last executing test programs:

28.334533977s ago: executing program 0 (id=1541):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f)
socket$kcm(0x10, 0x400000002, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

27.347179391s ago: executing program 0 (id=1551):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r1, 0x0, 0x160)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r3, 0x0, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881)
perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000840)='./cgroup/file0\x00', 0xd0939199c36b4d28)
mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81)

27.238868334s ago: executing program 0 (id=1554):
openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{}, 0x0, 0x0}, 0x20)
socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
socket$kcm(0x22, 0x2, 0x21)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)

27.116609877s ago: executing program 0 (id=1556):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000440), 0x4)
sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000880)=[{&(0x7f00000008c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f0000000940)="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", 0x281}], 0x2}, 0x40)

27.038705279s ago: executing program 0 (id=1558):
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x9, 0xfa, 0x0, 0x0, 0x647c, 0x12000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_bp, 0x1000, 0x1ff, 0x1, 0x4, 0x5d6, 0x2, 0xc27, 0x0, 0x2, 0x0, 0x80000000}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x10) (async)
r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
unlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
socketpair(0x1e, 0x0, 0xfffffff4, &(0x7f00000001c0)={<r2=>0xffffffffffffffff}) (rerun: 32)
sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="4505cb6eb421cc159027d35d41dc96ada3943cc7a378e793", 0x18}, {&(0x7f0000000240)}, {&(0x7f0000000280)="f89572cb645f7403d83e0040aa1b31d7534ac66c82e93ec37936931bf1f3f8105814c1ceb96f5dd880f57d0f31d6ff8f94f73bee620d", 0x36}], 0x3, &(0x7f0000000300)=[{0x98, 0x0, 0x200, "3ae6a09009478a5edf91872b718beb13fc612d3460753ab7f1e21f02b4ec296f33f76416b368656ad1fc882452076114d0f70d9ed718fef8afc991f8e060b6e61d17e6816637af4a46873a8c798e35335f58cec91c8724ec8d2c7a68355a07f0b82ab31f52030a691e81924e8be8b94e0256202dd7b322a0d33698d5e0b6ee67907da78945a6f1f0"}, {0x68, 0x111, 0x401, "d2eb99dfe61e9b0789707827f1ac93e768016bd664fc5891ebdcd77c513f598f224cf96c2ce71ce52e77e82e23f90b265b6e55250cdb8ea833d590ede4d48486d4f8e68916986cc0252dea613eb99706d45e4e"}], 0x100}, 0x28044000) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="03000100"]) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x10, 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="b400000000000000791048000000000071002b00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f00000015c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001600)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) (rerun: 64)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={r3, <r4=>0xffffffffffffffff}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xc, 0x10, &(0x7f0000001980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001ac0)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='(&\x00')

26.728411627s ago: executing program 0 (id=1561):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001f40)='devices.list\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xffffffff, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000180)="9152d1", &(0x7f00000001c0)=""/14}, 0x20)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001fc0)={0x0, 0x2, &(0x7f0000002000)=[{&(0x7f0000002040)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
write$cgroup_devices(r0, &(0x7f0000003040)=ANY=[], 0xfffffeff)
perf_event_open(&(0x7f0000003080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000003100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000003140)={&(0x7f0000003180)=@hci, 0x80, &(0x7f0000003200)=[{&(0x7f0000003240)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000003340)={0x0, 0xfffffff5, &(0x7f0000003380)=[{&(0x7f00000033c0)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003480)=""/4135, 0x1027}], 0x1}, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004500)={0x0, 0x5, &(0x7f00000045c0)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500004cf79bec154a"], 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

11.632230986s ago: executing program 32 (id=1561):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001f40)='devices.list\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0xffffffff, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000180)="9152d1", &(0x7f00000001c0)=""/14}, 0x20)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001fc0)={0x0, 0x2, &(0x7f0000002000)=[{&(0x7f0000002040)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
write$cgroup_devices(r0, &(0x7f0000003040)=ANY=[], 0xfffffeff)
perf_event_open(&(0x7f0000003080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000003100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000003140)={&(0x7f0000003180)=@hci, 0x80, &(0x7f0000003200)=[{&(0x7f0000003240)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000003340)={0x0, 0xfffffff5, &(0x7f0000003380)=[{&(0x7f00000033c0)="a2", 0xfffffdef}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003480)=""/4135, 0x1027}], 0x1}, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004500)={0x0, 0x5, &(0x7f00000045c0)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500004cf79bec154a"], 0x0}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001480)}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)

4.554498548s ago: executing program 4 (id=1771):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000240)="1700000072006bcd9e3f00006e0800000723000004020038eaaf1234e8942eda74dbc9ca5fb0c5f63165db2004abf540f829565abc511e0ff80c8769a39fdebff50fe116701bdc52cc2329c371b4fe62bf4e24a4786b9dd166aa1a5271369650b534f533d392419be0e67cabf4100223975659fb9d751a67f0a148df3a21eacf2230bc4dadb86921061a5739479b8432ce662098070ae344c9a0010d903f3fefa9b4497f928635e4fb2a87fb07955afee97ec94ffc413073a66331632ed96aad75bb8f4118c57cbab2a9454dece4f931b7b177da205c59bc9f77c737edc85f44c230d8523ff9f6", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c080)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000040)={'ip_vti0\x00', @multicast})

4.272256755s ago: executing program 4 (id=1773):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000a40)="b800000500000000", &(0x7f0000000a80)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10003, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="f5d2b9ed", 0x4}, {&(0x7f0000000400)="4fff54c1020045768718b4da1ceb33c9381f3291be99a909af93cab03a", 0x1d}], 0x2}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20c080, 0x0)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000040))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8f6, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b702000078157f0a2ccca6a271a1a314000000b7030000000000008500000083000000bc89000000000073c520b70035090100000000009500000006000000b5080000000000007b9a00fe00000000b50000bf862000b141e5911930e36f86ceb6ca0000000007080000f8ffffffbfa402000000000007040000f0ff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)

2.705253864s ago: executing program 2 (id=1791):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@l2tp6={0xa, 0x301, 0x0, @mcast1, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)

2.672715554s ago: executing program 2 (id=1793):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x26e1, 0x0)
close(r1)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0xfe33)

2.575505107s ago: executing program 2 (id=1794):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000005c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000004000000042000000", @ANYRES32, @ANYBLOB="0000000000000000b11c4c3701272166c354cfe2000000000000000000000000e48a45b5bc4003f55ad8bab07b15d89b2b110a243963d247e54430b39445ed53de28ca9d3aa32f65dd0da31188594fae8ea23084767b7c388a72779702a85165a361289831ef1ee247b72902789b49247e5e6a32f4aff01480fc5b35d6361b7e6900d46ac277a1c2c9afc7fb38c008000000a6491c7be12dff5f574419b6dd9b79aec65928ce01a866bdb76f68f20aa5edd036c3c43a0fa611814f3c4e674c82b8cc59b2fce660e23932a4a8e14500b2d4009cdb1ce745ca5fde0bae84db223aa59aaf92000000000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000297ee6788cc96b89b4bc2a880bdae0616aba53fec22fb739b439bc4f8fff2e27e611bf7cf17b2c5f126c1ab98001df7b6afcf39ce6771f99f1d9ff4986bc5879f958f188e985e370a4f21f1361a333502ba893eb0626bf23c5102dc00813b985"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x1000, r1}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=""/92}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x5, 0x3, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x18, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000b80)="0000000000002d9d8aaf5d", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x3, 0x3a)
socket$kcm(0x10, 0x2, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
socket$kcm(0x10, 0x3, 0x10)
r7 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
close(r7)
sendmsg$kcm(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0))

2.474894729s ago: executing program 3 (id=1795):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%pS    \x00'}, 0x20)
write$cgroup_subtree(r0, &(0x7f0000001300)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYRESDEC], 0xfe33)

2.359938712s ago: executing program 3 (id=1796):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f)
socket$kcm(0x10, 0x400000002, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {&(0x7f0000000a80)="9bc0a3e36510d21f8c7641c1744f46b569b4692e212a8763fc8115394f9930a2449e903282755a9fecc56ef1758280fe7ac510", 0x33}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc7585858103441e210eab578892d246d27195760450095b9038d9db4f69", 0x54}], 0x6, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

1.922368663s ago: executing program 4 (id=1799):
r0 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x18, 0x1, 0x24}}], 0x18}, 0x8004)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xfffc, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x34, 0x9}}], 0x38}, 0x200040c4)
r2 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080)
setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x78)

1.796124586s ago: executing program 1 (id=1800):
r0 = bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0x237}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18580}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x43}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x10, 0xb}, {0x4, 0x10001, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xb}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0x1b1}, 0x94)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x7, 0xa, 0x8, 0x0, 0x0, 0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x5}, 0xa03, 0x4, 0x8, 0x17, 0x5, 0x1, 0xfff, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

1.790356096s ago: executing program 4 (id=1801):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r1, 0x0, 0x160)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r3, 0x0, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881)
perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000840)='./cgroup/file0\x00', 0xd0939199c36b4d28)
mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81)

1.582923171s ago: executing program 4 (id=1802):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f)
socket$kcm(0x10, 0x400000002, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {&(0x7f0000000a80)="9bc0a3e36510d21f8c7641c1744f46b569b4692e212a8763fc8115394f9930a2449e903282755a9fecc56ef1758280fe7ac510", 0x33}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc75", 0x38}], 0x6, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

1.568192301s ago: executing program 2 (id=1803):
openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{}, 0x0, 0x0}, 0x20)
socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
socket$kcm(0x22, 0x2, 0x21)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc63100003", 0x2d}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)

1.567439681s ago: executing program 1 (id=1804):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000400000000000000000000f3850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2}, 0xc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

1.413897155s ago: executing program 3 (id=1805):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000005c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f00000006c0)=@l2tp6={0xa, 0x2a00, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0)

1.343913037s ago: executing program 1 (id=1806):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
close(r1)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
ioctl$TUNGETVNETLE(r1, 0x40047451, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x4004005)
r2 = socket$kcm(0x22, 0x2, 0x21)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x80044943, &(0x7f0000000a00)={r2})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x15, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff0000000095000000feff0000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)

1.311966027s ago: executing program 2 (id=1807):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x1002, &(0x7f0000003400)=""/4098}, 0x94)

1.266332679s ago: executing program 3 (id=1808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f0000000a40)="b800000500000000", &(0x7f0000000a80)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10003, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="f5d2b9ed", 0x4}, {&(0x7f0000000400)="4fff54c1020045768718b4da1ceb33c9381f3291be99a909af93cab03a", 0x1d}], 0x2}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20c080, 0x0)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000040))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8f6, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000078157f0a2ccca6a271a1a314000000b7030000000000008500000083000000bc89000000000073c520b70035090100000000009500000006000000b5080000000000007b9a00fe00000000b50000bf862000b141e5911930e36f86ceb6ca0000000007080000f8ffffffbfa402000000000007040000f0ff", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)

1.20029812s ago: executing program 1 (id=1809):
r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x6, 0x9, 0x81, 0x0, 0x1, 0x524c, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x2ad008d94647bf6a, @perf_bp={&(0x7f0000000100), 0xa}, 0x10414, 0x40, 0x0, 0x3, 0x1, 0x8, 0x6, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x95, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18c00000000ff7899db4c90000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x4000, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000540)={r5, 0x0, 0x0}, 0x10)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x0, 0x30, 0x0, 0x5000)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)

1.19598046s ago: executing program 2 (id=1810):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x1002, &(0x7f0000003400)=""/4098}, 0x94) (fail_nth: 2)

771.069851ms ago: executing program 3 (id=1811):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0}, 0x18)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x25, 0x1, 0x0)
recvmsg$kcm(r1, 0x0, 0x160)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000300), 0x4)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.deny\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r3, 0x0, 0x20000000)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = socket$kcm(0xa, 0x6, 0x0)
sendmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4000000)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0x4004881)
perf_event_open(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000840)='./cgroup/file0\x00', 0xd0939199c36b4d28)
mkdir(&(0x7f0000000880)='./cgroup/file0/file0\x00', 0x81)

404.31398ms ago: executing program 1 (id=1812):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000060000000700000018040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ff"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100", 0x2d}], 0x1, 0x0, 0x0, 0x7400}, 0x34044001)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r2, 0x4, r0}, 0x10)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)

237.280934ms ago: executing program 4 (id=1813):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1ffffffffffffef3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x80000, 0x0, 0x0, 0x41000, 0x8}, 0x94)
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7f)
socket$kcm(0x10, 0x400000002, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000bc0)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000100)="011317be0335921648a7e47e784a1f37d00fecb8d94fbee5af0c4dde22b07f4935f267f1e6c8fdfcf2cf036e59ab5cb9199e6f2104b0e3f01b39d9cb3821aaa45413059fea363792", 0x48}, {&(0x7f00000007c0)="bbbe954a5513da5eb434019c50ae9012a24d2fc10ac38abf7fb8235820db54ef7c76e06bfaf5948b82b241c8c5101e510cee7c84fd21f6ffa26a5df1f63b28e28782e82e2a5a24682297453b8fcaa59c98b21cd2f709fd75c345689e9e937109c8eacb1aff124343757c52b8b16356f19c5b8acc713e93aae68d8877e91e9476f60a9963e9eefcf31f2df8d5c05f726301fed99643ece57f2f3e9785547a363650cc60e90c57fdd9fb8852ca9fb53ef0335a652efe8e54fac7ea42df18e5748d665b2577ed520882a23489d3b5267d77106f9478d2c0e7578b0b8bfbf5c6d86cbcdc4d41ffba3279993abb2533", 0xed}, {&(0x7f00000008c0)="8dfd45f42a0f8679e6684e025fe604dde200e30fe8323df3ec3220dd58cba777e07561225eaedd92f6fbbbc5a309f05bb5bc98514fc6a879266dfdd06ee0455cfe84e3d0811bcfa954a9aebb3dd9e4d1607656df87ba04f82fd83f1f43898502de05f1a18f56b4fa208d37b46c6f73eb1fd725dfbadf117a5f1c39c397d6f27b94168508e63a8ef7daa7c7c3cfcd", 0x8e}, {&(0x7f0000000980)="09f2b62785617c1659e0f3c70869dd6ff99b7c9bb72fdcc26aa08131e7507a8603e740315065462e0449dd5b80fe6cf15b86733ebfcfa2ce56f9f332a036eb47a4233870a523ce07c1efbcbaf202a2e27cac0a740977a19130bf4272e2f6c7546b0541957f3f002169e4af6a66c03c78c5644920d0db61a8b1c0c3573ab058a628b85547cb64857037a9cc5e8a33462ce5652c10fc49fbf621c4362500b026ef2a9598f26e9b966c46b9a174af56ce7e653ce286422e9a60ee6bfac23de3b3b6aae19ce9208bf0ad048d9fd776b3af0981", 0xd1}, {&(0x7f0000000a80)="9bc0a3e36510d21f8c7641c1744f46b569b4692e212a8763fc8115394f9930a2449e903282755a9fecc56ef1758280fe7ac510", 0x33}, {&(0x7f0000000ac0)="8dd3ed1e90724d8defd81d8403e6744ad72ef0ebf0605827c5d6bf20517308a52f4cd684e92da2d5df492fc6298c97a3e771cc8ac657bc7585858103441e210eab578892d246d27195760450095b9038d9db4f69", 0x54}], 0x6, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8902, &(0x7f00000005c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000600)='memory.current\x00', 0xf0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x80000001, 0x5, 0xd, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x1000000000007}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
recvmsg(r5, &(0x7f0000000e80)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000c00)=""/82, 0x52}, {&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/127, 0x7f}, {&(0x7f0000000d80)=""/92, 0x5c}], 0x5}, 0x10122)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

