks suppressed
[ 1241.706891][T21505] netlink: 'syz.3.5335': attribute type 2 has an invalid length.
[ 1241.755587][T21505] netlink: 'syz.3.5335': attribute type 8 has an invalid length.
[ 1241.914568][T21510] netlink: 'syz.2.5337': attribute type 10 has an invalid length.
[ 1242.080860][T21517] __nla_validate_parse: 5 callbacks suppressed
[ 1242.080880][T21517] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5339'.
[ 1242.097285][T21514] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5339'.
[ 1243.930570][T21527] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5342'.
[ 1244.867917][T21538] netlink: 'syz.3.5347': attribute type 2 has an invalid length.
[ 1244.953999][T21538] netlink: 'syz.3.5347': attribute type 8 has an invalid length.
[ 1245.000032][T21538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5347'.
[ 1245.236813][T21546] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1245.250543][T21543] netlink: 'syz.2.5349': attribute type 10 has an invalid length.
[ 1245.268983][T21546] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1245.343171][T21549] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1245.389060][T21546] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5350'.
[ 1245.465906][T21551] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5352'.
[ 1246.062694][T21559] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5355'.
[ 1247.006531][T21568] netlink: 'syz.3.5360': attribute type 2 has an invalid length.
[ 1247.016900][T21568] netlink: 'syz.3.5360': attribute type 8 has an invalid length.
[ 1247.035324][T21568] netlink: 'syz.3.5360': attribute type 2 has an invalid length.
[ 1247.051984][T21568] netlink: 'syz.3.5360': attribute type 8 has an invalid length.
[ 1247.092859][T21568] __nla_validate_parse: 1 callbacks suppressed
[ 1247.092902][T21568] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5360'.
[ 1247.284481][T21574] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5367'.
[ 1248.571712][T21581] netlink: 'syz.1.5362': attribute type 10 has an invalid length.
[ 1248.681746][T21586] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5364'.
[ 1248.849137][T21593] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5365'.
[ 1248.912151][T21596] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5365'.
[ 1249.069881][T21593] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5365'.
[ 1249.103696][T21596] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5365'.
[ 1249.197969][T21600] netlink: 'syz.1.5370': attribute type 2 has an invalid length.
[ 1249.207419][T21600] netlink: 'syz.1.5370': attribute type 8 has an invalid length.
[ 1249.223021][T21600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5370'.
[ 1249.276489][T21603] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5371'.
[ 1249.345860][T21606] netlink: 'syz.1.5370': attribute type 2 has an invalid length.
[ 1249.370184][T21606] netlink: 'syz.1.5370': attribute type 8 has an invalid length.
[ 1249.387178][T21606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5370'.
[ 1250.528748][T21621] netlink: 'syz.2.5376': attribute type 10 has an invalid length.
[ 1250.668911][T21628] tap0: tun_chr_ioctl cmd 1074025677
[ 1250.674437][T21628] tap0: linktype set to 778
[ 1250.770665][T21628] tap0: tun_chr_ioctl cmd 2147767511
[ 1250.782061][T21633] tap0: tun_chr_ioctl cmd 1074025694
[ 1250.815472][T21628] team0: Device veth1_macvtap failed to register rx_handler
[ 1251.530548][T19813] Bluetooth: hci0: command 0x0406 tx timeout
[ 1254.457447][T21660] validate_nla: 7 callbacks suppressed
[ 1254.457482][T21660] netlink: 'syz.2.5392': attribute type 10 has an invalid length.
[ 1254.615801][T21665] netlink: 'syz.0.5393': attribute type 2 has an invalid length.
[ 1254.653245][T21667] __nla_validate_parse: 8 callbacks suppressed
[ 1254.653282][T21667] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5394'.
[ 1254.670736][T21665] netlink: 'syz.0.5393': attribute type 8 has an invalid length.
[ 1254.682916][T21665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5393'.
[ 1254.726103][T21673] netlink: 'syz.0.5393': attribute type 2 has an invalid length.
[ 1254.737677][T21673] netlink: 'syz.0.5393': attribute type 8 has an invalid length.
[ 1254.751443][T21673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5393'.
[ 1255.873597][T21691] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5402'.
[ 1256.013667][T21694] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5403'.
[ 1256.055774][T21694] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5403'.
[ 1256.134697][T21697] netlink: 'syz.0.5404': attribute type 10 has an invalid length.
[ 1257.226444][T21705] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5406'.
[ 1257.421810][T21710] netlink: 'syz.1.5408': attribute type 2 has an invalid length.
[ 1257.449933][T21710] netlink: 'syz.1.5408': attribute type 8 has an invalid length.
[ 1257.457925][T21710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5408'.
[ 1257.515078][T21710] netlink: 'syz.1.5408': attribute type 2 has an invalid length.
[ 1257.525282][T21710] netlink: 'syz.1.5408': attribute type 8 has an invalid length.
[ 1257.535603][T21710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5408'.
[ 1258.015778][T21523] hsr_slave_0: left promiscuous mode
[ 1258.057659][T21523] hsr_slave_1: left promiscuous mode
[ 1258.086849][T21523] hsr0: left allmulticast mode
[ 1258.108683][T21523] bridge0: port 4(hsr0) entered disabled state
[ 1258.151384][T21523] bond0: left allmulticast mode
[ 1258.224659][T21523] bond_slave_1: left allmulticast mode
[ 1258.259119][T21523] bridge0: port 3(bond0) entered disabled state
[ 1258.375836][T21523] bridge_slave_1: left allmulticast mode
[ 1258.392753][T21523] bridge_slave_1: left promiscuous mode
[ 1258.405245][T21523] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1258.535206][T21523] bridge_slave_0: left allmulticast mode
[ 1258.543858][T21523] bridge_slave_0: left promiscuous mode
[ 1258.552807][T21523] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1258.635624][T21523] veth1_macvtap: left promiscuous mode
[ 1258.645079][T21523] veth0_macvtap: left promiscuous mode
[ 1258.657522][T21523] veth1_vlan: left promiscuous mode
[ 1258.668112][T21523] veth0_vlan: left promiscuous mode
[ 1259.077700][T21740] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5418'.
[ 1259.823693][T21523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1259.834823][T21523] bond_slave_1 (unregistering): left promiscuous mode
[ 1260.149740][T21523] bond0 (unregistering): Released all slaves
[ 1260.243677][T21728] __nla_validate_parse: 1 callbacks suppressed
[ 1260.243701][T21728] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5415'.
[ 1260.260459][T21733] netlink: 'syz.2.5416': attribute type 10 has an invalid length.
[ 1260.275034][T21738] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5417'.
[ 1260.529411][T21751] netlink: 'syz.0.5421': attribute type 2 has an invalid length.
[ 1260.561332][T21751] netlink: 'syz.0.5421': attribute type 8 has an invalid length.
[ 1260.590819][T21751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5421'.
[ 1260.667302][T21751] netlink: 'syz.0.5421': attribute type 2 has an invalid length.
[ 1260.675452][T21751] netlink: 'syz.0.5421': attribute type 8 has an invalid length.
[ 1260.703054][T21751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5421'.
[ 1261.591911][T21769] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5428'.
[ 1261.777020][T19813] Bluetooth: hci3: command 0x0406 tx timeout
[ 1261.837679][T21771] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5429'.
[ 1261.878227][T21769] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5428'.
[ 1262.664010][T21778] netlink: 'syz.0.5430': attribute type 10 has an invalid length.
[ 1262.673452][T21784] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5431'.
[ 1262.706705][T21787] netlink: 'syz.2.5433': attribute type 2 has an invalid length.
[ 1262.716979][T21787] netlink: 'syz.2.5433': attribute type 8 has an invalid length.
[ 1262.726624][T21787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5433'.
[ 1262.776796][T21787] netlink: 'syz.2.5433': attribute type 2 has an invalid length.
[ 1262.790699][T21787] netlink: 'syz.2.5433': attribute type 8 has an invalid length.
[ 1262.817425][T21787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5433'.
[ 1264.537435][T21822] openvswitch: netlink: Flow key attr not present in new flow.
[ 1265.450990][T21836] validate_nla: 8 callbacks suppressed
[ 1265.451046][T21836] netlink: 'syz.3.5452': attribute type 10 has an invalid length.
[ 1265.596822][T21838] __nla_validate_parse: 7 callbacks suppressed
[ 1265.596859][T21838] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5453'.
[ 1265.653093][T21842] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5459'.
[ 1266.193769][T21523] hsr_slave_0: left promiscuous mode
[ 1266.222717][T21523] hsr_slave_1: left promiscuous mode
[ 1266.277977][T21849] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5456'.
[ 1266.322317][T21523] veth1_macvtap: left promiscuous mode
[ 1266.327920][T21523] veth0_macvtap: left promiscuous mode
[ 1266.339470][T21523] veth0_vlan: left promiscuous mode
[ 1267.303347][T21523] team0 (unregistering): Port device team_slave_1 removed
[ 1267.351369][T21523] team0 (unregistering): Port device team_slave_0 removed
[ 1267.401061][T21523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1267.768135][T21523] bond0 (unregistering): Released all slaves
[ 1267.803962][T21847] netlink: 'syz.3.5455': attribute type 10 has an invalid length.
[ 1267.812986][T21849] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5456'.
[ 1267.980103][T21867] FAULT_INJECTION: forcing a failure.
[ 1267.980103][T21867] name failslab, interval 1, probability 0, space 0, times 0
[ 1268.005664][T21867] CPU: 0 PID: 21867 Comm: syz.1.5462 Not tainted syzkaller #0
[ 1268.013194][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1268.023282][T21867] Call Trace:
[ 1268.026580][T21867]  <TASK>
[ 1268.029525][T21867]  dump_stack_lvl+0x18c/0x250
[ 1268.034238][T21867]  ? show_regs_print_info+0x20/0x20
[ 1268.039462][T21867]  ? load_image+0x420/0x420
[ 1268.044005][T21867]  ? __might_sleep+0xe0/0xe0
[ 1268.048608][T21867]  ? __lock_acquire+0x7d40/0x7d40
[ 1268.053658][T21867]  should_fail_ex+0x39d/0x4d0
[ 1268.058357][T21867]  should_failslab+0x9/0x20
[ 1268.062875][T21867]  slab_pre_alloc_hook+0x59/0x310
[ 1268.067928][T21867]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1268.073658][T21867]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1268.079559][T21867]  __kmem_cache_alloc_node+0x53/0x250
[ 1268.085034][T21867]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1268.090759][T21867]  __kmalloc+0xa4/0x230
[ 1268.094936][T21867]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1268.100498][T21867]  tomoyo_path_number_perm+0x248/0x620
[ 1268.105970][T21867]  ? tomoyo_path_number_perm+0x217/0x620
[ 1268.111621][T21867]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1268.117100][T21867]  ? ksys_write+0x1c4/0x260
[ 1268.121650][T21867]  ? __fget_files+0x28/0x4b0
[ 1268.126246][T21867]  ? __fget_files+0x28/0x4b0
[ 1268.130857][T21867]  security_file_ioctl+0x70/0xa0
[ 1268.135809][T21867]  __se_sys_ioctl+0x48/0x170
[ 1268.140412][T21867]  do_syscall_64+0x55/0xa0
[ 1268.144832][T21867]  ? clear_bhb_loop+0x40/0x90
[ 1268.149516][T21867]  ? clear_bhb_loop+0x40/0x90
[ 1268.154198][T21867]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.160100][T21867] RIP: 0033:0x7f602019c819
[ 1268.164524][T21867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.184137][T21867] RSP: 002b:00007f6020ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1268.192564][T21867] RAX: ffffffffffffffda RBX: 00007f6020415fa0 RCX: 00007f602019c819
[ 1268.200628][T21867] RDX: 0000200000000780 RSI: 0000000000008924 RDI: 0000000000000004
[ 1268.208601][T21867] RBP: 00007f6020ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.216574][T21867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.224548][T21867] R13: 00007f6020416038 R14: 00007f6020415fa0 R15: 00007ffc60b6ee68
[ 1268.232540][T21867]  </TASK>
[ 1268.289930][T21862] netlink: 'syz.3.5461': attribute type 10 has an invalid length.