214.792814ms ago: executing program 3 (id=1814):
r0 = bpf$MAP_CREATE(0x1400000000000000, 0x0, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c40), 0x0, 0x10, &(0x7f0000000c80), 0x237}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1a, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x18580}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x43}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000640)=[r0, 0xffffffffffffffff, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x10, 0xb}, {0x4, 0x10001, 0x7, 0x6}, {0x3, 0x5, 0x3, 0x7}, {0x5, 0x5, 0xb}, {0x5, 0x5, 0xf, 0x8}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0x1b1}, 0x94)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x7, 0xa, 0x8, 0x0, 0x0, 0x8, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x5}, 0xa03, 0x4, 0x8, 0x17, 0x5, 0x1, 0xfff, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

0s ago: executing program 1 (id=1815):
openat$tun(0xffffffffffffff9c, &(0x7f0000001580), 0x200, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001600)={{}, 0x0, 0x0}, 0x20)
socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0)
socket$kcm(0x22, 0x2, 0x21)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/98, 0x62}, {&(0x7f0000000180)=""/151, 0x97}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x4}, 0x100)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

000000000246 R12: 0000000000000002
[  202.544145][ T8309] R13: 00007f4ef5626038 R14: 00007f4ef5625fa0 R15: 00007fff97bc1e08
[  202.552118][ T8309]  </TASK>
[  202.560894][ T8299] delete_channel: no stack
[  203.005026][ T8315] netlink: 'syz.2.888': attribute type 10 has an invalid length.
[  203.023190][ T8315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'.
[  203.046369][ T8315] team0: entered promiscuous mode
[  203.051436][ T8315] team_slave_1: entered promiscuous mode
[  203.059060][ T8315] team0: entered allmulticast mode
[  203.073066][ T8315] team_slave_1: entered allmulticast mode
[  203.080617][ T8315] 8021q: adding VLAN 0 to HW filter on device team0
[  203.088333][ T8315] bridge0: port 3(team0) entered blocking state
[  203.094850][ T8315] bridge0: port 3(team0) entered disabled state
[  203.103806][ T8315] bridge0: port 3(team0) entered blocking state
[  203.110173][ T8315] bridge0: port 3(team0) entered forwarding state
[  203.325674][ T8327] netlink: 'syz.1.890': attribute type 10 has an invalid length.
[  203.377764][ T8327] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.890'.
[  203.911252][ T8329] veth1_macvtap: left promiscuous mode
[  203.924343][ T8329] macsec0: entered allmulticast mode
[  204.064709][ T8331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.889'.
[  204.105947][ T8318] delete_channel: no stack
[  204.487508][ T8346] delete_channel: no stack
[  204.795719][ T8352] Dead loop on virtual device ip6_vti0, fix it urgently!
[  204.878751][ T8353] FAULT_INJECTION: forcing a failure.
[  204.878751][ T8353] name failslab, interval 1, probability 0, space 0, times 0
[  205.152989][ T8353] CPU: 0 PID: 8353 Comm: syz.2.899 Not tainted syzkaller #0
[  205.160329][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  205.170397][ T8353] Call Trace:
[  205.173686][ T8353]  <TASK>
[  205.176629][ T8353]  dump_stack_lvl+0x18c/0x250
[  205.181329][ T8353]  ? show_regs_print_info+0x20/0x20
[  205.186544][ T8353]  ? load_image+0x420/0x420
[  205.191067][ T8353]  ? __might_sleep+0xe0/0xe0
[  205.195680][ T8353]  ? __lock_acquire+0x7eb0/0x7eb0
[  205.200721][ T8353]  should_fail_ex+0x394/0x4c0
[  205.205420][ T8353]  should_failslab+0x9/0x20
[  205.209943][ T8353]  slab_pre_alloc_hook+0x59/0x300
[  205.214986][ T8353]  kmem_cache_alloc+0x5a/0x2c0
[  205.219770][ T8353]  ? security_inode_alloc+0x34/0x110
[  205.225077][ T8353]  security_inode_alloc+0x34/0x110
[  205.230215][ T8353]  inode_init_always+0x914/0xc90
[  205.235174][ T8353]  new_inode_pseudo+0x95/0x1d0
[  205.239960][ T8353]  __sock_create+0x12d/0x940
[  205.244578][ T8353]  mptcp_subflow_create_socket+0x10c/0xad0
[  205.250406][ T8353]  ? __mptcp_subflow_connect+0x14d0/0x14d0
[  205.256231][ T8353]  ? mark_lock+0x94/0x320
[  205.260581][ T8353]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  205.266579][ T8353]  __mptcp_nmpc_sk+0x157/0x720
[  205.271359][ T8353]  ? __bpf_trace_subflow_check_data_avail+0x160/0x160
[  205.278128][ T8353]  ? __local_bh_enable_ip+0x13a/0x1c0
[  205.283513][ T8353]  ? lockdep_hardirqs_on+0x98/0x150
[  205.288728][ T8353]  ? __local_bh_enable_ip+0x13a/0x1c0
[  205.294122][ T8353]  mptcp_sendmsg_fastopen+0x7c/0x4c0
[  205.299442][ T8353]  mptcp_sendmsg+0x144c/0x1670
[  205.304233][ T8353]  ? aa_sk_perm+0x83c/0x970
[  205.308761][ T8353]  ? aa_sk_perm+0x83c/0x970
[  205.313293][ T8353]  ? aa_af_perm+0x330/0x330
[  205.317815][ T8353]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  205.324256][ T8353]  ? mptcp_shutdown+0x80/0x80
[  205.328967][ T8353]  ? inet_send_prepare+0xb2/0x250
[  205.334010][ T8353]  ? inet6_sendmsg+0x5f/0xd0
[  205.338611][ T8353]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  205.343826][ T8353]  ____sys_sendmsg+0x61b/0x980
[  205.348615][ T8353]  ? __asan_memset+0x22/0x40
[  205.353226][ T8353]  ? __sys_sendmsg_sock+0x30/0x30
[  205.358265][ T8353]  ? __import_iovec+0x3fa/0x850
[  205.363143][ T8353]  ? import_iovec+0x73/0xa0
[  205.367669][ T8353]  ___sys_sendmsg+0x2a6/0x360
[  205.372369][ T8353]  ? get_pid_task+0x20/0x1e0
[  205.376977][ T8353]  ? __sys_sendmsg+0x2b0/0x2b0
[  205.381782][ T8353]  ? __lock_acquire+0x7eb0/0x7eb0
[  205.386851][ T8353]  __se_sys_sendmsg+0x1d0/0x2c0
[  205.391724][ T8353]  ? perf_trace_preemptirq_template+0x269/0x330
[  205.397984][ T8353]  ? __x64_sys_sendmsg+0x80/0x80
[  205.402953][ T8353]  ? lockdep_hardirqs_on+0x98/0x150
[  205.408172][ T8353]  do_syscall_64+0x55/0xb0
[  205.412596][ T8353]  ? clear_bhb_loop+0x40/0x90
[  205.417283][ T8353]  ? clear_bhb_loop+0x40/0x90
[  205.421977][ T8353]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.427890][ T8353] RIP: 0033:0x7f256ed9e559
[  205.432316][ T8353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.451936][ T8353] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  205.460367][ T8353] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  205.468362][ T8353] RDX: e07e872420dfefca RSI: 0000200000002b40 RDI: 0000000000000006
[  205.476340][ T8353] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  205.484325][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  205.492310][ T8353] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  205.500310][ T8353]  </TASK>
[  205.845777][ T8353] socket: no more sockets
[  205.916157][ T8362] netlink: 'syz.2.899': attribute type 3 has an invalid length.
[  206.093336][ T8362] netlink: 'syz.2.899': attribute type 5 has an invalid length.
[  206.142071][ T8362] netlink: 'syz.2.899': attribute type 6 has an invalid length.
[  206.190758][ T8362] netlink: 197520 bytes leftover after parsing attributes in process `syz.2.899'.
[  206.444167][ T8349] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.896'.
[  206.547468][ T8368] netlink: 'syz.3.903': attribute type 10 has an invalid length.
[  206.572927][ T8368] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.903'.
[  206.915410][ T8376] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.914'.
[  206.941008][ T8376] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.914'.
[  207.038248][ T8374] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.914'.
[  207.223007][ T8379] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.914'.
[  207.442738][ T8365] delete_channel: no stack
[  207.630317][ T8391] FAULT_INJECTION: forcing a failure.
[  207.630317][ T8391] name failslab, interval 1, probability 0, space 0, times 0
[  207.644452][ T8391] CPU: 0 PID: 8391 Comm: syz.2.910 Not tainted syzkaller #0
[  207.651772][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  207.661843][ T8391] Call Trace:
[  207.665136][ T8391]  <TASK>
[  207.668073][ T8391]  dump_stack_lvl+0x18c/0x250
[  207.672756][ T8391]  ? show_regs_print_info+0x20/0x20
[  207.677948][ T8391]  ? load_image+0x420/0x420
[  207.682458][ T8391]  ? __might_sleep+0xe0/0xe0
[  207.687047][ T8391]  ? __lock_acquire+0x7eb0/0x7eb0
[  207.692086][ T8391]  should_fail_ex+0x394/0x4c0
[  207.696782][ T8391]  should_failslab+0x9/0x20
[  207.701286][ T8391]  slab_pre_alloc_hook+0x59/0x300
[  207.706310][ T8391]  ? __lock_acquire+0x7eb0/0x7eb0
[  207.711344][ T8391]  kmem_cache_alloc_node+0x5e/0x310
[  207.716557][ T8391]  ? __alloc_skb+0x103/0x2c0
[  207.721165][ T8391]  __alloc_skb+0x103/0x2c0
[  207.725592][ T8391]  netlink_sendmsg+0x66a/0xbf0
[  207.730393][ T8391]  ? netlink_getsockopt+0x590/0x590
[  207.735598][ T8391]  ? apparmor_socket_sendmsg+0x8e/0x330
[  207.741149][ T8391]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  207.746435][ T8391]  ? security_socket_sendmsg+0x80/0xa0
[  207.751888][ T8391]  ? netlink_getsockopt+0x590/0x590
[  207.757088][ T8391]  ____sys_sendmsg+0x61b/0x980
[  207.761856][ T8391]  ? __asan_memset+0x22/0x40
[  207.766448][ T8391]  ? __sys_sendmsg_sock+0x30/0x30
[  207.771476][ T8391]  ? __import_iovec+0x5f2/0x850
[  207.776338][ T8391]  ? import_iovec+0x73/0xa0
[  207.780842][ T8391]  ___sys_sendmsg+0x2a6/0x360
[  207.785518][ T8391]  ? get_pid_task+0x20/0x1e0
[  207.790107][ T8391]  ? __sys_sendmsg+0x2b0/0x2b0
[  207.794879][ T8391]  ? __lock_acquire+0x7eb0/0x7eb0
[  207.799913][ T8391]  __se_sys_sendmsg+0x1d0/0x2c0
[  207.804762][ T8391]  ? __x64_sys_sendmsg+0x80/0x80
[  207.809706][ T8391]  ? lockdep_hardirqs_on+0x98/0x150
[  207.814902][ T8391]  do_syscall_64+0x55/0xb0
[  207.819311][ T8391]  ? clear_bhb_loop+0x40/0x90
[  207.823981][ T8391]  ? clear_bhb_loop+0x40/0x90
[  207.828653][ T8391]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.834547][ T8391] RIP: 0033:0x7f256ed9e559
[  207.838955][ T8391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.858561][ T8391] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.866969][ T8391] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  207.874933][ T8391] RDX: 0000000000000840 RSI: 0000200000001c40 RDI: 0000000000000003
[  207.882894][ T8391] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  207.890854][ T8391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.898814][ T8391] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  207.906788][ T8391]  </TASK>
[  207.915761][ T8386] delete_channel: no stack
[  208.123036][ T8398] Dead loop on virtual device ip6_vti0, fix it urgently!
[  208.665464][ T8412] netlink: 'syz.1.918': attribute type 10 has an invalid length.
[  208.701357][ T8412] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.918'.
[  208.713427][ T8411] netlink: 201660 bytes leftover after parsing attributes in process `syz.3.919'.
[  208.788536][ T8418] Dead loop on virtual device ip6_vti0, fix it urgently!
[  208.893977][ T8415] delete_channel: no stack
[  209.041282][ T8424] Dead loop on virtual device ip6_vti0, fix it urgently!
[  209.453529][ T8408] delete_channel: no stack
[  209.766592][ T8442] Dead loop on virtual device ip6_vti0, fix it urgently!
[  209.953750][ T8444] delete_channel: no stack
[  210.111838][ T8456] syzkaller0: entered promiscuous mode
[  210.124307][ T8456] syzkaller0: entered allmulticast mode
[  210.135338][ T8459] netlink: 'syz.3.937': attribute type 10 has an invalid length.
[  210.159988][ T8459] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.937'.
[  210.244178][ T8451] sit0: left promiscuous mode
[  210.252052][ T8462] Dead loop on virtual device ip6_vti0, fix it urgently!
[  210.309604][ T8449] sit0: entered promiscuous mode
[  210.983906][ T8450] delete_channel: no stack
[  211.099691][ T8473] netlink: 'syz.1.942': attribute type 3 has an invalid length.
[  211.107431][ T8473] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.942'.
[  211.143589][ T8473] netlink: 'syz.1.942': attribute type 39 has an invalid length.
[  211.312453][ T8478] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.464898][ T8475] delete_channel: no stack
[  211.812440][ T8493] Dead loop on virtual device ip6_vti0, fix it urgently!
[  211.831403][ T8494] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.950'.
[  211.841355][ T8494] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.950'.
[  211.859283][ T8490] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.950'.
[  211.881304][ T8494] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.950'.
[  211.898401][ T8496] netlink: 'syz.0.952': attribute type 39 has an invalid length.
[  212.051020][ T8502] Dead loop on virtual device ip6_vti0, fix it urgently!
[  212.557134][ T8506] delete_channel: no stack
[  212.712922][ T8515] Dead loop on virtual device ip6_vti0, fix it urgently!
[  213.150944][ T8529] IPv6: NLM_F_CREATE should be specified when creating new route
[  213.180057][ T8529] netlink: 1 bytes leftover after parsing attributes in process `syz.0.967'.
[  213.316358][ T8530] delete_channel: no stack
[  213.449566][ T8539] Dead loop on virtual device ip6_vti0, fix it urgently!
[  213.484335][ T8537] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  213.539769][ T8537] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.970'.
[  213.614519][ T8545] netlink: 'syz.3.973': attribute type 10 has an invalid length.
[  213.719425][ T8545] gre0: entered promiscuous mode
[  213.725050][ T8545] gre0: entered allmulticast mode
[  213.730566][ T8545] team0: Device gre0 is of different type
[  213.999861][ T8549] sit0: entered allmulticast mode
[  214.126967][ T8561] sit0: entered promiscuous mode
[  214.135403][ T8563] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.978'.
[  214.454975][ T8570] delete_channel: no stack
[  214.464822][ T8576] Dead loop on virtual device ip6_vti0, fix it urgently!
[  214.501428][ T8578] netlink: 'syz.0.981': attribute type 29 has an invalid length.
[  214.511369][ T8578] netlink: 'syz.0.981': attribute type 29 has an invalid length.
[  214.526413][ T8578] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.981'.
[  214.872362][ T8604] Dead loop on virtual device ip6_vti0, fix it urgently!
[  214.908694][ T8605] netlink: 'syz.1.993': attribute type 10 has an invalid length.
[  214.932980][ T8605] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.993'.
[  215.663931][ T8612] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  215.725698][ T8601] delete_channel: no stack
[  215.952778][ T8628] Dead loop on virtual device ip6_vti0, fix it urgently!
[  216.495399][ T8635] netlink: 'syz.3.1005': attribute type 25 has an invalid length.
[  216.500372][ T8642] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1007'.
[  216.533521][ T8635] netlink: 'syz.3.1005': attribute type 10 has an invalid length.
[  216.579197][ T8633] rxe_eth0 speed is unknown, defaulting to 1000
[  216.679379][ T8647] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1009'.
[  216.821771][ T8650] netlink: 'syz.1.1010': attribute type 10 has an invalid length.
[  216.834531][ T8650] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1010'.
[  216.987978][ T8657] Dead loop on virtual device ip6_vti0, fix it urgently!
[  217.074511][ T8634] rxe_eth0 speed is unknown, defaulting to 1000
[  217.138245][ T8660] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1015'.
[  217.554409][ T8648] delete_channel: no stack
[  217.618909][ T8670] netlink: 'syz.0.1019': attribute type 41 has an invalid length.
[  217.627894][ T8670] netlink: 'syz.0.1019': attribute type 41 has an invalid length.
[  217.645693][ T8670] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1019'.
[  217.831389][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently!
[  218.053840][ T8686] delete_channel: no stack
[  218.276524][ T8693] netlink: 'syz.0.1028': attribute type 10 has an invalid length.
[  218.293845][ T8693] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1028'.
[  219.063770][ T8691] delete_channel: no stack
[  219.118664][ T8706] Dead loop on virtual device ip6_vti0, fix it urgently!
[  219.190739][ T8708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1034'.
[  219.224717][ T8708] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1034'.
[  219.242117][ T8708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  219.280990][ T8708] FAULT_INJECTION: forcing a failure.
[  219.280990][ T8708] name failslab, interval 1, probability 0, space 0, times 0
[  219.294230][ T8708] CPU: 1 PID: 8708 Comm: syz.0.1034 Not tainted syzkaller #0
[  219.301633][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.311678][ T8708] Call Trace:
[  219.314953][ T8708]  <TASK>
[  219.317876][ T8708]  dump_stack_lvl+0x18c/0x250
[  219.322541][ T8708]  ? show_regs_print_info+0x20/0x20
[  219.327731][ T8708]  ? load_image+0x420/0x420
[  219.332235][ T8708]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  219.338230][ T8708]  ? lock_chain_count+0x20/0x20
[  219.343084][ T8708]  should_fail_ex+0x394/0x4c0
[  219.347778][ T8708]  should_failslab+0x9/0x20
[  219.352293][ T8708]  slab_pre_alloc_hook+0x59/0x300
[  219.357329][ T8708]  kmem_cache_alloc+0x5a/0x2c0
[  219.362084][ T8708]  ? skb_clone+0x1eb/0x370
[  219.366492][ T8708]  skb_clone+0x1eb/0x370
[  219.370728][ T8708]  __netlink_deliver_tap+0x411/0x7f0
[  219.376011][ T8708]  ? netlink_deliver_tap+0x2e/0x1b0
[  219.381210][ T8708]  netlink_deliver_tap+0x19c/0x1b0
[  219.386328][ T8708]  netlink_unicast+0x77b/0x930
[  219.391114][ T8708]  netlink_sendmsg+0x8d0/0xbf0
[  219.395874][ T8708]  ? netlink_getsockopt+0x590/0x590
[  219.401070][ T8708]  ? apparmor_socket_sendmsg+0x8e/0x330
[  219.406620][ T8708]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  219.411899][ T8708]  ? security_socket_sendmsg+0x80/0xa0
[  219.417370][ T8708]  ? netlink_getsockopt+0x590/0x590
[  219.422594][ T8708]  ____sys_sendmsg+0x61b/0x980
[  219.427360][ T8708]  ? __asan_memset+0x22/0x40
[  219.431944][ T8708]  ? __sys_sendmsg_sock+0x30/0x30
[  219.436977][ T8708]  ? __import_iovec+0x5f2/0x850
[  219.441836][ T8708]  ? import_iovec+0x73/0xa0
[  219.446335][ T8708]  ___sys_sendmsg+0x2a6/0x360
[  219.451022][ T8708]  ? __sys_sendmsg+0x2b0/0x2b0
[  219.455835][ T8708]  __se_sys_sendmsg+0x1d0/0x2c0
[  219.460702][ T8708]  ? __x64_sys_sendmsg+0x80/0x80
[  219.465641][ T8708]  ? syscall_enter_from_user_mode+0x2e/0x80
[  219.471542][ T8708]  do_syscall_64+0x55/0xb0
[  219.475968][ T8708]  ? clear_bhb_loop+0x40/0x90
[  219.480654][ T8708]  ? clear_bhb_loop+0x40/0x90
[  219.485325][ T8708]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.491210][ T8708] RIP: 0033:0x7f7fc559e559
[  219.495616][ T8708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.515218][ T8708] RSP: 002b:00007f7fc64a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.523656][ T8708] RAX: ffffffffffffffda RBX: 00007f7fc5825fa0 RCX: 00007f7fc559e559
[  219.531622][ T8708] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  219.539582][ T8708] RBP: 00007f7fc64a4090 R08: 0000000000000000 R09: 0000000000000000
[  219.547544][ T8708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  219.555518][ T8708] R13: 00007f7fc5826038 R14: 00007f7fc5825fa0 R15: 00007ffdf5b62be8
[  219.563539][ T8708]  </TASK>
[  219.576624][ T8708] netlink: 'syz.0.1034': attribute type 10 has an invalid length.
[  219.588113][ T8708] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1034'.
[  219.678705][ T8715] FAULT_INJECTION: forcing a failure.
[  219.678705][ T8715] name failslab, interval 1, probability 0, space 0, times 0
[  219.694645][ T8715] CPU: 1 PID: 8715 Comm: syz.2.1036 Not tainted syzkaller #0
[  219.702028][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.712091][ T8715] Call Trace:
[  219.715357][ T8715]  <TASK>
[  219.718276][ T8715]  dump_stack_lvl+0x18c/0x250
[  219.722946][ T8715]  ? sctp_sendmsg+0x1519/0x27b0
[  219.727779][ T8715]  ? ___sys_sendmsg+0x2a6/0x360
[  219.732623][ T8715]  ? show_regs_print_info+0x20/0x20
[  219.737810][ T8715]  ? load_image+0x420/0x420
[  219.742308][ T8715]  should_fail_ex+0x394/0x4c0
[  219.746981][ T8715]  should_failslab+0x9/0x20
[  219.751477][ T8715]  slab_pre_alloc_hook+0x59/0x300
[  219.756500][ T8715]  ? sctp_add_bind_addr+0x8c/0x360
[  219.761610][ T8715]  __kmem_cache_alloc_node+0x53/0x250
[  219.766973][ T8715]  ? sctp_add_bind_addr+0x8c/0x360
[  219.772072][ T8715]  kmalloc_trace+0x2a/0xe0
[  219.776483][ T8715]  sctp_add_bind_addr+0x8c/0x360
[  219.781413][ T8715]  sctp_copy_local_addr_list+0x31b/0x4e0
[  219.787033][ T8715]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  219.792753][ T8715]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  219.798833][ T8715]  ? sctp_v4_is_any+0x35/0x60
[  219.803513][ T8715]  ? sctp_copy_one_addr+0x8c/0x350
[  219.808619][ T8715]  sctp_bind_addr_copy+0xb3/0x3c0
[  219.813639][ T8715]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  219.819968][ T8715]  sctp_connect_new_asoc+0x2f9/0x6a0
[  219.825256][ T8715]  ? __sctp_connect+0xd80/0xd80
[  219.830097][ T8715]  ? __local_bh_enable_ip+0x13a/0x1c0
[  219.835465][ T8715]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  219.841009][ T8715]  ? security_sctp_bind_connect+0x89/0xb0
[  219.846726][ T8715]  sctp_sendmsg+0x1519/0x27b0
[  219.851406][ T8715]  ? sctp_getsockopt+0xb60/0xb60
[  219.856339][ T8715]  ? aa_af_perm+0x330/0x330
[  219.860841][ T8715]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  219.867251][ T8715]  ? sock_rps_record_flow+0x19/0x3f0
[  219.872533][ T8715]  ? inet_sendmsg+0xce/0x2a0
[  219.877116][ T8715]  ? inet_send_prepare+0x250/0x250
[  219.882221][ T8715]  ____sys_sendmsg+0x61b/0x980
[  219.886993][ T8715]  ? __sys_sendmsg_sock+0x30/0x30
[  219.892011][ T8715]  ? __import_iovec+0x5f2/0x850
[  219.896868][ T8715]  ? import_iovec+0x73/0xa0
[  219.901373][ T8715]  ___sys_sendmsg+0x2a6/0x360
[  219.906047][ T8715]  ? get_pid_task+0x20/0x1e0
[  219.910637][ T8715]  ? __sys_sendmsg+0x2b0/0x2b0
[  219.915415][ T8715]  ? __lock_acquire+0x7eb0/0x7eb0
[  219.920452][ T8715]  __se_sys_sendmsg+0x1d0/0x2c0
[  219.925310][ T8715]  ? __x64_sys_sendmsg+0x80/0x80
[  219.930266][ T8715]  ? lockdep_hardirqs_on+0x98/0x150
[  219.935490][ T8715]  do_syscall_64+0x55/0xb0
[  219.939903][ T8715]  ? clear_bhb_loop+0x40/0x90
[  219.944582][ T8715]  ? clear_bhb_loop+0x40/0x90
[  219.949268][ T8715]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.955164][ T8715] RIP: 0033:0x7f256ed9e559
[  219.959575][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.979173][ T8715] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.987582][ T8715] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  219.995550][ T8715] RDX: 000000000c000840 RSI: 00002000000019c0 RDI: 0000000000000003
[  220.003516][ T8715] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  220.011478][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  220.019446][ T8715] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  220.027423][ T8715]  </TASK>
[  220.049912][ T8709] delete_channel: no stack
[  220.137306][ T8718] netlink: 'syz.1.1038': attribute type 41 has an invalid length.
[  220.148008][ T8719] Dead loop on virtual device ip6_vti0, fix it urgently!
[  220.393834][ T8730] netlink: 'syz.1.1042': attribute type 10 has an invalid length.
[  220.415076][ T8729] Dead loop on virtual device ip6_vti0, fix it urgently!
[  220.423488][ T8730] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1042'.
[  220.578067][ T8733] FAULT_INJECTION: forcing a failure.
[  220.578067][ T8733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  220.593136][ T8733] CPU: 1 PID: 8733 Comm: syz.0.1044 Not tainted syzkaller #0
[  220.600545][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  220.610703][ T8733] Call Trace:
[  220.613994][ T8733]  <TASK>
[  220.616944][ T8733]  dump_stack_lvl+0x18c/0x250
[  220.621642][ T8733]  ? show_regs_print_info+0x20/0x20
[  220.626864][ T8733]  ? load_image+0x420/0x420
[  220.631402][ T8733]  ? __might_fault+0xaa/0x120
[  220.636102][ T8733]  ? __lock_acquire+0x7eb0/0x7eb0
[  220.641157][ T8733]  should_fail_ex+0x394/0x4c0
[  220.645877][ T8733]  _copy_from_user+0x2f/0xe0
[  220.650483][ T8733]  xsk_setsockopt+0x2b5/0x750
[  220.655185][ T8733]  ? xsk_poll+0x670/0x670
[  220.659879][ T8733]  ? __fget_files+0x28/0x460
[  220.664472][ T8733]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  220.670018][ T8733]  ? security_socket_setsockopt+0x7e/0xa0
[  220.675734][ T8733]  ? xsk_poll+0x670/0x670
[  220.680064][ T8733]  do_sock_setsockopt+0x175/0x1a0
[  220.685093][ T8733]  ? __fdget+0x180/0x210
[  220.689341][ T8733]  __x64_sys_setsockopt+0x182/0x200
[  220.694562][ T8733]  do_syscall_64+0x55/0xb0
[  220.698972][ T8733]  ? clear_bhb_loop+0x40/0x90
[  220.703644][ T8733]  ? clear_bhb_loop+0x40/0x90
[  220.708318][ T8733]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  220.714218][ T8733] RIP: 0033:0x7f7fc559e559
[  220.718628][ T8733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  220.738229][ T8733] RSP: 002b:00007f7fc64a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  220.746641][ T8733] RAX: ffffffffffffffda RBX: 00007f7fc5825fa0 RCX: 00007f7fc559e559
[  220.754608][ T8733] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  220.762570][ T8733] RBP: 00007f7fc64a4090 R08: 0000000000000004 R09: 0000000000000000
[  220.770533][ T8733] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  220.778500][ T8733] R13: 00007f7fc5826038 R14: 00007f7fc5825fa0 R15: 00007ffdf5b62be8
[  220.786485][ T8733]  </TASK>
[  220.936299][ T8727] rxe_eth0 speed is unknown, defaulting to 1000
[  221.157229][ T8741] delete_channel: no stack
[  221.203140][ T8742] netlink: 'syz.0.1045': attribute type 10 has an invalid length.
[  221.213703][ T8724] delete_channel: no stack
[  221.292568][ T8742] team0: left promiscuous mode
[  221.300075][ T8742] C: left promiscuous mode
[  221.315569][ T8742] team_slave_1: left promiscuous mode
[  221.321484][ T8742] mac80211_hwsim hwsim7 ..ãc¤±: left promiscuous mode
[  221.341352][ T8742] team0: left allmulticast mode
[  221.361036][ T8742] C: left allmulticast mode
[  221.370034][ T8742] team_slave_1: left allmulticast mode
[  221.375759][ T8742] mac80211_hwsim hwsim7 ..ãc¤±: left allmulticast mode
[  221.867609][ T8767] FAULT_INJECTION: forcing a failure.
[  221.867609][ T8767] name failslab, interval 1, probability 0, space 0, times 0
[  221.896485][ T8767] CPU: 1 PID: 8767 Comm: syz.3.1053 Not tainted syzkaller #0
[  221.903923][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.914001][ T8767] Call Trace:
[  221.917304][ T8767]  <TASK>
[  221.920257][ T8767]  dump_stack_lvl+0x18c/0x250
[  221.924972][ T8767]  ? show_regs_print_info+0x20/0x20
[  221.930203][ T8767]  ? load_image+0x420/0x420
[  221.934745][ T8767]  ? __might_sleep+0xe0/0xe0
[  221.939376][ T8767]  ? __lock_acquire+0x7eb0/0x7eb0
[  221.944441][ T8767]  should_fail_ex+0x394/0x4c0
[  221.949164][ T8767]  should_failslab+0x9/0x20
[  221.953699][ T8767]  slab_pre_alloc_hook+0x59/0x300
[  221.958755][ T8767]  ? call_usermodehelper_setup+0x8e/0x260
[  221.964511][ T8767]  __kmem_cache_alloc_node+0x53/0x250
[  221.969924][ T8767]  ? call_usermodehelper_setup+0x8e/0x260
[  221.975677][ T8767]  kmalloc_trace+0x2a/0xe0
[  221.980134][ T8767]  call_usermodehelper_setup+0x8e/0x260
[  221.985704][ T8767]  ? __request_module+0x600/0x600
[  221.990763][ T8767]  __request_module+0x3bb/0x600
[  221.995655][ T8767]  ? module_enforce_rwx_sections+0x150/0x150
[  222.001687][ T8767]  ? bpf_lsm_capable+0x9/0x10
[  222.006384][ T8767]  ? security_capable+0x89/0xb0
[  222.011253][ T8767]  ? dev_load+0x21/0x1f0
[  222.015502][ T8767]  dev_load+0x18b/0x1f0
[  222.019659][ T8767]  devinet_ioctl+0x127/0x1d70
[  222.024357][ T8767]  ? __might_fault+0xc6/0x120
[  222.029034][ T8767]  ? inet_ifa_byprefix+0x2a0/0x2a0
[  222.034147][ T8767]  ? _copy_from_user+0xa5/0xe0
[  222.038919][ T8767]  ? get_user_ifreq+0x12b/0x180
[  222.043778][ T8767]  inet_ioctl+0x392/0x560
[  222.048108][ T8767]  ? tomoyo_path_number_perm+0x217/0x5e0
[  222.053752][ T8767]  ? inet_shutdown+0x370/0x370
[  222.058514][ T8767]  ? slab_free_freelist_hook+0x130/0x1a0
[  222.064155][ T8767]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  222.069795][ T8767]  ? __kmem_cache_free+0xba/0x1f0
[  222.074847][ T8767]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  222.080325][ T8767]  sock_do_ioctl+0xfc/0x310
[  222.084846][ T8767]  ? sock_show_fdinfo+0xb0/0xb0
[  222.089728][ T8767]  sock_ioctl+0x5be/0x7e0
[  222.094065][ T8767]  ? sock_poll+0x3e0/0x3e0
[  222.098501][ T8767]  ? bpf_lsm_file_ioctl+0x9/0x10
[  222.103442][ T8767]  ? security_file_ioctl+0x80/0xa0
[  222.108736][ T8767]  ? sock_poll+0x3e0/0x3e0
[  222.113163][ T8767]  __se_sys_ioctl+0xfd/0x170
[  222.117764][ T8767]  do_syscall_64+0x55/0xb0
[  222.122179][ T8767]  ? clear_bhb_loop+0x40/0x90