[ 1268.385023][T21867] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1268.507604][T21872] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.5465'.
[ 1268.817718][T21875] netlink: 'syz.0.5466': attribute type 10 has an invalid length.
[ 1268.884302][T21881] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5467'.
[ 1269.059537][T21887] netlink: 'syz.0.5470': attribute type 10 has an invalid length.
[ 1269.321481][T21894] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5472'.
[ 1269.364890][T21894] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5472'.
[ 1269.435743][T21896] netlink: 'syz.3.5474': attribute type 10 has an invalid length.
[ 1270.396234][T21907] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5476'.
[ 1271.217294][T21916] netlink: 'syz.0.5481': attribute type 10 has an invalid length.
[ 1271.416955][T21920] netlink: 'syz.2.5483': attribute type 10 has an invalid length.
[ 1271.514118][T21926] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5485'.
[ 1271.541132][T21926] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5485'.
[ 1271.782035][T21933] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.5488'.
[ 1271.794273][T21934] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5487'.
[ 1272.241946][T21939] netlink: 'syz.1.5489': attribute type 1 has an invalid length.
[ 1272.250765][T21939] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5489'.
[ 1272.757290][T21950] netlink: 'syz.3.5493': attribute type 10 has an invalid length.
[ 1273.648560][T21958] netlink: 'syz.2.5496': attribute type 10 has an invalid length.
[ 1273.742369][T21960] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5497'.
[ 1274.143074][T21967] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5498'.
[ 1274.157258][T21966] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5499'.
[ 1274.176399][T21966] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5499'.
[ 1274.207605][T21970] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5500'.
[ 1275.177152][T21982] netlink: 'syz.2.5504': attribute type 10 has an invalid length.
[ 1275.206096][T21985] netlink: 'syz.0.5506': attribute type 10 has an invalid length.
[ 1275.940729][T21992] netlink: 'syz.0.5509': attribute type 30 has an invalid length.
[ 1277.364222][T22014] netlink: 'syz.1.5515': attribute type 10 has an invalid length.
[ 1277.409684][T22011] netlink: 'syz.0.5516': attribute type 10 has an invalid length.
[ 1277.417691][T22013] __nla_validate_parse: 3 callbacks suppressed
[ 1277.417731][T22013] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5517'.
[ 1277.684228][T22020] FAULT_INJECTION: forcing a failure.
[ 1277.684228][T22020] name failslab, interval 1, probability 0, space 0, times 0
[ 1277.746342][T22020] CPU: 0 PID: 22020 Comm: syz.2.5520 Not tainted syzkaller #0
[ 1277.753887][T22020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1277.763965][T22020] Call Trace:
[ 1277.767260][T22020]  <TASK>
[ 1277.770293][T22020]  dump_stack_lvl+0x18c/0x250
[ 1277.775039][T22020]  ? show_regs_print_info+0x20/0x20
[ 1277.780348][T22020]  ? load_image+0x420/0x420
[ 1277.785052][T22020]  ? __lock_acquire+0x7d40/0x7d40
[ 1277.790092][T22020]  ? __asan_memset+0x22/0x40
[ 1277.794715][T22020]  should_fail_ex+0x39d/0x4d0
[ 1277.799422][T22020]  should_failslab+0x9/0x20
[ 1277.803938][T22020]  slab_pre_alloc_hook+0x59/0x310
[ 1277.808987][T22020]  kmem_cache_alloc+0x5a/0x2d0
[ 1277.813767][T22020]  ? security_inode_alloc+0x34/0x110
[ 1277.819182][T22020]  security_inode_alloc+0x34/0x110
[ 1277.824327][T22020]  inode_init_always+0x8fc/0xc90
[ 1277.829301][T22020]  new_inode_pseudo+0x95/0x1d0
[ 1277.834098][T22020]  __sock_create+0x12d/0x940
[ 1277.838724][T22020]  ? __might_fault+0xaa/0x120
[ 1277.843419][T22020]  ? __might_fault+0xc6/0x120
[ 1277.848122][T22020]  __sys_socketpair+0x1c1/0x550
[ 1277.853006][T22020]  __x64_sys_socketpair+0x9b/0xb0
[ 1277.858057][T22020]  do_syscall_64+0x55/0xa0
[ 1277.862663][T22020]  ? clear_bhb_loop+0x40/0x90
[ 1277.867440][T22020]  ? clear_bhb_loop+0x40/0x90
[ 1277.872130][T22020]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1277.878041][T22020] RIP: 0033:0x7fb21b19c819
[ 1277.882472][T22020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1277.902102][T22020] RSP: 002b:00007fb21c072028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 1277.910534][T22020] RAX: ffffffffffffffda RBX: 00007fb21b415fa0 RCX: 00007fb21b19c819
[ 1277.918518][T22020] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[ 1277.926500][T22020] RBP: 00007fb21c072090 R08: 0000000000000000 R09: 0000000000000000
[ 1277.934482][T22020] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002
[ 1277.942477][T22020] R13: 00007fb21b416038 R14: 00007fb21b415fa0 R15: 00007fff261da498
[ 1277.950561][T22020]  </TASK>
[ 1278.055614][T22020] socket: no more sockets
[ 1278.404116][T22029] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5522'.
[ 1279.311118][T22039] netlink: 'syz.1.5527': attribute type 10 has an invalid length.
[ 1279.358172][T22042] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5528'.
[ 1279.447429][T22044] netlink: 'syz.3.5529': attribute type 10 has an invalid length.
[ 1279.609694][T22046] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5531'.
[ 1279.623263][T22046] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.5531'.
[ 1279.644167][T22046] netlink: 'syz.2.5531': attribute type 1 has an invalid length.
[ 1280.780258][T22073] netlink: 'syz.1.5539': attribute type 10 has an invalid length.
[ 1280.921584][T22077] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5540'.
[ 1282.078129][T22092] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5542'.
[ 1282.087812][T22092] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.5542'.
[ 1282.099060][T22092] tipc: Started in network mode
[ 1282.103938][T22092] tipc: Node identity d, cluster identity 56
[ 1282.112025][T22092] tipc: Node number set to 13
[ 1284.562481][T22106] netlink: 'syz.2.5550': attribute type 10 has an invalid length.
[ 1284.742150][T22108] FAULT_INJECTION: forcing a failure.
[ 1284.742150][T22108] name failslab, interval 1, probability 0, space 0, times 0
[ 1284.767799][T22108] CPU: 1 PID: 22108 Comm: syz.0.5551 Not tainted syzkaller #0
[ 1284.775309][T22108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1284.785447][T22108] Call Trace:
[ 1284.788729][T22108]  <TASK>
[ 1284.791668][T22108]  dump_stack_lvl+0x18c/0x250
[ 1284.796341][T22108]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1284.802494][T22108]  ? show_regs_print_info+0x20/0x20
[ 1284.807706][T22108]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1284.813883][T22108]  ? dump_stack+0x9/0x20
[ 1284.818167][T22108]  should_fail_ex+0x39d/0x4d0
[ 1284.822867][T22108]  should_failslab+0x9/0x20
[ 1284.827377][T22108]  slab_pre_alloc_hook+0x59/0x310
[ 1284.832411][T22108]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1284.838133][T22108]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1284.843855][T22108]  __kmem_cache_alloc_node+0x53/0x250
[ 1284.849233][T22108]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1284.854945][T22108]  __kmalloc+0xa4/0x230
[ 1284.859102][T22108]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1284.864647][T22108]  tomoyo_path_number_perm+0x248/0x620
[ 1284.870119][T22108]  ? tomoyo_path_number_perm+0x217/0x620
[ 1284.875749][T22108]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1284.881205][T22108]  ? ksys_write+0x1c4/0x260
[ 1284.885737][T22108]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1284.891727][T22108]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1284.897889][T22108]  security_file_ioctl+0x70/0xa0
[ 1284.902826][T22108]  __se_sys_ioctl+0x48/0x170
[ 1284.907411][T22108]  do_syscall_64+0x55/0xa0
[ 1284.911819][T22108]  ? clear_bhb_loop+0x40/0x90
[ 1284.916490][T22108]  ? clear_bhb_loop+0x40/0x90
[ 1284.921168][T22108]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1284.927075][T22108] RIP: 0033:0x7efde659c819
[ 1284.931520][T22108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1284.951215][T22108] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1284.959625][T22108] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1284.967587][T22108] RDX: 0000200000000280 RSI: 0000000000008b26 RDI: 0000000000000005
[ 1284.975550][T22108] RBP: 00007efde74d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1284.983514][T22108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1284.991478][T22108] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1284.999453][T22108]  </TASK>
[ 1285.017049][T22108] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1286.007690][T22123] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5557'.
[ 1286.500896][T22131] netlink: 'syz.3.5563': attribute type 10 has an invalid length.
[ 1286.631181][T22134] netlink: 'syz.0.5561': attribute type 1 has an invalid length.
[ 1286.639152][T22134] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5561'.
[ 1287.556713][T22152] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.5570'.
[ 1287.743571][T22158] netlink: 'syz.2.5572': attribute type 10 has an invalid length.
[ 1288.400978][T22164] netlink: 'syz.2.5574': attribute type 3 has an invalid length.
[ 1288.453537][T22164] netlink: 'syz.2.5574': attribute type 6 has an invalid length.
[ 1288.468645][T22164] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.5574'.
[ 1288.909851][T22174] FAULT_INJECTION: forcing a failure.
[ 1288.909851][T22174] name failslab, interval 1, probability 0, space 0, times 0
[ 1288.930568][T22174] CPU: 0 PID: 22174 Comm: syz.0.5579 Not tainted syzkaller #0
[ 1288.938075][T22174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1288.948148][T22174] Call Trace:
[ 1288.951447][T22174]  <TASK>
[ 1288.954397][T22174]  dump_stack_lvl+0x18c/0x250
[ 1288.959109][T22174]  ? show_regs_print_info+0x20/0x20
[ 1288.964312][T22174]  ? load_image+0x420/0x420
[ 1288.968837][T22174]  ? __might_sleep+0xe0/0xe0
[ 1288.973433][T22174]  ? __lock_acquire+0x7d40/0x7d40
[ 1288.978461][T22174]  ? trace_contention_end+0x39/0xe0
[ 1288.983680][T22174]  should_fail_ex+0x39d/0x4d0
[ 1288.988459][T22174]  should_failslab+0x9/0x20
[ 1288.992968][T22174]  slab_pre_alloc_hook+0x59/0x310
[ 1288.997993][T22174]  ? mutex_lock_nested+0x20/0x20
[ 1289.002929][T22174]  ? tcx_link_attach+0x168/0x900
[ 1289.007870][T22174]  __kmem_cache_alloc_node+0x53/0x250
[ 1289.013241][T22174]  ? tcx_link_attach+0x168/0x900
[ 1289.018194][T22174]  kmalloc_trace+0x2a/0xe0
[ 1289.022611][T22174]  tcx_link_attach+0x168/0x900
[ 1289.027490][T22174]  ? tcx_prog_query+0x140/0x140
[ 1289.032369][T22174]  ? __fget_files+0x43d/0x4b0
[ 1289.037138][T22174]  ? bpf_prog_attach_check_attach_type+0x188/0x440
[ 1289.043641][T22174]  link_create+0x390/0x720
[ 1289.048054][T22174]  __sys_bpf+0x4d7/0x890
[ 1289.052290][T22174]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1289.057669][T22174]  ? lock_chain_count+0x20/0x20
[ 1289.062536][T22174]  __x64_sys_bpf+0x7c/0x90
[ 1289.066956][T22174]  do_syscall_64+0x55/0xa0
[ 1289.071370][T22174]  ? clear_bhb_loop+0x40/0x90
[ 1289.076044][T22174]  ? clear_bhb_loop+0x40/0x90
[ 1289.080715][T22174]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1289.086608][T22174] RIP: 0033:0x7efde659c819
[ 1289.091037][T22174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1289.110727][T22174] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1289.119138][T22174] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1289.127138][T22174] RDX: 0000000000000020 RSI: 0000200000000c40 RDI: 000000000000001c
[ 1289.135193][T22174] RBP: 00007efde74d6090 R08: 0000000000000000 R09: 0000000000000000
[ 1289.143161][T22174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1289.151387][T22174] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1289.159365][T22174]  </TASK>
[ 1289.272643][T22181] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5581'.