[  222.126858][ T8767]  ? clear_bhb_loop+0x40/0x90
[  222.131538][ T8767]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.137437][ T8767] RIP: 0033:0x7fc18699e559
[  222.141855][ T8767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.161462][ T8767] RSP: 002b:00007fc1877ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  222.169880][ T8767] RAX: ffffffffffffffda RBX: 00007fc186c25fa0 RCX: 00007fc18699e559
[  222.177852][ T8767] RDX: 0000200000000000 RSI: 0000000000008935 RDI: 0000000000000004
[  222.185826][ T8767] RBP: 00007fc1877ff090 R08: 0000000000000000 R09: 0000000000000000
[  222.193800][ T8767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.201768][ T8767] R13: 00007fc186c26038 R14: 00007fc186c25fa0 R15: 00007ffc72a77608
[  222.209762][ T8767]  </TASK>
[  222.668911][ T8781] netlink: 'syz.0.1056': attribute type 10 has an invalid length.
[  222.773365][ T8781] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1056'.
[  223.145612][ T8787] FAULT_INJECTION: forcing a failure.
[  223.145612][ T8787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.180685][ T8787] CPU: 0 PID: 8787 Comm: syz.1.1059 Not tainted syzkaller #0
[  223.188106][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.198174][ T8787] Call Trace:
[  223.201466][ T8787]  <TASK>
[  223.204411][ T8787]  dump_stack_lvl+0x18c/0x250
[  223.209108][ T8787]  ? show_regs_print_info+0x20/0x20
[  223.214315][ T8787]  ? load_image+0x420/0x420
[  223.218846][ T8787]  ? __might_fault+0xaa/0x120
[  223.223539][ T8787]  ? __lock_acquire+0x7eb0/0x7eb0
[  223.228585][ T8787]  should_fail_ex+0x394/0x4c0
[  223.233291][ T8787]  _copy_from_iter+0x1cd/0x1290
[  223.238170][ T8787]  ? copyout_mc+0x70/0x70
[  223.242522][ T8787]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  223.248525][ T8787]  ? __lock_acquire+0x7eb0/0x7eb0
[  223.253567][ T8787]  ? lock_chain_count+0x20/0x20
[  223.258431][ T8787]  ? _raw_spin_lock_irq+0xbb/0xf0
[  223.263473][ T8787]  ? _raw_spin_lock_irqsave+0x100/0x100
[  223.269038][ T8787]  ? page_copy_sane+0x4e/0x270
[  223.273827][ T8787]  copy_page_from_iter+0x7b/0x100
[  223.278873][ T8787]  pipe_write+0x758/0x1b20
[  223.283336][ T8787]  ? pipe_read+0x1330/0x1330
[  223.287953][ T8787]  ? end_current_label_crit_section+0x149/0x170
[  223.294214][ T8787]  ? common_file_perm+0x198/0x1f0
[  223.299262][ T8787]  vfs_write+0x474/0x9a0
[  223.303531][ T8787]  ? file_end_write+0x250/0x250
[  223.308402][ T8787]  ? __fget_files+0x3fc/0x460
[  223.313105][ T8787]  ? __fdget_pos+0x1d8/0x330
[  223.317712][ T8787]  ? ksys_write+0x74/0x260
[  223.322152][ T8787]  ksys_write+0x151/0x260
[  223.326507][ T8787]  ? __ia32_sys_read+0x90/0x90
[  223.331293][ T8787]  ? lockdep_hardirqs_on+0x98/0x150
[  223.336515][ T8787]  do_syscall_64+0x55/0xb0
[  223.340946][ T8787]  ? clear_bhb_loop+0x40/0x90
[  223.345637][ T8787]  ? clear_bhb_loop+0x40/0x90
[  223.350330][ T8787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  223.356247][ T8787] RIP: 0033:0x7f4ef539e559
[  223.360675][ T8787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.380300][ T8787] RSP: 002b:00007f4ef35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  223.388737][ T8787] RAX: ffffffffffffffda RBX: 00007f4ef5625fa0 RCX: 00007f4ef539e559
[  223.396730][ T8787] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 0000000000000000
[  223.404721][ T8787] RBP: 00007f4ef35f6090 R08: 0000000000000000 R09: 0000000000000000
[  223.412705][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  223.420699][ T8787] R13: 00007f4ef5626038 R14: 00007f4ef5625fa0 R15: 00007fff97bc1e08
[  223.428738][ T8787]  </TASK>
[  223.555866][ T8773] delete_channel: no stack
[  223.700030][ T8789] netlink: 'syz.1.1060': attribute type 4 has an invalid length.
[  224.483715][ T8814] delete_channel: no stack
[  224.786098][ T8832] netlink: 'syz.3.1071': attribute type 10 has an invalid length.
[  224.815145][ T8832] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1071'.
[  225.010569][ T8840] netlink: 'syz.2.1073': attribute type 4 has an invalid length.
[  225.554970][ T8825] delete_channel: no stack
[  225.857691][ T8865] netlink: 'syz.3.1076': attribute type 4 has an invalid length.
[  226.279875][ T8880] rxe_eth0 speed is unknown, defaulting to 1000
[  226.318258][ T8885] netlink: 'syz.2.1084': attribute type 10 has an invalid length.
[  226.326669][ T8885] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1084'.
[  226.599992][ T8887] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1085'.
[  226.613792][ T8887] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1085'.
[  226.623861][ T8887] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1085'.
[  227.098633][ T8896] netlink: 'syz.1.1088': attribute type 3 has an invalid length.
[  227.113601][ T8896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1088'.
[  227.166836][ T8883] delete_channel: no stack
[  227.425677][ T8915] netlink: 'syz.1.1092': attribute type 10 has an invalid length.
[  227.458508][ T8915] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1092'.
[  227.629495][ T8918] FAULT_INJECTION: forcing a failure.
[  227.629495][ T8918] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  227.662971][ T8918] CPU: 0 PID: 8918 Comm: syz.2.1095 Not tainted syzkaller #0
[  227.670408][ T8918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  227.680481][ T8918] Call Trace:
[  227.683776][ T8918]  <TASK>
[  227.686723][ T8918]  dump_stack_lvl+0x18c/0x250
[  227.691434][ T8918]  ? show_regs_print_info+0x20/0x20
[  227.696656][ T8918]  ? load_image+0x420/0x420
[  227.701187][ T8918]  ? __lock_acquire+0x7eb0/0x7eb0
[  227.706235][ T8918]  ? mark_lock+0x94/0x320
[  227.710596][ T8918]  should_fail_ex+0x394/0x4c0
[  227.715310][ T8918]  prepare_alloc_pages+0x1e1/0x5b0
[  227.720451][ T8918]  __alloc_pages+0x134/0x460
[  227.725066][ T8918]  ? zone_statistics+0x170/0x170
[  227.730025][ T8918]  ? do_wp_page+0x733/0x34d0
[  227.734636][ T8918]  ? do_wp_page+0xf17/0x34d0
[  227.739242][ T8918]  ? __lock_acquire+0x7eb0/0x7eb0
[  227.744284][ T8918]  __folio_alloc+0x10/0x20
[  227.748707][ T8918]  vma_alloc_folio+0x474/0x8f0
[  227.753478][ T8918]  do_wp_page+0x118d/0x34d0
[  227.757997][ T8918]  ? folio_put+0xd0/0xd0
[  227.762237][ T8918]  ? do_raw_spin_lock+0x11f/0x2b0
[  227.767266][ T8918]  ? __rwlock_init+0x150/0x150
[  227.772035][ T8918]  handle_mm_fault+0x1306/0x4a50
[  227.776972][ T8918]  ? handle_mm_fault+0xe6/0x4a50
[  227.782088][ T8918]  ? numa_migrate_prep+0x350/0x350
[  227.787207][ T8918]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  227.792492][ T8918]  do_user_addr_fault+0x736/0x12d0
[  227.797614][ T8918]  exc_page_fault+0x64/0x100
[  227.802204][ T8918]  asm_exc_page_fault+0x26/0x30
[  227.807050][ T8918] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  227.812856][ T8918] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  227.832467][ T8918] RSP: 0018:ffffc900036df498 EFLAGS: 00050206
[  227.838529][ T8918] RAX: ffffffff84326101 RBX: 1ffff920006dbfc7 RCX: 0000000000006f00
[  227.846498][ T8918] RDX: 0000000000000000 RSI: ffff88807e591100 RDI: 0000200000004000
[  227.854463][ T8918] RBP: ffffc900036df5e8 R08: ffff88807e597fff R09: 1ffff1100fcb2fff
[  227.862432][ T8918] R10: dffffc0000000000 R11: ffffed100fcb3000 R12: ffff88807e590000
[  227.870403][ T8918] R13: 0000000000008000 R14: 0000000000008000 R15: ffffc900036dfe48
[  227.878382][ T8918]  ? _copy_to_iter+0x171/0x1110
[  227.883243][ T8918]  _copy_to_iter+0x24f/0x1110
[  227.887919][ T8918]  ? __lock_acquire+0x7eb0/0x7eb0
[  227.892947][ T8918]  ? __mutex_trylock_common+0x160/0x270
[  227.898491][ T8918]  ? trace_raw_output_contention_end+0xd0/0xd0
[  227.904639][ T8918]  ? iov_iter_init+0x1e0/0x1e0
[  227.909405][ T8918]  ? __virt_addr_valid+0x10c/0x380
[  227.914523][ T8918]  ? __check_object_size+0x4fc/0xa40
[  227.919809][ T8918]  __skb_datagram_iter+0x2ff/0x780
[  227.924922][ T8918]  ? skb_copy_datagram_iter+0x200/0x200
[  227.930469][ T8918]  skb_copy_datagram_iter+0xb1/0x200
[  227.935756][ T8918]  unix_stream_read_actor+0x6c/0xa0
[  227.940957][ T8918]  unix_stream_read_generic+0xcf1/0x1ea0
[  227.946610][ T8918]  ? unix_stream_read_actor+0xa0/0xa0
[  227.952071][ T8918]  ? wake_bit_function+0x200/0x200
[  227.957194][ T8918]  ? aa_sk_perm+0x83c/0x970
[  227.961876][ T8918]  unix_stream_recvmsg+0x169/0x1c0
[  227.966995][ T8918]  ? unix_stream_sendmsg+0xbf0/0xbf0
[  227.972276][ T8918]  ? __lock_acquire+0x135d/0x7eb0
[  227.977297][ T8918]  ? __unix_stream_recvmsg+0x150/0x150
[  227.982756][ T8918]  ? aa_sock_msg_perm+0x94/0x150
[  227.987697][ T8918]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  227.992980][ T8918]  ? security_socket_recvmsg+0x89/0xb0
[  227.998437][ T8918]  ? unix_stream_sendmsg+0xbf0/0xbf0
[  228.003722][ T8918]  ____sys_recvmsg+0x2bd/0x5d0
[  228.008497][ T8918]  ? __sys_recvmsg_sock+0x50/0x50
[  228.013534][ T8918]  ? import_iovec+0x73/0xa0
[  228.018046][ T8918]  ___sys_recvmsg+0x214/0x590
[  228.022726][ T8918]  ? __sys_recvmsg+0x2a0/0x2a0
[  228.027494][ T8918]  ? ksys_write+0x1d2/0x260
[  228.032006][ T8918]  ? __fget_files+0x3fc/0x460
[  228.036696][ T8918]  __x64_sys_recvmsg+0x21e/0x2f0
[  228.041635][ T8918]  ? ___sys_recvmsg+0x590/0x590
[  228.046498][ T8918]  ? lockdep_hardirqs_on+0x98/0x150
[  228.051696][ T8918]  do_syscall_64+0x55/0xb0
[  228.056105][ T8918]  ? clear_bhb_loop+0x40/0x90
[  228.060776][ T8918]  ? clear_bhb_loop+0x40/0x90
[  228.065449][ T8918]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  228.071344][ T8918] RIP: 0033:0x7f256ed9e559
[  228.075762][ T8918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  228.095368][ T8918] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  228.103779][ T8918] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  228.111746][ T8918] RDX: 0000000040000100 RSI: 0000200000001fc0 RDI: 0000000000000004
[  228.119717][ T8918] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  228.127685][ T8918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  228.135652][ T8918] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  228.143634][ T8918]  </TASK>
[  228.172151][ T8907] delete_channel: no stack
[  228.305935][ T8925] netlink: 'syz.0.1097': attribute type 1 has an invalid length.
[  228.383895][ T8925] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1097'.
[  228.897707][ T8949] netlink: 'syz.2.1106': attribute type 10 has an invalid length.
[  228.920340][ T8949] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1106'.
[  229.679089][ T8943] delete_channel: no stack
[  229.964884][ T8988] rxe_eth0 speed is unknown, defaulting to 1000
[  230.870397][ T9042] netlink: 'syz.2.1135': attribute type 10 has an invalid length.
[  230.902881][ T9042] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1135'.
[  231.327149][ T9053] netlink: 'syz.3.1141': attribute type 21 has an invalid length.
[  231.354900][ T9053] netlink: 'syz.3.1141': attribute type 1 has an invalid length.
[  231.474714][ T9053] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1141'.
[  231.658416][ T9040] delete_channel: no stack
[  231.807405][ T9068] netlink: 'syz.3.1142': attribute type 10 has an invalid length.
[  231.817002][ T9068] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1142'.
[  231.909380][ T9067] delete_channel: no stack
[  231.930038][ T9074] netlink: 'syz.0.1145': attribute type 10 has an invalid length.
[  232.407300][ T9093] netlink: 'syz.1.1153': attribute type 4 has an invalid length.
[  232.480591][ T9094] netlink: 'syz.3.1152': attribute type 10 has an invalid length.
[  232.488603][ T9094] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1152'.
[  232.761298][ T9100] netlink: 'syz.1.1156': attribute type 10 has an invalid length.
[  232.771372][ T9100] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1156'.
[  232.804240][ T9099] delete_channel: no stack
[  233.168033][ T9091] delete_channel: no stack
[  233.356385][ T9119] validate_nla: 2 callbacks suppressed
[  233.356425][ T9119] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  233.380215][ T9119] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1165'.
[  233.424813][ T9118] delete_channel: no stack
[  233.704022][ T9134] netlink: 'syz.0.1172': attribute type 4 has an invalid length.
[  233.728884][ T9137] netlink: 'syz.2.1171': attribute type 10 has an invalid length.
[  233.742894][ T9137] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1171'.
[  233.893785][ T9144] netlink: 'syz.1.1175': attribute type 21 has an invalid length.
[  233.945926][ T9146] netlink: 'syz.0.1176': attribute type 10 has an invalid length.
[  233.957541][ T9146] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1176'.
[  233.996077][ T9145] delete_channel: no stack
[  234.217151][ T9157] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1181'.
[  234.314386][ T9161] netlink: 'syz.3.1183': attribute type 4 has an invalid length.
[  234.494073][ T9131] delete_channel: no stack
[  234.691048][ T9170] netlink: 'syz.2.1186': attribute type 10 has an invalid length.
[  234.700631][ T9170] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1186'.
[  234.785288][ T9169] delete_channel: no stack
[  234.965318][ T9182] tap0: tun_chr_ioctl cmd 1074025675
[  234.988975][ T9182] tap0: persist enabled
[  235.000369][ T9181] tap0: tun_chr_ioctl cmd 1074025675
[  235.012910][ T9181] tap0: persist enabled
[  235.217266][ T9189] netlink: 'syz.3.1193': attribute type 4 has an invalid length.
[  235.308125][ T9195] netlink: 'syz.1.1194': attribute type 10 has an invalid length.
[  235.368949][ T9197] netlink: 'syz.3.1196': attribute type 10 has an invalid length.
[  235.403876][ T9196] delete_channel: no stack
[  235.501136][ T9201] rxe_eth0 speed is unknown, defaulting to 1000
[  236.105904][ T9191] delete_channel: no stack
[  236.257408][ T9225] __nla_validate_parse: 2 callbacks suppressed
[  236.257443][ T9225] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1206'.
[  236.324877][ T9224] delete_channel: no stack
[  236.335724][ T9227] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1207'.
[  236.959211][ T9235] delete_channel: no stack
[  237.016705][ T9244] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1213'.
[  237.176094][ T9251] FAULT_INJECTION: forcing a failure.
[  237.176094][ T9251] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.189641][ T9251] CPU: 1 PID: 9251 Comm: syz.2.1217 Not tainted syzkaller #0
[  237.197041][ T9251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  237.207108][ T9251] Call Trace:
[  237.210399][ T9251]  <TASK>
[  237.213345][ T9251]  dump_stack_lvl+0x18c/0x250
[  237.213439][ T9253] team0: Device gre0 is of different type
[  237.218025][ T9251]  ? show_regs_print_info+0x20/0x20
[  237.218048][ T9251]  ? load_image+0x420/0x420
[  237.218073][ T9251]  ? __might_fault+0xaa/0x120
[  237.238117][ T9251]  ? __lock_acquire+0x7eb0/0x7eb0
[  237.243177][ T9251]  should_fail_ex+0x394/0x4c0
[  237.247855][ T9251]  _copy_from_user+0x2f/0xe0
[  237.252477][ T9251]  ___sys_sendmsg+0x1c7/0x360
[  237.257176][ T9251]  ? __sys_sendmsg+0x2b0/0x2b0
[  237.261948][ T9251]  ? ktime_get+0x7f/0x280
[  237.266275][ T9251]  ? trace_call_bpf+0xc3/0x6c0
[  237.271050][ T9251]  __se_sys_sendmsg+0x1d0/0x2c0
[  237.275907][ T9251]  ? perf_trace_preemptirq_template+0x269/0x330
[  237.282192][ T9251]  ? __x64_sys_sendmsg+0x80/0x80
[  237.287173][ T9251]  ? lockdep_hardirqs_on+0x98/0x150
[  237.292403][ T9251]  do_syscall_64+0x55/0xb0
[  237.296839][ T9251]  ? clear_bhb_loop+0x40/0x90
[  237.301524][ T9251]  ? clear_bhb_loop+0x40/0x90
[  237.306196][ T9251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.312084][ T9251] RIP: 0033:0x7f256ed9e559
[  237.316515][ T9251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.336132][ T9251] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  237.344539][ T9251] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  237.352502][ T9251] RDX: 0000000000000000 RSI: 0000200000001a00 RDI: 0000000000000004
[  237.360464][ T9251] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  237.368431][ T9251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.376402][ T9251] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  237.384387][ T9251]  </TASK>
[  237.462083][ T9256] syzkaller0: tun_chr_ioctl cmd 2147767506
[  237.643832][ T9266] delete_channel: no stack
[  237.694085][ T9270] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1220'.
[  237.787086][ T9241] delete_channel: no stack
[  237.797234][ T9275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'.
[  237.819078][ T9275] dummy0: entered promiscuous mode
[  237.824779][ T9275] dummy0: entered allmulticast mode
[  237.837593][ T9275] bridge0: port 4(dummy0) entered blocking state
[  237.851200][ T9275] bridge0: port 4(dummy0) entered disabled state
[  237.893276][ T9275] bridge0: port 4(dummy0) entered blocking state
[  237.900382][ T9275] bridge0: port 4(dummy0) entered forwarding state
[  238.115051][ T9292] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  238.174199][ T9293] delete_channel: no stack
[  238.585261][ T9311] validate_nla: 11 callbacks suppressed
[  238.585282][ T9311] netlink: 'syz.2.1235': attribute type 10 has an invalid length.
[  238.601099][ T9311] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1235'.
[  238.912674][ T9315] netlink: 'syz.1.1237': attribute type 10 has an invalid length.
[  238.922127][ T9315] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1237'.
[  238.937302][ T9317] delete_channel: no stack
[  238.941996][ T9317] delete_channel: no stack
[  238.954497][ T9314] delete_channel: no stack
[  239.010999][ T9319] netlink: 'syz.3.1239': attribute type 4 has an invalid length.
[  239.173958][ T9323] delete_channel: no stack
[  239.305646][ T9332] netlink: 'syz.1.1244': attribute type 10 has an invalid length.
[  239.334087][ T9332] bridge0: port 3(hsr0) entered disabled state
[  239.352570][ T9308] delete_channel: no stack
[  239.358304][ T9332] bridge0: port 3(hsr0) entered blocking state
[  239.365727][ T9332] bridge0: port 3(hsr0) entered forwarding state
[  239.396549][ T9332] team0: Device hsr_slave_0 failed to register rx_handler
[  239.445704][ T9332] bridge0: port 3(hsr0) entered disabled state
[  239.629005][ T9342] netlink: 'syz.3.1248': attribute type 10 has an invalid length.
[  239.641882][ T9342] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1248'.
[  239.703823][ T9341] delete_channel: no stack
[  239.817211][ T9358] netlink: 'syz.3.1255': attribute type 15 has an invalid length.
[  239.825756][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1255'.
[  239.964660][ T9365] netlink: 'syz.3.1256': attribute type 10 has an invalid length.
[  239.972552][ T9365] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1256'.
[  240.736003][ T9363] delete_channel: no stack
[  240.857888][ T9383] netlink: 'syz.0.1262': attribute type 10 has an invalid length.
[  240.914307][ T9381] delete_channel: no stack
[  240.999899][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.413714][ T9421] netlink: 'syz.3.1277': attribute type 4 has an invalid length.
[  242.430009][ T9417] netlink: 'syz.1.1275': attribute type 10 has an invalid length.
[  242.442016][ T9417] __nla_validate_parse: 1 callbacks suppressed
[  242.442056][ T9417] netlink: 181084 bytes leftover after parsing attributes in process `syz.1.1275'.
[  242.505628][ T9416] delete_channel: no stack
[  242.608446][ T9423] team0: Port device geneve1 added
[  242.754562][ T9434] team0: Port device C removed
[  243.036793][ T9451] netlink: 181084 bytes leftover after parsing attributes in process `syz.3.1288'.
[  243.093859][ T9450] delete_channel: no stack
[  243.144021][ T9453] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1289'.
[  243.154559][ T9453] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1289'.
[  243.352357][ T9457] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1291'.
[  243.521515][ T9464] FAULT_INJECTION: forcing a failure.
[  243.521515][ T9464] name failslab, interval 1, probability 0, space 0, times 0
[  243.537901][ T9464] CPU: 1 PID: 9464 Comm: syz.2.1293 Not tainted syzkaller #0
[  243.545326][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  243.555407][ T9464] Call Trace:
[  243.558710][ T9464]  <TASK>
[  243.561659][ T9464]  dump_stack_lvl+0x18c/0x250
[  243.566377][ T9464]  ? show_regs_print_info+0x20/0x20
[  243.571618][ T9464]  ? load_image+0x420/0x420
[  243.576163][ T9464]  ? verify_lock_unused+0x140/0x140
[  243.581400][ T9464]  ? perf_trace_lock_acquire+0x342/0x400
[  243.587083][ T9464]  should_fail_ex+0x394/0x4c0
[  243.591818][ T9464]  should_failslab+0x9/0x20
[  243.596360][ T9464]  slab_pre_alloc_hook+0x59/0x300
[  243.601426][ T9464]  kmem_cache_alloc+0x5a/0x2c0
[  243.606221][ T9464]  ? skb_clone+0x1eb/0x370
[  243.610688][ T9464]  skb_clone+0x1eb/0x370
[  243.614968][ T9464]  __netlink_deliver_tap+0x411/0x7f0
[  243.620284][ T9464]  ? netlink_deliver_tap+0x2e/0x1b0
[  243.625494][ T9464]  netlink_deliver_tap+0x19c/0x1b0
[  243.630627][ T9464]  netlink_unicast+0x77b/0x930
[  243.635416][ T9464]  netlink_sendmsg+0x8d0/0xbf0
[  243.640200][ T9464]  ? netlink_getsockopt+0x590/0x590
[  243.645408][ T9464]  ? apparmor_socket_sendmsg+0x8e/0x330
[  243.650963][ T9464]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  243.656252][ T9464]  ? security_socket_sendmsg+0x80/0xa0
[  243.661714][ T9464]  ? netlink_getsockopt+0x590/0x590
[  243.666925][ T9464]  ____sys_sendmsg+0x61b/0x980
[  243.671711][ T9464]  ? __asan_memset+0x22/0x40
[  243.676309][ T9464]  ? __sys_sendmsg_sock+0x30/0x30
[  243.681344][ T9464]  ? __import_iovec+0x5f2/0x850
[  243.686223][ T9464]  ? import_iovec+0x73/0xa0
[  243.690741][ T9464]  ___sys_sendmsg+0x2a6/0x360
[  243.695440][ T9464]  ? __sys_sendmsg+0x2b0/0x2b0
[  243.700248][ T9464]  ? __lock_acquire+0x7eb0/0x7eb0
[  243.705319][ T9464]  __se_sys_sendmsg+0x1d0/0x2c0
[  243.710185][ T9464]  ? __x64_sys_sendmsg+0x80/0x80
[  243.715159][ T9464]  ? lockdep_hardirqs_on+0x98/0x150
[  243.720368][ T9464]  do_syscall_64+0x55/0xb0
[  243.724784][ T9464]  ? clear_bhb_loop+0x40/0x90
[  243.729461][ T9464]  ? clear_bhb_loop+0x40/0x90
[  243.734141][ T9464]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.740041][ T9464] RIP: 0033:0x7f256ed9e559
[  243.744473][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.764081][ T9464] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  243.772501][ T9464] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  243.780478][ T9464] RDX: 0000000000000000 RSI: 0000200000000e00 RDI: 0000000000000006
[  243.788460][ T9464] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  243.796436][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.804413][ T9464] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  243.812411][ T9464]  </TASK>
[  243.832424][ T9464] validate_nla: 7 callbacks suppressed
[  243.832438][ T9464] netlink: 'syz.2.1293': attribute type 10 has an invalid length.
[  243.846775][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1293'.
[  243.862028][ T9464] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  243.903596][ T9470] netlink: 'syz.0.1296': attribute type 4 has an invalid length.
[  243.960179][ T9474] netlink: 'syz.1.1297': attribute type 10 has an invalid length.
[  243.969507][ T9474] netlink: 181084 bytes leftover after parsing attributes in process `syz.1.1297'.
[  244.034760][ T9473] delete_channel: no stack
[  244.112421][ T9480] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1300'.
[  244.143873][ T9475] delete_channel: no stack
[  244.208719][ T9484] netlink: 'syz.1.1301': attribute type 25 has an invalid length.
[  244.220998][ T9484] netlink: 'syz.1.1301': attribute type 10 has an invalid length.
[  244.332133][ T9495] FAULT_INJECTION: forcing a failure.
[  244.332133][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  244.351391][ T9495] CPU: 0 PID: 9495 Comm: syz.2.1304 Not tainted syzkaller #0
[  244.358861][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  244.368954][ T9495] Call Trace:
[  244.372266][ T9495]  <TASK>
[  244.375233][ T9495]  dump_stack_lvl+0x18c/0x250
[  244.379964][ T9495]  ? show_regs_print_info+0x20/0x20
[  244.385216][ T9495]  ? load_image+0x420/0x420
[  244.389805][ T9495]  ? __might_fault+0xaa/0x120
[  244.394522][ T9495]  ? __lock_acquire+0x7eb0/0x7eb0
[  244.399585][ T9495]  should_fail_ex+0x394/0x4c0
[  244.404293][ T9495]  _copy_from_iter+0x1cd/0x1290
[  244.409168][ T9495]  ? rcu_is_watching+0x15/0xb0
[  244.413964][ T9495]  ? copyout_mc+0x70/0x70
[  244.418310][ T9495]  ? __virt_addr_valid+0x10c/0x380
[  244.423438][ T9495]  ? __virt_addr_valid+0x10c/0x380
[  244.428565][ T9495]  ? __virt_addr_valid+0x10c/0x380
[  244.433700][ T9495]  ? __check_object_size+0x4fc/0xa40
[  244.439028][ T9495]  netlink_sendmsg+0x76b/0xbf0
[  244.443901][ T9495]  ? netlink_getsockopt+0x590/0x590
[  244.449124][ T9495]  ? apparmor_socket_sendmsg+0x170/0x330
[  244.454779][ T9495]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  244.460074][ T9495]  ? security_socket_sendmsg+0x80/0xa0
[  244.465541][ T9495]  ? netlink_getsockopt+0x590/0x590
[  244.470757][ T9495]  ____sys_sendmsg+0x61b/0x980
[  244.475552][ T9495]  ? __asan_memset+0x22/0x40
[  244.480157][ T9495]  ? __sys_sendmsg_sock+0x30/0x30
[  244.485201][ T9495]  ? __import_iovec+0x5f2/0x850
[  244.490089][ T9495]  ? import_iovec+0x73/0xa0
[  244.494623][ T9495]  ___sys_sendmsg+0x2a6/0x360
[  244.499332][ T9495]  ? __sys_sendmsg+0x2b0/0x2b0
[  244.504166][ T9495]  ? __lock_acquire+0x7eb0/0x7eb0
[  244.509261][ T9495]  __se_sys_sendmsg+0x1d0/0x2c0
[  244.514132][ T9495]  ? __x64_sys_sendmsg+0x80/0x80
[  244.519122][ T9495]  ? lockdep_hardirqs_on+0x98/0x150
[  244.524341][ T9495]  do_syscall_64+0x55/0xb0
[  244.528763][ T9495]  ? clear_bhb_loop+0x40/0x90
[  244.533449][ T9495]  ? clear_bhb_loop+0x40/0x90
[  244.538139][ T9495]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.544052][ T9495] RIP: 0033:0x7f256ed9e559
[  244.548479][ T9495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.568094][ T9495] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.576525][ T9495] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  244.584503][ T9495] RDX: 0000000020008004 RSI: 0000200000000600 RDI: 0000000000000007
[  244.592479][ T9495] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  244.600457][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.608439][ T9495] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  244.616453][ T9495]  </TASK>
[  245.017695][ T9512] netlink: 'syz.2.1312': attribute type 10 has an invalid length.
[  245.068822][ T9512] team0: Device hsr_slave_0 failed to register rx_handler
[  245.171947][ T9514] netlink: 'syz.3.1310': attribute type 10 has an invalid length.
[  245.222704][ T9515] delete_channel: no stack
[  245.231176][ T9514] netlink: 181084 bytes leftover after parsing attributes in process `syz.3.1310'.
[  245.375961][ T9513] delete_channel: no stack
[  245.637009][ T9532] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1320'.
[  245.653124][ T9532] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  245.849468][ T9523] netlink: 'syz.0.1316': attribute type 2 has an invalid length.
[  246.175353][ T9549] delete_channel: no stack
[  246.515234][ T9556] netlink: 'syz.0.1327': attribute type 10 has an invalid length.
[  246.574205][ T9555] delete_channel: no stack
[  246.681799][ T9566] netlink: 'syz.2.1330': attribute type 10 has an invalid length.
[  247.449609][ T9562] delete_channel: no stack
[  247.478414][ T9588] team0: Device hsr_slave_0 failed to register rx_handler
[  247.657627][ T9592] __nla_validate_parse: 5 callbacks suppressed
[  247.657661][ T9592] netlink: 181084 bytes leftover after parsing attributes in process `syz.2.1339'.
[  247.723897][ T9591] delete_channel: no stack
[  247.995819][ T9599] team0: Port device team_slave_0 removed
[  248.015310][ T9603] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1343'.
[  248.025540][ T9603] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1343'.
[  248.121326][ T9601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1342'.
[  248.338083][ T9610] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1344'.
[  248.613950][ T9611] delete_channel: no stack
[  248.909082][ T9624] validate_nla: 10 callbacks suppressed
[  248.909100][ T9624] netlink: 'syz.1.1350': attribute type 10 has an invalid length.
[  248.924688][ T9621] netlink: 'syz.2.1351': attribute type 10 has an invalid length.
[  248.932679][ T9621] netlink: 183880 bytes leftover after parsing attributes in process `syz.2.1351'.
[  248.956712][ T9619] netlink: 'syz.3.1347': attribute type 10 has an invalid length.
[  248.970258][ T9624] team0: Device hsr_slave_0 failed to register rx_handler