[ 1289.274642][T22183] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5584'.
[ 1289.358028][T22185] netlink: 'syz.0.5583': attribute type 10 has an invalid length.
[ 1289.387856][T22187] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5585'.
[ 1289.419674][T22187] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5585'.
[ 1289.492877][T22192] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5585'.
[ 1290.562879][T22212] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.5596'.
[ 1290.565767][T22215] netlink: 'syz.3.5595': attribute type 9 has an invalid length.
[ 1293.878120][T22229] __nla_validate_parse: 1 callbacks suppressed
[ 1293.878137][T22229] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5601'.
[ 1293.906928][T22230] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5601'.
[ 1293.931030][T22232] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5601'.
[ 1294.303965][T22247] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.5607'.
[ 1294.668254][T22239] netlink: 'syz.3.5602': attribute type 28 has an invalid length.
[ 1294.687613][T22252] netlink: 'syz.0.5608': attribute type 10 has an invalid length.
[ 1295.016730][T22264] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5614'.
[ 1295.047908][T22264] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5614'.
[ 1295.142662][T22270] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5616'.
[ 1295.223862][T22271] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.5617'.
[ 1295.241727][T22272] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5614'.
[ 1358.550041][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1377.941624][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.098606][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.294305][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.473399][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.592538][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.762066][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1378.935291][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1379.089599][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1379.261563][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1381.261474][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1381.267980][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1383.071690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1383.078101][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1391.168910][    C1] icmp: detected local route for 10.128.0.93 during ICMP sending, src 10.128.0.163
[ 1400.248249][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1400.255017][    C0] rcu: 	0-....: (10496 ticks this GP) idle=94ac/1/0x4000000000000000 softirq=90176/90177 fqs=41
[ 1400.266774][    C0] rcu: 	         hardirqs   softirqs   csw/system
[ 1400.273220][    C0] rcu: 	 number:  1157780         14            0
[ 1400.279652][    C0] rcu: 	cputime:    26327       2828           10   ==> 29160(ms)
[ 1400.287474][    C0] rcu: 	(t=10500 jiffies g=98569 q=284 ncpus=2)
[ 1400.293734][    C0] rcu: rcu_preempt kthread starved for 782 jiffies! g98569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1400.304868][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1400.314854][    C0] rcu: RCU grace-period kthread stack dump:
[ 1400.320777][    C0] task:rcu_preempt     state:R  running task     stack:26024 pid:17    ppid:2      flags:0x00004000
[ 1400.331586][    C0] Call Trace:
[ 1400.334897][    C0]  <TASK>
[ 1400.337860][    C0]  __schedule+0x1553/0x45a0
[ 1400.342432][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1400.348445][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1400.354362][    C0]  ? asan.module_dtor+0x20/0x20
[ 1400.359254][    C0]  ? enqueue_timer+0x23d/0x550
[ 1400.364044][    C0]  ? __mod_timer+0x984/0xdb0
[ 1400.368675][    C0]  schedule+0xbd/0x170
[ 1400.372773][    C0]  schedule_timeout+0x188/0x2d0
[ 1400.377641][    C0]  ? console_conditional_schedule+0x40/0x40
[ 1400.383553][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1400.389476][    C0]  ? update_process_times+0x1b0/0x1b0
[ 1400.394881][    C0]  ? prepare_to_swait_event+0x339/0x360
[ 1400.400463][    C0]  rcu_gp_fqs_loop+0x313/0x1590
[ 1400.405370][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[ 1400.411566][    C0]  ? rcu_gp_init+0x1560/0x1560
[ 1400.416356][    C0]  ? rcu_gp_cleanup+0xb41/0xc90
[ 1400.421248][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1400.426483][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1400.431984][    C0]  rcu_gp_kthread+0x9d/0x3b0
[ 1400.436605][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1400.441773][    C0]  ? __kthread_parkme+0x7a/0x1c0
[ 1400.447051][    C0]  ? __kthread_parkme+0x162/0x1c0
[ 1400.452109][    C0]  kthread+0x2fa/0x390
[ 1400.456465][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1400.461605][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1400.466217][    C0]  ret_from_fork+0x48/0x80
[ 1400.470661][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 1400.475275][    C0]  ret_from_fork_asm+0x11/0x20
[ 1400.480093][    C0]  </TASK>
[ 1400.483129][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1400.489469][    C0] CPU: 0 PID: 22271 Comm: syz.0.5617 Not tainted syzkaller #0
[ 1400.496945][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1400.507017][    C0] RIP: 0010:lock_is_held_type+0x13e/0x190
[ 1400.512778][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[ 1400.532417][    C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000206
[ 1400.538534][    C0] RAX: 4b5e0b8d14221200 RBX: ffff8880789e0000 RCX: 4b5e0b8d14221200