[  248.977685][ T9619] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1347'.
[  249.025978][ T9628] netlink: 'syz.0.1353': attribute type 41 has an invalid length.
[  249.044189][ T9620] delete_channel: no stack
[  249.057514][ T9628] netlink: 'syz.0.1353': attribute type 41 has an invalid length.
[  249.192520][ T9630] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  249.214200][ T9630] netlink: 183880 bytes leftover after parsing attributes in process `syz.1.1362'.
[  249.256483][ T9634] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1355'.
[  249.279085][ T9634] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  249.294107][ T9629] delete_channel: no stack
[  249.537867][ T9641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1357'.
[  249.618550][ T9617] delete_channel: no stack
[  249.779319][ T9646] netlink: 'syz.1.1367': attribute type 10 has an invalid length.
[  249.835498][ T9645] team_slave_0: left promiscuous mode
[  249.842361][ T9645] team_slave_0: left allmulticast mode
[  249.979569][ T9645] team0: Port device team_slave_0 removed
[  250.443041][ T9659] netlink: 'syz.2.1363': attribute type 6 has an invalid length.
[  250.540083][ T9642] delete_channel: no stack
[  250.780889][ T9663] netlink: 'syz.1.1365': attribute type 10 has an invalid length.
[  250.845179][ T9662] delete_channel: no stack
[  251.158535][ T9673] netlink: 'syz.1.1369': attribute type 2 has an invalid length.
[  251.285575][ T9689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.307544][ T9685] delete_channel: no stack
[  251.986271][ T9681] delete_channel: no stack
[  252.280627][ T9708] bridge0: port 4(dummy0) entered disabled state
[  252.296441][ T9708] bridge0: port 3(team0) entered disabled state
[  252.310497][ T9708] bridge_slave_1: left allmulticast mode
[  252.321674][ T9708] bridge_slave_1: left promiscuous mode
[  252.327902][ T9708] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.339429][ T9708] bridge_slave_0: left allmulticast mode
[  252.346550][ T9708] bridge_slave_0: left promiscuous mode
[  252.352523][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.435598][ T9711] delete_channel: no stack
[  253.049302][ T9751] FAULT_INJECTION: forcing a failure.
[  253.049302][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.062740][ T9751] CPU: 1 PID: 9751 Comm: syz.2.1398 Not tainted syzkaller #0
[  253.070161][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  253.080255][ T9751] Call Trace:
[  253.083577][ T9751]  <TASK>
[  253.086547][ T9751]  dump_stack_lvl+0x18c/0x250
[  253.091282][ T9751]  ? show_regs_print_info+0x20/0x20
[  253.096547][ T9751]  ? load_image+0x420/0x420
[  253.101284][ T9751]  ? __might_fault+0xaa/0x120
[  253.106021][ T9751]  ? __lock_acquire+0x7eb0/0x7eb0
[  253.111097][ T9751]  should_fail_ex+0x394/0x4c0
[  253.115815][ T9751]  _copy_from_user+0x2f/0xe0
[  253.120429][ T9751]  ____sys_sendmsg+0x329/0x980
[  253.125236][ T9751]  ? __sys_sendmsg_sock+0x30/0x30
[  253.130280][ T9751]  ? __import_iovec+0x3fa/0x850
[  253.135198][ T9751]  ? import_iovec+0x73/0xa0
[  253.139732][ T9751]  ___sys_sendmsg+0x2a6/0x360
[  253.144429][ T9751]  ? get_pid_task+0x20/0x1e0
[  253.149044][ T9751]  ? __sys_sendmsg+0x2b0/0x2b0
[  253.153875][ T9751]  ? __lock_acquire+0x7eb0/0x7eb0
[  253.158973][ T9751]  __se_sys_sendmsg+0x1d0/0x2c0
[  253.163846][ T9751]  ? __x64_sys_sendmsg+0x80/0x80
[  253.168836][ T9751]  ? lockdep_hardirqs_on+0x98/0x150
[  253.174061][ T9751]  do_syscall_64+0x55/0xb0
[  253.178483][ T9751]  ? clear_bhb_loop+0x40/0x90
[  253.183174][ T9751]  ? clear_bhb_loop+0x40/0x90
[  253.187864][ T9751]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  253.193772][ T9751] RIP: 0033:0x7f256ed9e559
[  253.198201][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.217821][ T9751] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.226262][ T9751] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  253.234251][ T9751] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000005
[  253.242237][ T9751] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  253.250218][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.258196][ T9751] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  253.266217][ T9751]  </TASK>
[  253.357400][ T9721] delete_channel: no stack
[  253.566028][ T9765] __nla_validate_parse: 9 callbacks suppressed
[  253.566043][ T9765] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1404'.
[  253.587892][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.639676][ T9765] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1404'.
[  253.965263][ T9784] validate_nla: 6 callbacks suppressed
[  253.965278][ T9784] netlink: 'syz.3.1408': attribute type 10 has an invalid length.
[  253.981697][ T9784] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1408'.
[  254.025668][ T9786] netlink: 'syz.2.1409': attribute type 5 has an invalid length.
[  254.401487][ T9804] FAULT_INJECTION: forcing a failure.
[  254.401487][ T9804] name failslab, interval 1, probability 0, space 0, times 0
[  254.415383][ T9804] CPU: 1 PID: 9804 Comm: syz.1.1417 Not tainted syzkaller #0
[  254.422802][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.432901][ T9804] Call Trace:
[  254.436203][ T9804]  <TASK>
[  254.439147][ T9804]  dump_stack_lvl+0x18c/0x250
[  254.443852][ T9804]  ? show_regs_print_info+0x20/0x20
[  254.449068][ T9804]  ? load_image+0x420/0x420
[  254.453613][ T9804]  ? verify_lock_unused+0x140/0x140
[  254.458835][ T9804]  should_fail_ex+0x394/0x4c0
[  254.463542][ T9804]  should_failslab+0x9/0x20
[  254.468060][ T9804]  slab_pre_alloc_hook+0x59/0x300
[  254.473102][ T9804]  ? ___neigh_create+0x6f4/0x23d0
[  254.478138][ T9804]  ? ___neigh_create+0x6f4/0x23d0
[  254.483176][ T9804]  __kmem_cache_alloc_node+0x53/0x250
[  254.488578][ T9804]  ? ___neigh_create+0x6f4/0x23d0
[  254.493615][ T9804]  __kmalloc+0xa7/0x240
[  254.497807][ T9804]  ___neigh_create+0x6f4/0x23d0
[  254.502692][ T9804]  ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0
[  254.508537][ T9804]  ip6_finish_output2+0x15b9/0x1690
[  254.513762][ T9804]  ? ip6_finish_output2+0x71a/0x1690
[  254.519070][ T9804]  ? nf_hook+0x390/0x390
[  254.523335][ T9804]  ? ip6_finish_output+0x567/0x7f0
[  254.528468][ T9804]  ? ip6_send_skb+0x10a/0x380
[  254.533169][ T9804]  ip6_send_skb+0x1cd/0x380
[  254.537702][ T9804]  udp_v6_send_skb+0xbd8/0x1810
[  254.542605][ T9804]  udpv6_sendmsg+0x1c2f/0x2390
[  254.547381][ T9804]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  254.553248][ T9804]  ? udpv6_sendmsg+0x2390/0x2390
[  254.558212][ T9804]  ? trace_event_raw_event_lock+0x240/0x240
[  254.564124][ T9804]  ? udp_v6_early_demux+0xf90/0xf90
[  254.569352][ T9804]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  254.575384][ T9804]  ? __local_bh_enable_ip+0x13a/0x1c0
[  254.580788][ T9804]  ? _local_bh_enable+0xa0/0xa0
[  254.585680][ T9804]  ? inet_send_prepare+0x1ae/0x250
[  254.590815][ T9804]  ? inet_send_prepare+0x1ae/0x250
[  254.595951][ T9804]  ? inet6_sendmsg+0x5f/0xd0
[  254.600557][ T9804]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  254.605773][ T9804]  ____sys_sendmsg+0x61b/0x980
[  254.610574][ T9804]  ? __asan_memset+0x22/0x40
[  254.615189][ T9804]  ? __sys_sendmsg_sock+0x30/0x30
[  254.620231][ T9804]  ? __import_iovec+0x3fa/0x850
[  254.625124][ T9804]  ? import_iovec+0x73/0xa0
[  254.629666][ T9804]  ___sys_sendmsg+0x2a6/0x360
[  254.634377][ T9804]  ? __sys_sendmsg+0x2b0/0x2b0
[  254.639229][ T9804]  ? __lock_acquire+0x7eb0/0x7eb0
[  254.644351][ T9804]  __se_sys_sendmsg+0x1d0/0x2c0
[  254.649231][ T9804]  ? __x64_sys_sendmsg+0x80/0x80
[  254.654230][ T9804]  ? lockdep_hardirqs_on+0x98/0x150
[  254.659455][ T9804]  do_syscall_64+0x55/0xb0
[  254.663884][ T9804]  ? clear_bhb_loop+0x40/0x90
[  254.668574][ T9804]  ? clear_bhb_loop+0x40/0x90
[  254.673270][ T9804]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.679193][ T9804] RIP: 0033:0x7f4ef539e559
[  254.683626][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.703249][ T9804] RSP: 002b:00007f4ef35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.711687][ T9804] RAX: ffffffffffffffda RBX: 00007f4ef5625fa0 RCX: 00007f4ef539e559
[  254.719674][ T9804] RDX: 0000000004040840 RSI: 0000200000000480 RDI: 0000000000000005
[  254.727658][ T9804] RBP: 00007f4ef35f6090 R08: 0000000000000000 R09: 0000000000000000
[  254.735642][ T9804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.743629][ T9804] R13: 00007f4ef5626038 R14: 00007f4ef5625fa0 R15: 00007fff97bc1e08
[  254.751650][ T9804]  </TASK>
[  254.824497][ T9782] delete_channel: no stack
[  254.877694][ T9809] FAULT_INJECTION: forcing a failure.
[  254.877694][ T9809] name failslab, interval 1, probability 0, space 0, times 0
[  254.912468][ T9809] CPU: 1 PID: 9809 Comm: syz.0.1419 Not tainted syzkaller #0
[  254.919900][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  254.929980][ T9809] Call Trace:
[  254.933284][ T9809]  <TASK>
[  254.936234][ T9809]  dump_stack_lvl+0x18c/0x250
[  254.940950][ T9809]  ? show_regs_print_info+0x20/0x20
[  254.946188][ T9809]  ? load_image+0x420/0x420
[  254.950733][ T9809]  ? __might_sleep+0xe0/0xe0
[  254.955354][ T9809]  ? __lock_acquire+0x7eb0/0x7eb0
[  254.960417][ T9809]  should_fail_ex+0x394/0x4c0
[  254.965148][ T9809]  should_failslab+0x9/0x20
[  254.969683][ T9809]  slab_pre_alloc_hook+0x59/0x300
[  254.974743][ T9809]  kmem_cache_alloc_node+0x5e/0x310
[  254.979975][ T9809]  ? __alloc_skb+0x103/0x2c0
[  254.984610][ T9809]  __alloc_skb+0x103/0x2c0
[  254.989048][ T9809]  alloc_skb_with_frags+0xcd/0x7a0
[  254.994182][ T9809]  ? __might_fault+0xaa/0x120
[  254.998892][ T9809]  ? __lock_acquire+0x7eb0/0x7eb0
[  255.003959][ T9809]  sock_alloc_send_pskb+0x883/0x9a0
[  255.009225][ T9809]  ? sock_kzfree_s+0x50/0x50
[  255.013866][ T9809]  ? iov_iter_advance+0x88/0x1a0
[  255.018841][ T9809]  tun_get_user+0xa44/0x3d30
[  255.023493][ T9809]  ? trace_event_raw_event_lock+0x240/0x240
[  255.029420][ T9809]  ? aa_file_perm+0x3e3/0xee0
[  255.034146][ T9809]  ? rcu_read_unlock+0xa0/0xa0
[  255.038970][ T9809]  ? tun_get+0x1c/0x2e0
[  255.043166][ T9809]  ? __lock_acquire+0x7eb0/0x7eb0
[  255.048219][ T9809]  ? tun_get+0x1c/0x2e0
[  255.052414][ T9809]  tun_chr_write_iter+0x119/0x200
[  255.057462][ T9809]  vfs_write+0x474/0x9a0
[  255.061729][ T9809]  ? file_end_write+0x250/0x250
[  255.066600][ T9809]  ? __fget_files+0x3fc/0x460
[  255.071297][ T9809]  ? __fdget_pos+0x1d8/0x330
[  255.075893][ T9809]  ? ksys_write+0x74/0x260
[  255.080323][ T9809]  ksys_write+0x151/0x260
[  255.084669][ T9809]  ? __ia32_sys_read+0x90/0x90
[  255.089448][ T9809]  ? lockdep_hardirqs_on+0x98/0x150
[  255.094664][ T9809]  do_syscall_64+0x55/0xb0
[  255.099083][ T9809]  ? clear_bhb_loop+0x40/0x90
[  255.103766][ T9809]  ? clear_bhb_loop+0x40/0x90
[  255.108449][ T9809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.114352][ T9809] RIP: 0033:0x7f7fc559e559
[  255.118778][ T9809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.138388][ T9809] RSP: 002b:00007f7fc64a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.146814][ T9809] RAX: ffffffffffffffda RBX: 00007f7fc5825fa0 RCX: 00007f7fc559e559
[  255.154800][ T9809] RDX: 000000000000ffdd RSI: 00002000000003c0 RDI: 0000000000000004
[  255.162780][ T9809] RBP: 00007f7fc64a4090 R08: 0000000000000000 R09: 0000000000000000
[  255.170760][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.178734][ T9809] R13: 00007f7fc5826038 R14: 00007f7fc5825fa0 R15: 00007ffdf5b62be8
[  255.186735][ T9809]  </TASK>
[  255.659781][ T9830] netlink: 'syz.2.1428': attribute type 10 has an invalid length.
[  255.674509][ T9830] netlink: 181084 bytes leftover after parsing attributes in process `syz.2.1428'.
[  255.694812][ T9831] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1427'.
[  255.771054][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.777499][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  255.823768][ T9829] delete_channel: no stack
[  255.944939][ T9839] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  255.955073][ T9838] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1431'.
[  255.965103][ T9838] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  255.974532][ T9839] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1429'.
[  256.393597][ T9857] netlink: 'syz.0.1434': attribute type 39 has an invalid length.
[  256.434169][ T9855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1437'.
[  256.638158][ T9860] netlink: 'syz.3.1438': attribute type 10 has an invalid length.
[  256.650028][ T9860] netlink: 181084 bytes leftover after parsing attributes in process `syz.3.1438'.
[  256.705225][ T9859] delete_channel: no stack
[  256.723726][ T9833] delete_channel: no stack
[  256.856302][ T9863] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1439'.
[  257.412252][ T9882] netlink: 'syz.0.1448': attribute type 10 has an invalid length.
[  257.484148][ T9881] delete_channel: no stack
[  257.593125][ T9888] netlink: 'syz.0.1449': attribute type 10 has an invalid length.
[  258.365264][ T9886] delete_channel: no stack
[  258.564652][ T9916] netlink: 'syz.0.1458': attribute type 1 has an invalid length.
[  261.123649][ T9949] netlink: 'syz.1.1466': attribute type 10 has an invalid length.
[  261.131564][ T9949] __nla_validate_parse: 5 callbacks suppressed
[  261.131580][ T9949] netlink: 181084 bytes leftover after parsing attributes in process `syz.1.1466'.
[  261.238671][ T9946] delete_channel: no stack
[  261.409379][ T9953] netlink: 'syz.3.1467': attribute type 4 has an invalid length.
[  265.890815][ T9985] netlink: 'syz.1.1478': attribute type 10 has an invalid length.
[  265.903914][ T9980] delete_channel: no stack
[  265.917023][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.983291][ T9985] bridge_slave_1: left allmulticast mode
[  265.999300][ T9985] bridge_slave_1: left promiscuous mode
[  266.036200][ T9985] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.085086][ T9991] netlink: 'syz.0.1481': attribute type 10 has an invalid length.
[  266.093180][ T9991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1481'.
[  266.124465][ T9991] team0: entered promiscuous mode
[  266.142906][ T9991] team_slave_1: entered promiscuous mode
[  266.148909][ T9991] mac80211_hwsim hwsim7 ..ãc¤±: entered promiscuous mode
[  266.173260][ T9991] geneve1: entered promiscuous mode
[  266.183208][ T9991] team0: entered allmulticast mode
[  266.192913][ T9991] team_slave_1: entered allmulticast mode
[  266.212857][ T9991] mac80211_hwsim hwsim7 ..ãc¤±: entered allmulticast mode
[  266.242925][ T9991] geneve1: entered allmulticast mode
[  266.251186][ T9991] 8021q: adding VLAN 0 to HW filter on device team0
[  266.284010][ T9991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  267.344038][T10015] delete_channel: no stack
[  267.586096][T10029] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1494'.
[  267.706191][T10033] netlink: 15935 bytes leftover after parsing attributes in process `syz.2.1492'.
[  267.984269][T10040] FAULT_INJECTION: forcing a failure.
[  267.984269][T10040] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.002047][T10040] CPU: 0 PID: 10040 Comm: syz.3.1499 Not tainted syzkaller #0
[  268.009537][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  268.019610][T10040] Call Trace:
[  268.022904][T10040]  <TASK>
[  268.025847][T10040]  dump_stack_lvl+0x18c/0x250
[  268.030547][T10040]  ? show_regs_print_info+0x20/0x20
[  268.035765][T10040]  ? load_image+0x420/0x420
[  268.040294][T10040]  ? __lock_acquire+0x7eb0/0x7eb0
[  268.045341][T10040]  ? snprintf+0xe9/0x140
[  268.049612][T10040]  should_fail_ex+0x394/0x4c0
[  268.054322][T10040]  _copy_to_user+0x2f/0xa0
[  268.058761][T10040]  simple_read_from_buffer+0xe7/0x150
[  268.064157][T10040]  proc_fail_nth_read+0x1e8/0x260
[  268.069208][T10040]  ? proc_fault_inject_write+0x360/0x360
[  268.074869][T10040]  ? fsnotify_perm+0x271/0x5e0
[  268.079656][T10040]  ? proc_fault_inject_write+0x360/0x360
[  268.085311][T10040]  vfs_read+0x298/0x990
[  268.089496][T10040]  ? kernel_read+0x1e0/0x1e0
[  268.094109][T10040]  ? __fget_files+0x28/0x460
[  268.098726][T10040]  ? __fget_files+0x3fc/0x460
[  268.103434][T10040]  ? __fdget_pos+0x2a3/0x330
[  268.108029][T10040]  ? ksys_read+0x74/0x260
[  268.112363][T10040]  ksys_read+0x151/0x260
[  268.116609][T10040]  ? vfs_write+0x9a0/0x9a0
[  268.121027][T10040]  ? lockdep_hardirqs_on+0x98/0x150
[  268.126225][T10040]  do_syscall_64+0x55/0xb0
[  268.130637][T10040]  ? clear_bhb_loop+0x40/0x90
[  268.135321][T10040]  ? clear_bhb_loop+0x40/0x90
[  268.139993][T10040]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.145886][T10040] RIP: 0033:0x7fc18695ed8e
[  268.150298][T10040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  268.169905][T10040] RSP: 002b:00007fc1877fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  268.178316][T10040] RAX: ffffffffffffffda RBX: 00007fc1877ff6c0 RCX: 00007fc18695ed8e
[  268.186279][T10040] RDX: 000000000000000f RSI: 00007fc1877ff0a0 RDI: 0000000000000009
[  268.194243][T10040] RBP: 00007fc1877ff090 R08: 0000000000000000 R09: 0000000000000000
[  268.202205][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.210167][T10040] R13: 00007fc186c26038 R14: 00007fc186c25fa0 R15: 00007ffc72a77608
[  268.218146][T10040]  </TASK>
[  268.466178][T10047] delete_channel: no stack
[  268.614105][T10049] delete_channel: no stack
[  268.809123][T10059] netlink: 'syz.3.1506': attribute type 21 has an invalid length.
[  269.463907][T10072] delete_channel: no stack
[  269.565104][T10082] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1512'.
[  269.594482][T10080] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1512'.
[  269.856244][T10096] netlink: 'syz.1.1518': attribute type 21 has an invalid length.
[  269.870605][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1518'.
[  270.144215][T10104] delete_channel: no stack
[  270.355741][T10114] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1524'.
[  270.966851][T10130] netlink: 'syz.1.1530': attribute type 10 has an invalid length.
[  270.986561][T10130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1530'.
[  271.013714][T10130] team0: entered promiscuous mode
[  271.020087][T10130] team_slave_1: entered promiscuous mode
[  271.033065][T10130] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  271.043404][T10130] team0: entered allmulticast mode
[  271.050232][T10130] team_slave_1: entered allmulticast mode
[  271.063172][T10130] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  271.071123][T10130] bridge0: port 2(team0) entered blocking state
[  271.083025][T10130] bridge0: port 2(team0) entered disabled state
[  271.101478][T10130] bridge0: port 2(team0) entered blocking state
[  271.107942][T10130] bridge0: port 2(team0) entered forwarding state
[  271.131203][T10132] netlink: 'syz.3.1531': attribute type 10 has an invalid length.
[  271.151429][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1531'.
[  271.165101][T10132] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  271.225070][T10134] delete_channel: no stack
[  271.627899][T10158] netlink: 'syz.3.1542': attribute type 39 has an invalid length.
[  271.789910][T10169] FAULT_INJECTION: forcing a failure.
[  271.789910][T10169] name failslab, interval 1, probability 0, space 0, times 0
[  271.804542][T10169] CPU: 0 PID: 10169 Comm: syz.3.1545 Not tainted syzkaller #0
[  271.805580][T10166] delete_channel: no stack
[  271.812016][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  271.826492][T10169] Call Trace:
[  271.829796][T10169]  <TASK>
[  271.832738][T10169]  dump_stack_lvl+0x18c/0x250
[  271.837445][T10169]  ? sctp_sendmsg+0x1519/0x27b0
[  271.842321][T10169]  ? ___sys_sendmsg+0x2a6/0x360
[  271.847192][T10169]  ? show_regs_print_info+0x20/0x20
[  271.852387][T10169]  ? load_image+0x420/0x420
[  271.856908][T10169]  should_fail_ex+0x394/0x4c0
[  271.861591][T10169]  should_failslab+0x9/0x20
[  271.866094][T10169]  slab_pre_alloc_hook+0x59/0x300
[  271.871115][T10169]  ? sctp_add_bind_addr+0x8c/0x360
[  271.876222][T10169]  __kmem_cache_alloc_node+0x53/0x250
[  271.881598][T10169]  ? sctp_add_bind_addr+0x8c/0x360
[  271.886705][T10169]  kmalloc_trace+0x2a/0xe0
[  271.891120][T10169]  sctp_add_bind_addr+0x8c/0x360
[  271.896058][T10169]  sctp_copy_local_addr_list+0x31b/0x4e0
[  271.901690][T10169]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  271.907403][T10169]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  271.913468][T10169]  ? sctp_v4_is_any+0x35/0x60
[  271.918138][T10169]  ? sctp_copy_one_addr+0x8c/0x350
[  271.923248][T10169]  sctp_bind_addr_copy+0xb3/0x3c0
[  271.928273][T10169]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  271.934601][T10169]  sctp_connect_new_asoc+0x2f9/0x6a0
[  271.939885][T10169]  ? __sctp_connect+0xd80/0xd80
[  271.944730][T10169]  ? __local_bh_enable_ip+0x13a/0x1c0
[  271.950108][T10169]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  271.955650][T10169]  ? security_sctp_bind_connect+0x89/0xb0
[  271.961370][T10169]  sctp_sendmsg+0x1519/0x27b0
[  271.966053][T10169]  ? sctp_getsockopt+0xb60/0xb60
[  271.970991][T10169]  ? aa_af_perm+0x330/0x330
[  271.975497][T10169]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  271.981906][T10169]  ? sock_rps_record_flow+0x19/0x3f0
[  271.987192][T10169]  ? inet_sendmsg+0xce/0x2a0
[  271.991782][T10169]  ? inet_send_prepare+0x250/0x250
[  271.996891][T10169]  ____sys_sendmsg+0x61b/0x980
[  272.001658][T10169]  ? __asan_memset+0x22/0x40
[  272.006254][T10169]  ? __sys_sendmsg_sock+0x30/0x30
[  272.011273][T10169]  ? __import_iovec+0x5f2/0x850
[  272.016131][T10169]  ? import_iovec+0x73/0xa0
[  272.020636][T10169]  ___sys_sendmsg+0x2a6/0x360
[  272.025309][T10169]  ? get_pid_task+0x20/0x1e0
[  272.029899][T10169]  ? __sys_sendmsg+0x2b0/0x2b0
[  272.034683][T10169]  ? __lock_acquire+0x7eb0/0x7eb0
[  272.039723][T10169]  __se_sys_sendmsg+0x1d0/0x2c0
[  272.044580][T10169]  ? __x64_sys_sendmsg+0x80/0x80
[  272.049533][T10169]  ? lockdep_hardirqs_on+0x98/0x150
[  272.054734][T10169]  do_syscall_64+0x55/0xb0
[  272.059150][T10169]  ? clear_bhb_loop+0x40/0x90
[  272.063818][T10169]  ? clear_bhb_loop+0x40/0x90
[  272.068497][T10169]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  272.074388][T10169] RIP: 0033:0x7fc18699e559
[  272.078799][T10169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.098399][T10169] RSP: 002b:00007fc1877ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.106809][T10169] RAX: ffffffffffffffda RBX: 00007fc186c25fa0 RCX: 00007fc18699e559
[  272.114774][T10169] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  272.122741][T10169] RBP: 00007fc1877ff090 R08: 0000000000000000 R09: 0000000000000000
[  272.130713][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  272.138680][T10169] R13: 00007fc186c26038 R14: 00007fc186c25fa0 R15: 00007ffc72a77608
[  272.146662][T10169]  </TASK>
[  272.239648][T10171] netlink: 'syz.1.1546': attribute type 1 has an invalid length.
[  272.254222][T10171] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1546'.
[  272.331849][T10175] netlink: 'syz.3.1548': attribute type 10 has an invalid length.
[  272.342985][T10175] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1548'.
[  272.382376][T10174] delete_channel: no stack
[  272.389970][T10179] netlink: 'syz.1.1550': attribute type 2 has an invalid length.
[  272.462994][T10184] netlink: 'syz.3.1553': attribute type 3 has an invalid length.
[  272.478953][T10184] netlink: 'syz.3.1553': attribute type 3 has an invalid length.
[  272.623593][T10191] delete_channel: no stack
[  273.134581][T10213] __nla_validate_parse: 65 callbacks suppressed
[  273.134615][T10213] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1562'.
[  273.158562][T10212] delete_channel: no stack
[  273.421456][T10219] delete_channel: no stack
[  273.546070][T10227] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1567'.
[  273.894742][T10235] validate_nla: 64 callbacks suppressed
[  273.894786][T10235] netlink: 'syz.2.1571': attribute type 10 has an invalid length.
[  273.925649][T10235] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1571'.
[  273.969287][T10234] delete_channel: no stack
[  274.310478][T10253] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.1578'.
[  274.517452][T10262] netlink: 'syz.2.1582': attribute type 10 has an invalid length.
[  274.542996][T10262] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1582'.
[  274.569440][T10261] delete_channel: no stack
[  274.731681][T10270] netlink: 'syz.2.1585': attribute type 10 has an invalid length.
[  274.749967][T10270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1585'.
[  274.994208][T10275] delete_channel: no stack
[  275.311141][T10295] netlink: 'syz.1.1595': attribute type 10 has an invalid length.
[  275.332963][T10295] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1595'.
[  275.394544][T10293] delete_channel: no stack
[  275.501969][T10298] netlink: 'syz.3.1597': attribute type 10 has an invalid length.
[  275.510648][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1597'.
[  275.520794][T10298] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  275.914537][T10309] delete_channel: no stack
[  275.948456][T10314] netlink: 'syz.3.1604': attribute type 10 has an invalid length.
[  275.963044][T10314] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1604'.
[  276.131081][T10313] delete_channel: no stack
[  276.634065][T10340] delete_channel: no stack
[  276.748641][T10345] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1616'.
[  276.933310][T10348] netlink: 'syz.2.1617': attribute type 10 has an invalid length.
[  277.376401][T10362] delete_channel: no stack
[  278.304053][T10387] delete_channel: no stack
[  278.382754][T10390] FAULT_INJECTION: forcing a failure.
[  278.382754][T10390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  278.426227][T10390] CPU: 0 PID: 10390 Comm: syz.3.1636 Not tainted syzkaller #0
[  278.433729][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  278.443807][T10390] Call Trace:
[  278.447098][T10390]  <TASK>
[  278.450041][T10390]  dump_stack_lvl+0x18c/0x250
[  278.454739][T10390]  ? show_regs_print_info+0x20/0x20
[  278.459958][T10390]  ? load_image+0x420/0x420
[  278.464489][T10390]  ? __lock_acquire+0x7eb0/0x7eb0
[  278.469529][T10390]  ? snprintf+0xe9/0x140
[  278.473796][T10390]  should_fail_ex+0x394/0x4c0
[  278.478503][T10390]  _copy_to_user+0x2f/0xa0
[  278.482935][T10390]  simple_read_from_buffer+0xe7/0x150
[  278.488328][T10390]  proc_fail_nth_read+0x1e8/0x260
[  278.493370][T10390]  ? proc_fault_inject_write+0x360/0x360
[  278.499026][T10390]  ? fsnotify_perm+0x271/0x5e0
[  278.503813][T10390]  ? proc_fault_inject_write+0x360/0x360
[  278.509462][T10390]  vfs_read+0x298/0x990
[  278.513640][T10390]  ? kernel_read+0x1e0/0x1e0
[  278.518251][T10390]  ? __fget_files+0x28/0x460
[  278.522858][T10390]  ? __fget_files+0x3fc/0x460
[  278.527552][T10390]  ? __fdget_pos+0x2a3/0x330
[  278.532149][T10390]  ? ksys_read+0x74/0x260
[  278.536494][T10390]  ksys_read+0x151/0x260
[  278.540758][T10390]  ? vfs_write+0x9a0/0x9a0
[  278.545190][T10390]  ? lockdep_hardirqs_on+0x98/0x150
[  278.550429][T10390]  do_syscall_64+0x55/0xb0
[  278.554859][T10390]  ? clear_bhb_loop+0x40/0x90
[  278.559544][T10390]  ? clear_bhb_loop+0x40/0x90
[  278.564241][T10390]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.570151][T10390] RIP: 0033:0x7fc18695ed8e
[  278.574578][T10390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  278.594195][T10390] RSP: 002b:00007fc1877fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  278.602630][T10390] RAX: ffffffffffffffda RBX: 00007fc1877ff6c0 RCX: 00007fc18695ed8e
[  278.610613][T10390] RDX: 000000000000000f RSI: 00007fc1877ff0a0 RDI: 0000000000000004
[  278.618591][T10390] RBP: 00007fc1877ff090 R08: 0000000000000000 R09: 0000000000000000
[  278.626567][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.634544][T10390] R13: 00007fc186c26038 R14: 00007fc186c25fa0 R15: 00007ffc72a77608
[  278.642560][T10390]  </TASK>
[  279.544827][T10417] delete_channel: no stack
[  279.584748][T10423] netlink: 'syz.2.1647': attribute type 41 has an invalid length.
[  279.592659][T10423] netlink: 'syz.2.1647': attribute type 41 has an invalid length.
[  279.625456][T10423] __nla_validate_parse: 3 callbacks suppressed
[  279.625470][T10423] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1647'.
[  280.059585][T10437] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1653'.
[  280.284113][T10445] delete_channel: no stack
[  280.594633][T10455] delete_channel: no stack
[  280.738978][T10462] netlink: 'syz.3.1665': attribute type 41 has an invalid length.
[  280.752121][T10462] netlink: 'syz.3.1665': attribute type 41 has an invalid length.