[ 1400.546532][    C0] RDX: 0000000000000100 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60
[ 1400.554529][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2238aa0
[ 1400.562613][    C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000001
[ 1400.570615][    C0] R13: 0000000000000246 R14: ffffffff8d1320a0 R15: ffff8880789e0b08
[ 1400.578613][    C0] FS:  00007efde74d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1400.587563][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1400.594286][    C0] CR2: 0000000000000000 CR3: 0000000066986000 CR4: 00000000003506f0
[ 1400.602286][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[ 1400.610291][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1400.618295][    C0] Call Trace:
[ 1400.621596][    C0]  <IRQ>
[ 1400.624464][    C0]  ? page_ext_get+0x22/0x2b0
[ 1400.629184][    C0]  page_ext_get+0x193/0x2b0
[ 1400.633733][    C0]  __reset_page_owner+0x2e/0x190
[ 1400.638696][    C0]  free_unref_page_prepare+0x7b2/0x8c0
[ 1400.644171][    C0]  free_unref_page+0x32/0x2e0
[ 1400.648852][    C0]  ? destroy_large_folio+0x170/0x2f0
[ 1400.654142][    C0]  skb_release_data+0x49a/0x800
[ 1400.659019][    C0]  __kfree_skb+0x57/0x70
[ 1400.663280][    C0]  tcp_write_queue_purge+0x143/0x2f0
[ 1400.668590][    C0]  tcp_done_with_error+0x43/0xc0
[ 1400.673618][    C0]  tcp_retransmit_timer+0x1728/0x3020
[ 1400.679005][    C0]  ? tcp_delack_timer_handler+0x4d0/0x4d0
[ 1400.684739][    C0]  ? __sanitizer_cov_trace_switch+0x7/0x120
[ 1400.690635][    C0]  ? tcp_write_timer_handler+0x2f7/0x920
[ 1400.696276][    C0]  tcp_write_timer+0x12a/0x280
[ 1400.701131][    C0]  call_timer_fn+0x189/0x540
[ 1400.705722][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[ 1400.710920][    C0]  ? call_timer_fn+0xd2/0x540
[ 1400.715596][    C0]  ? __run_timers+0x800/0x800
[ 1400.720281][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[ 1400.725480][    C0]  __run_timers+0x542/0x800
[ 1400.730015][    C0]  ? detach_timer+0x2b0/0x2b0
[ 1400.734709][    C0]  run_timer_softirq+0x67/0xf0
[ 1400.739472][    C0]  handle_softirqs+0x280/0x820
[ 1400.744346][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1400.749112][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1400.753623][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1400.758825][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1400.763423][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1400.767939][    C0]  irq_exit_rcu+0x9/0x20
[ 1400.772174][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1400.777803][    C0]  </IRQ>
[ 1400.780731][    C0]  <TASK>
[ 1400.783656][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1400.789719][    C0] RIP: 0010:bpf_prog_83d37dda6cf46a9a+0x4/0x1e
[ 1400.795872][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 40 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa <0f> 1f 44 00 00 66 90 55 48 89 e5 f3 0f 1e fa 41 56 45 31 f6 31 c0
[ 1400.815474][    C0] RSP: 0018:ffffc900054f70b8 EFLAGS: 00000286
[ 1400.821540][    C0] RAX: 1ffff92000a9da06 RBX: ffffc900054ed048 RCX: dffffc0000000000
[ 1400.829509][    C0] RDX: ffffc9000cb71000 RSI: ffffc900054ed048 RDI: ffffe8ffffcbb000
[ 1400.837477][    C0] RBP: ffffc900054f71b8 R08: ffffc900054f714f R09: 0000000000000000
[ 1400.845453][    C0] R10: ffffc900054f7140 R11: fffff52000a9ee2a R12: ffffc900054ed030
[ 1400.853513][    C0] R13: ffff88801837cf98 R14: ffff88801837cfa8 R15: 0000000000000001
[ 1400.861506][    C0]  ? trace_call_bpf+0x333/0x6c0
[ 1400.866383][    C0]  ? trace_call_bpf+0xc3/0x6c0
[ 1400.871160][    C0]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 1400.877246][    C0]  perf_trace_run_bpf_submit+0x7a/0x1c0
[ 1400.882798][    C0]  perf_trace_lock+0x304/0x3b0
[ 1400.887573][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1400.893819][    C0]  ? trace_event_raw_event_lock+0x250/0x250
[ 1400.899717][    C0]  ? __alloc_pages+0x134/0x460
[ 1400.904563][    C0]  ? __alloc_pages+0x134/0x460
[ 1400.909322][    C0]  lock_release+0x866/0x8c0
[ 1400.913828][    C0]  ? fs_reclaim_acquire+0x7c/0x100
[ 1400.918935][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1400.923968][    C0]  ? netlink_ack+0x376/0x1180
[ 1400.928645][    C0]  ? netlink_unicast+0x751/0x8d0
[ 1400.933583][    C0]  ? netlink_sendmsg+0x8d0/0xbf0
[ 1400.938607][    C0]  ? sock_write_iter+0x2df/0x420
[ 1400.943558][    C0]  ? ksys_write+0x150/0x260
[ 1400.948073][    C0]  ? do_syscall_64+0x55/0xa0
[ 1400.952663][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1400.958731][    C0]  ? fs_reclaim_acquire+0x7c/0x100
[ 1400.963848][    C0]  prepare_alloc_pages+0x1ba/0x5f0
[ 1400.968966][    C0]  __alloc_pages+0x134/0x460
[ 1400.973567][    C0]  ? zone_statistics+0x170/0x170
[ 1400.978715][    C0]  __kmalloc_large_node+0x8c/0x1e0
[ 1400.983830][    C0]  ? __alloc_skb+0x138/0x2c0
[ 1400.988591][    C0]  __kmalloc_node_track_caller+0x10d/0x230
[ 1400.994832][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1400.999596][    C0]  ? __alloc_skb+0x138/0x2c0
[ 1401.004180][    C0]  kmalloc_reserve+0x116/0x240
[ 1401.008957][    C0]  __alloc_skb+0x138/0x2c0
[ 1401.013375][    C0]  netlink_ack+0x376/0x1180
[ 1401.018083][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1401.022974][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0
[ 1401.029585][    C0]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1401.035500][    C0]  ? netlink_dump+0xe50/0xe50
[ 1401.040237][    C0]  ? perf_trace_lock+0xfc/0x3b0
[ 1401.045110][    C0]  netlink_rcv_skb+0x2c5/0x4d0
[ 1401.049891][    C0]  ? rtnetlink_bind+0x80/0x80
[ 1401.055007][    C0]  ? netlink_ack+0x1180/0x1180
[ 1401.059791][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1401.064826][    C0]  ? __rcu_read_unlock+0x7c/0xd0
[ 1401.069765][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1401.074972][    C0]  netlink_unicast+0x751/0x8d0
[ 1401.079763][    C0]  netlink_sendmsg+0x8d0/0xbf0
[ 1401.084542][    C0]  ? netlink_getsockopt+0x590/0x590
[ 1401.089765][    C0]  ? aa_sock_msg_perm+0x94/0x150
[ 1401.094705][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1401.099991][    C0]  ? security_socket_sendmsg+0x80/0xa0
[ 1401.105464][    C0]  sock_write_iter+0x2df/0x420
[ 1401.110236][    C0]  ? sock_read_iter+0x3e0/0x3e0
[ 1401.115120][    C0]  vfs_write+0x46c/0x990
[ 1401.119373][    C0]  ? file_end_write+0x250/0x250
[ 1401.124230][    C0]  ? __fget_files+0x43d/0x4b0
[ 1401.128917][    C0]  ? __fdget_pos+0x1d8/0x330
[ 1401.133506][    C0]  ? ksys_write+0x75/0x260
[ 1401.137923][    C0]  ksys_write+0x150/0x260
[ 1401.142258][    C0]  ? __ia32_sys_read+0x90/0x90
[ 1401.147126][    C0]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1401.153031][    C0]  do_syscall_64+0x55/0xa0
[ 1401.157444][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1401.162120][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1401.166893][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1401.172787][    C0] RIP: 0033:0x7efde659c819
[ 1401.177202][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1401.196892][    C0] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1401.205307][    C0] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1401.213275][    C0] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000009
[ 1401.221242][    C0] RBP: 00007efde6632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1401.229221][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1401.237188][    C0] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1401.245174][    C0]  </TASK>
[ 1401.248196][    C0] CPU: 0 PID: 22271 Comm: syz.0.5617 Not tainted syzkaller #0
[ 1401.255662][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1401.265716][    C0] RIP: 0010:lock_is_held_type+0x13e/0x190
[ 1401.271438][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[ 1401.291039][    C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000206
[ 1401.297197][    C0] RAX: 4b5e0b8d14221200 RBX: ffff8880789e0000 RCX: 4b5e0b8d14221200
[ 1401.305248][    C0] RDX: 0000000000000100 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60
[ 1401.313217][    C0] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2238aa0
[ 1401.321183][    C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 0000000000000001
[ 1401.329152][    C0] R13: 0000000000000246 R14: ffffffff8d1320a0 R15: ffff8880789e0b08
[ 1401.337117][    C0] FS:  00007efde74d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1401.346051][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1401.352630][    C0] CR2: 0000000000000000 CR3: 0000000066986000 CR4: 00000000003506f0
[ 1401.360600][    C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000
[ 1401.368568][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1401.376622][    C0] Call Trace:
[ 1401.379898][    C0]  <IRQ>
[ 1401.382739][    C0]  ? page_ext_get+0x22/0x2b0
[ 1401.387333][    C0]  page_ext_get+0x193/0x2b0
[ 1401.391836][    C0]  __reset_page_owner+0x2e/0x190
[ 1401.396779][    C0]  free_unref_page_prepare+0x7b2/0x8c0
[ 1401.402248][    C0]  free_unref_page+0x32/0x2e0
[ 1401.406934][    C0]  ? destroy_large_folio+0x170/0x2f0
[ 1401.412310][    C0]  skb_release_data+0x49a/0x800
[ 1401.417171][    C0]  __kfree_skb+0x57/0x70
[ 1401.421410][    C0]  tcp_write_queue_purge+0x143/0x2f0
[ 1401.426701][    C0]  tcp_done_with_error+0x43/0xc0
[ 1401.431639][    C0]  tcp_retransmit_timer+0x1728/0x3020
[ 1401.437021][    C0]  ? tcp_delack_timer_handler+0x4d0/0x4d0
[ 1401.442752][    C0]  ? __sanitizer_cov_trace_switch+0x7/0x120
[ 1401.448660][    C0]  ? tcp_write_timer_handler+0x2f7/0x920
[ 1401.454302][    C0]  tcp_write_timer+0x12a/0x280
[ 1401.459072][    C0]  call_timer_fn+0x189/0x540
[ 1401.463671][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[ 1401.468876][    C0]  ? call_timer_fn+0xd2/0x540
[ 1401.473551][    C0]  ? __run_timers+0x800/0x800
[ 1401.478258][    C0]  ? tcp_init_xmit_timers+0xb0/0xb0
[ 1401.483465][    C0]  __run_timers+0x542/0x800
[ 1401.487987][    C0]  ? detach_timer+0x2b0/0x2b0
[ 1401.492784][    C0]  run_timer_softirq+0x67/0xf0
[ 1401.497590][    C0]  handle_softirqs+0x280/0x820
[ 1401.502365][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1401.507225][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1401.511741][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1401.517037][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1401.521636][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1401.526327][    C0]  irq_exit_rcu+0x9/0x20
[ 1401.530651][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1401.536285][    C0]  </IRQ>
[ 1401.539211][    C0]  <TASK>
[ 1401.542145][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1401.548127][    C0] RIP: 0010:bpf_prog_83d37dda6cf46a9a+0x4/0x1e
[ 1401.554305][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 40 00 00 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa <0f> 1f 44 00 00 66 90 55 48 89 e5 f3 0f 1e fa 41 56 45 31 f6 31 c0
[ 1401.573938][    C0] RSP: 0018:ffffc900054f70b8 EFLAGS: 00000286
[ 1401.580014][    C0] RAX: 1ffff92000a9da06 RBX: ffffc900054ed048 RCX: dffffc0000000000
[ 1401.588015][    C0] RDX: ffffc9000cb71000 RSI: ffffc900054ed048 RDI: ffffe8ffffcbb000
[ 1401.596013][    C0] RBP: ffffc900054f71b8 R08: ffffc900054f714f R09: 0000000000000000
[ 1401.603982][    C0] R10: ffffc900054f7140 R11: fffff52000a9ee2a R12: ffffc900054ed030
[ 1401.611953][    C0] R13: ffff88801837cf98 R14: ffff88801837cfa8 R15: 0000000000000001
[ 1401.619951][    C0]  ? trace_call_bpf+0x333/0x6c0
[ 1401.624811][    C0]  ? trace_call_bpf+0xc3/0x6c0
[ 1401.629582][    C0]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 1401.635745][    C0]  perf_trace_run_bpf_submit+0x7a/0x1c0
[ 1401.641293][    C0]  perf_trace_lock+0x304/0x3b0
[ 1401.646054][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1401.652218][    C0]  ? trace_event_raw_event_lock+0x250/0x250
[ 1401.658117][    C0]  ? __alloc_pages+0x134/0x460
[ 1401.662889][    C0]  ? __alloc_pages+0x134/0x460
[ 1401.667645][    C0]  lock_release+0x866/0x8c0
[ 1401.672162][    C0]  ? fs_reclaim_acquire+0x7c/0x100
[ 1401.677270][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1401.682467][    C0]  ? netlink_ack+0x376/0x1180
[ 1401.687148][    C0]  ? netlink_unicast+0x751/0x8d0
[ 1401.692095][    C0]  ? netlink_sendmsg+0x8d0/0xbf0
[ 1401.697032][    C0]  ? sock_write_iter+0x2df/0x420
[ 1401.701988][    C0]  ? ksys_write+0x150/0x260
[ 1401.706492][    C0]  ? do_syscall_64+0x55/0xa0
[ 1401.711083][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1401.717150][    C0]  ? fs_reclaim_acquire+0x7c/0x100
[ 1401.722264][    C0]  prepare_alloc_pages+0x1ba/0x5f0
[ 1401.727381][    C0]  __alloc_pages+0x134/0x460
[ 1401.732003][    C0]  ? zone_statistics+0x170/0x170
[ 1401.736952][    C0]  __kmalloc_large_node+0x8c/0x1e0
[ 1401.742255][    C0]  ? __alloc_skb+0x138/0x2c0
[ 1401.746842][    C0]  __kmalloc_node_track_caller+0x10d/0x230
[ 1401.752653][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1401.757418][    C0]  ? __alloc_skb+0x138/0x2c0
[ 1401.762008][    C0]  kmalloc_reserve+0x116/0x240
[ 1401.766775][    C0]  __alloc_skb+0x138/0x2c0
[ 1401.771197][    C0]  netlink_ack+0x376/0x1180
[ 1401.775795][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1401.780657][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0
[ 1401.787246][    C0]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1401.793056][    C0]  ? netlink_dump+0xe50/0xe50
[ 1401.797740][    C0]  ? perf_trace_lock+0xfc/0x3b0
[ 1401.802597][    C0]  netlink_rcv_skb+0x2c5/0x4d0
[ 1401.807361][    C0]  ? rtnetlink_bind+0x80/0x80
[ 1401.812037][    C0]  ? netlink_ack+0x1180/0x1180
[ 1401.816821][    C0]  ? __lock_acquire+0x7d40/0x7d40
[ 1401.821855][    C0]  ? __rcu_read_unlock+0x7c/0xd0
[ 1401.826878][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1401.832089][    C0]  netlink_unicast+0x751/0x8d0
[ 1401.836867][    C0]  netlink_sendmsg+0x8d0/0xbf0
[ 1401.841638][    C0]  ? netlink_getsockopt+0x590/0x590
[ 1401.846842][    C0]  ? aa_sock_msg_perm+0x94/0x150
[ 1401.851867][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1401.857153][    C0]  ? security_socket_sendmsg+0x80/0xa0
[ 1401.862616][    C0]  sock_write_iter+0x2df/0x420
[ 1401.867386][    C0]  ? sock_read_iter+0x3e0/0x3e0
[ 1401.872262][    C0]  vfs_write+0x46c/0x990
[ 1401.876513][    C0]  ? file_end_write+0x250/0x250
[ 1401.881378][    C0]  ? __fget_files+0x43d/0x4b0
[ 1401.886069][    C0]  ? __fdget_pos+0x1d8/0x330
[ 1401.890655][    C0]  ? ksys_write+0x75/0x260
[ 1401.895079][    C0]  ksys_write+0x150/0x260
[ 1401.899414][    C0]  ? __ia32_sys_read+0x90/0x90
[ 1401.904199][    C0]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1401.910184][    C0]  do_syscall_64+0x55/0xa0
[ 1401.914599][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1401.919274][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1401.923951][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1401.929848][    C0] RIP: 0033:0x7efde659c819
[ 1401.934263][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1401.954042][    C0] RSP: 002b:00007efde74d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1401.962465][    C0] RAX: ffffffffffffffda RBX: 00007efde6815fa0 RCX: 00007efde659c819
[ 1401.970436][    C0] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000009
[ 1401.978403][    C0] RBP: 00007efde6632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1401.986544][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1401.994601][    C0] R13: 00007efde6816038 R14: 00007efde6815fa0 R15: 00007ffe1ba6f588
[ 1402.002587][    C0]  </TASK>
SYZFAIL: failed to send rpc
fd=3 want=48720 sent=0 n=-1 (errno 32: Broken pipe)
[ 1403.170327][T19813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1403.183410][T19813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1403.191391][T19813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1403.202148][T19813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1403.210210][T19813] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1403.222147][T19813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1405.220985][ T2922] hsr_slave_0: left promiscuous mode
[ 1405.226750][ T2922] hsr_slave_1: left promiscuous mode
[ 1405.245737][ T2922] veth1_macvtap: left promiscuous mode
[ 1405.251510][ T2922] veth0_macvtap: left promiscuous mode
[ 1405.257018][ T2922] veth1_vlan: left allmulticast mode
[ 1405.262596][ T2922] veth1_vlan: left promiscuous mode
[ 1405.267883][ T2922] veth0_vlan: left promiscuous mode
[ 1405.361516][ T2922] team0 (unregistering): Port device geneve1 removed
[ 1405.780586][ T2922] team0 (unregistering): Port device team_slave_1 removed
[ 1405.827053][ T2922] team0 (unregistering): Port device team_slave_0 removed
[ 1405.870313][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1405.951473][ T2922] team0 (unregistering): Port device bridge_slave_1 removed
[ 1406.210989][ T2922] bond0 (unregistering): Released all slaves