[  280.768365][T10462] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1665'.
[  280.788960][T10464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1664'.
[  281.023209][T10468] FAULT_INJECTION: forcing a failure.
[  281.023209][T10468] name failslab, interval 1, probability 0, space 0, times 0
[  281.052889][T10468] CPU: 0 PID: 10468 Comm: syz.1.1667 Not tainted syzkaller #0
[  281.060384][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  281.070431][T10468] Call Trace:
[  281.073708][T10468]  <TASK>
[  281.076630][T10468]  dump_stack_lvl+0x18c/0x250
[  281.081308][T10468]  ? show_regs_print_info+0x20/0x20
[  281.086497][T10468]  ? load_image+0x420/0x420
[  281.091002][T10468]  ? __might_sleep+0xe0/0xe0
[  281.095590][T10468]  ? __lock_acquire+0x7eb0/0x7eb0
[  281.100613][T10468]  should_fail_ex+0x394/0x4c0
[  281.105289][T10468]  should_failslab+0x9/0x20
[  281.109788][T10468]  slab_pre_alloc_hook+0x59/0x300
[  281.114812][T10468]  ? trace_call_bpf+0xc3/0x6c0
[  281.119571][T10468]  kmem_cache_alloc_node+0x5e/0x310
[  281.124765][T10468]  ? __alloc_skb+0x103/0x2c0
[  281.129352][T10468]  __alloc_skb+0x103/0x2c0
[  281.133770][T10468]  alloc_skb_with_frags+0xcd/0x7a0
[  281.138877][T10468]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[  281.144937][T10468]  sock_alloc_send_pskb+0x883/0x9a0
[  281.150140][T10468]  ? sock_kzfree_s+0x50/0x50
[  281.154722][T10468]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  281.160700][T10468]  ? lock_chain_count+0x20/0x20
[  281.165554][T10468]  ? pn_socket_bind+0x3a0/0x4d0
[  281.170404][T10468]  ? __local_bh_enable_ip+0x13a/0x1c0
[  281.175769][T10468]  pn_sendmsg+0x1f0/0x400
[  281.180096][T10468]  ? _local_bh_enable+0xa0/0xa0
[  281.184942][T10468]  ? pn_init+0x40/0x40
[  281.189005][T10468]  ? pn_socket_bind+0x3a0/0x4d0
[  281.193851][T10468]  ? pn_socket_bind+0x3a0/0x4d0
[  281.198700][T10468]  pn_socket_sendmsg+0x1df/0x240
[  281.203638][T10468]  ? pn_socket_ioctl+0x350/0x350
[  281.208574][T10468]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  281.213855][T10468]  ? security_socket_sendmsg+0x80/0xa0
[  281.219309][T10468]  ? pn_socket_ioctl+0x350/0x350
[  281.224249][T10468]  ____sys_sendmsg+0x61b/0x980
[  281.229014][T10468]  ? __asan_memset+0x22/0x40
[  281.233603][T10468]  ? __sys_sendmsg_sock+0x30/0x30
[  281.238622][T10468]  ? __import_iovec+0x3fa/0x850
[  281.243475][T10468]  ? import_iovec+0x73/0xa0
[  281.247984][T10468]  ___sys_sendmsg+0x2a6/0x360
[  281.252660][T10468]  ? __sys_sendmsg+0x2b0/0x2b0
[  281.257434][T10468]  ? trace_call_bpf+0xc3/0x6c0
[  281.262213][T10468]  __se_sys_sendmsg+0x1d0/0x2c0
[  281.267065][T10468]  ? perf_trace_preemptirq_template+0x269/0x330
[  281.273306][T10468]  ? __x64_sys_sendmsg+0x80/0x80
[  281.278249][T10468]  ? lockdep_hardirqs_on+0x98/0x150
[  281.283443][T10468]  do_syscall_64+0x55/0xb0
[  281.287850][T10468]  ? clear_bhb_loop+0x40/0x90
[  281.292523][T10468]  ? clear_bhb_loop+0x40/0x90
[  281.297193][T10468]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  281.303089][T10468] RIP: 0033:0x7f4ef539e559
[  281.307495][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.327096][T10468] RSP: 002b:00007f4ef35f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.335508][T10468] RAX: ffffffffffffffda RBX: 00007f4ef5625fa0 RCX: 00007f4ef539e559
[  281.343472][T10468] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  281.351441][T10468] RBP: 00007f4ef35f6090 R08: 0000000000000000 R09: 0000000000000000
[  281.359400][T10468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  281.367362][T10468] R13: 00007f4ef5626038 R14: 00007f4ef5625fa0 R15: 00007fff97bc1e08
[  281.375339][T10468]  </TASK>
[  281.444033][T10465] delete_channel: no stack
[  281.653650][T10478] delete_channel: no stack
[  281.806762][T10487] netlink: 'syz.2.1676': attribute type 10 has an invalid length.
[  281.823810][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1676'.
[  281.975497][T10492] netlink: 'syz.2.1677': attribute type 21 has an invalid length.
[  282.057959][T10494] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1678'.
[  282.184366][T10495] delete_channel: no stack
[  282.463660][T10503] delete_channel: no stack
[  282.952438][T10519] delete_channel: no stack
[  283.134006][T10520] delete_channel: no stack
[  283.192042][T10523] netlink: 'syz.1.1692': attribute type 10 has an invalid length.
[  283.212975][T10523] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1692'.
[  283.236889][T10522] delete_channel: no stack
[  283.423703][T10526] delete_channel: no stack
[  284.476537][T10541] FAULT_INJECTION: forcing a failure.
[  284.476537][T10541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  284.516047][T10541] CPU: 0 PID: 10541 Comm: syz.2.1700 Not tainted syzkaller #0
[  284.523554][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  284.533619][T10541] Call Trace:
[  284.536909][T10541]  <TASK>
[  284.539851][T10541]  dump_stack_lvl+0x18c/0x250
[  284.544554][T10541]  ? show_regs_print_info+0x20/0x20
[  284.549771][T10541]  ? load_image+0x420/0x420
[  284.554295][T10541]  ? __might_fault+0xaa/0x120
[  284.558990][T10541]  ? __lock_acquire+0x7eb0/0x7eb0
[  284.564033][T10541]  should_fail_ex+0x394/0x4c0
[  284.568741][T10541]  _copy_from_user+0x2f/0xe0
[  284.573351][T10541]  __sys_bpf+0x23e/0x890
[  284.577615][T10541]  ? bpf_link_show_fdinfo+0x560/0x560
[  284.583020][T10541]  ? lock_chain_count+0x20/0x20
[  284.587893][T10541]  __x64_sys_bpf+0x7c/0x90
[  284.592325][T10541]  do_syscall_64+0x55/0xb0
[  284.596754][T10541]  ? clear_bhb_loop+0x40/0x90
[  284.601442][T10541]  ? clear_bhb_loop+0x40/0x90
[  284.606134][T10541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  284.612046][T10541] RIP: 0033:0x7f256ed9e559
[  284.616473][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  284.636098][T10541] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  284.644536][T10541] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  284.652525][T10541] RDX: 0000000000000094 RSI: 0000200000000e40 RDI: 0000000000000005
[  284.660516][T10541] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  284.668503][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.676491][T10541] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  284.684492][T10541]  </TASK>
[  284.754180][T10543] delete_channel: no stack
[  284.899078][T10548] netlink: 'syz.1.1703': attribute type 10 has an invalid length.
[  284.912909][T10548] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1703'.
[  284.946494][T10547] delete_channel: no stack
[  286.101936][T10565] netlink: 'syz.1.1708': attribute type 2 has an invalid length.
[  286.110508][T10565] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1708'.
[  286.721053][T10575] netlink: 'syz.2.1712': attribute type 10 has an invalid length.
[  286.743346][T10575] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1712'.
[  286.813821][T10574] delete_channel: no stack
[  286.821808][T10577] FAULT_INJECTION: forcing a failure.
[  286.821808][T10577] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  286.853963][T10577] CPU: 1 PID: 10577 Comm: syz.1.1714 Not tainted syzkaller #0
[  286.861489][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  286.871562][T10577] Call Trace:
[  286.874858][T10577]  <TASK>
[  286.877798][T10577]  dump_stack_lvl+0x18c/0x250
[  286.882495][T10577]  ? show_regs_print_info+0x20/0x20
[  286.887709][T10577]  ? load_image+0x420/0x420
[  286.892245][T10577]  ? __might_fault+0xaa/0x120
[  286.896948][T10577]  ? __lock_acquire+0x7eb0/0x7eb0
[  286.901994][T10577]  should_fail_ex+0x394/0x4c0
[  286.906825][T10577]  _copy_from_user+0x2f/0xe0
[  286.911442][T10577]  __sys_bpf+0x23e/0x890
[  286.915707][T10577]  ? bpf_link_show_fdinfo+0x560/0x560
[  286.921114][T10577]  ? lock_chain_count+0x20/0x20
[  286.925994][T10577]  __x64_sys_bpf+0x7c/0x90
[  286.930456][T10577]  do_syscall_64+0x55/0xb0
[  286.934892][T10577]  ? clear_bhb_loop+0x40/0x90
[  286.939590][T10577]  ? clear_bhb_loop+0x40/0x90
[  286.944293][T10577]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.950211][T10577] RIP: 0033:0x7f4ef539e559
[  286.954642][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.974269][T10577] RSP: 002b:00007f4ef35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  286.982708][T10577] RAX: ffffffffffffffda RBX: 00007f4ef5625fa0 RCX: 00007f4ef539e559
[  286.990696][T10577] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000000f
[  286.998679][T10577] RBP: 00007f4ef35f6090 R08: 0000000000000000 R09: 0000000000000000
[  287.006659][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.014646][T10577] R13: 00007f4ef5626038 R14: 00007f4ef5625fa0 R15: 00007fff97bc1e08
[  287.022647][T10577]  </TASK>
[  287.356939][T10587] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1717'.
[  287.729601][T10596] syzkaller0: entered promiscuous mode
[  287.746974][T10596] syzkaller0: entered allmulticast mode
[  288.410264][T10604] netlink: 'syz.3.1724': attribute type 10 has an invalid length.
[  288.448898][T10604] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.1724'.
[  288.505826][T10603] delete_channel: no stack
[  288.865964][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  288.884843][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  288.914816][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  288.925902][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  288.953785][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  288.961238][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.008501][T10614] rxe_eth0 speed is unknown, defaulting to 1000
[  289.660572][T10614] chnl_net:caif_netlink_parms(): no params data found
[  290.156045][T10614] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.171574][T10614] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.179385][T10614] bridge_slave_0: entered allmulticast mode
[  290.187654][T10614] bridge_slave_0: entered promiscuous mode
[  290.198775][T10614] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.206312][T10614] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.231906][T10614] bridge_slave_1: entered allmulticast mode
[  290.244257][T10614] bridge_slave_1: entered promiscuous mode
[  290.290920][T10614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.322289][T10614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.403608][T10642] netlink: 'syz.3.1735': attribute type 10 has an invalid length.
[  290.423286][T10642] netlink: 181084 bytes leftover after parsing attributes in process `syz.3.1735'.
[  290.433640][T10614] team0: Port device team_slave_0 added
[  290.444287][T10614] team0: Port device team_slave_1 added
[  290.454899][T10641] delete_channel: no stack
[  290.525642][T10614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.544504][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.601623][T10614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.635056][T10614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.642040][T10614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  290.699106][T10614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.829285][T10614] hsr_slave_0: entered promiscuous mode
[  290.849674][T10614] hsr_slave_1: entered promiscuous mode
[  290.857590][T10614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  290.867591][T10614] Cannot create hsr debugfs directory
[  291.033072][   T51] Bluetooth: hci4: command tx timeout
[  291.440855][T10614] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  291.478751][T10614] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  291.507498][T10614] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  291.541071][T10614] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  291.562162][T10663] syzkaller0: entered promiscuous mode
[  291.571339][T10663] syzkaller0: entered allmulticast mode
[  291.670959][T10667] netlink: 'syz.1.1745': attribute type 10 has an invalid length.
[  291.688202][T10667] netlink: 181084 bytes leftover after parsing attributes in process `syz.1.1745'.
[  291.769893][T10664] delete_channel: no stack
[  291.895290][T10614] 8021q: adding VLAN 0 to HW filter on device bond0
[  291.925765][T10614] 8021q: adding VLAN 0 to HW filter on device team0
[  291.940127][  T335] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.947305][  T335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.979216][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.986408][ T7120] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.406074][T10614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.425450][T10684] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1752'.
[  292.474634][T10684] netlink: 'syz.1.1752': attribute type 10 has an invalid length.
[  292.551646][T10689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1753'.
[  292.637851][T10689] FAULT_INJECTION: forcing a failure.
[  292.637851][T10689] name failslab, interval 1, probability 0, space 0, times 0
[  292.668628][T10689] CPU: 1 PID: 10689 Comm: syz.2.1753 Not tainted syzkaller #0
[  292.676145][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.686217][T10689] Call Trace:
[  292.689511][T10689]  <TASK>
[  292.692456][T10689]  dump_stack_lvl+0x18c/0x250
[  292.697152][T10689]  ? show_regs_print_info+0x20/0x20
[  292.702350][T10689]  ? load_image+0x420/0x420
[  292.706861][T10689]  ? __might_sleep+0xe0/0xe0
[  292.711448][T10689]  ? __lock_acquire+0x7eb0/0x7eb0
[  292.716480][T10689]  should_fail_ex+0x394/0x4c0
[  292.721170][T10689]  should_failslab+0x9/0x20
[  292.725675][T10689]  slab_pre_alloc_hook+0x59/0x300
[  292.730696][T10689]  ? rtnl_newlink+0x10d/0x2170
[  292.735471][T10689]  __kmem_cache_alloc_node+0x53/0x250
[  292.740935][T10689]  ? rtnl_newlink+0x10d/0x2170
[  292.745700][T10689]  kmalloc_trace+0x2a/0xe0
[  292.750126][T10689]  rtnl_newlink+0x10d/0x2170
[  292.754739][T10689]  ? verify_lock_unused+0x140/0x140
[  292.759939][T10689]  ? __mutex_trylock_common+0x160/0x270
[  292.765481][T10689]  ? rtnl_setlink+0x4e0/0x4e0
[  292.770155][T10689]  ? trace_raw_output_contention_end+0xd0/0xd0
[  292.776307][T10689]  ? rcu_is_watching+0x15/0xb0
[  292.781069][T10689]  ? trace_contention_end+0x39/0xe0
[  292.786265][T10689]  ? __mutex_lock+0x30d/0xc80
[  292.790946][T10689]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  292.796058][T10689]  ? mutex_lock_nested+0x20/0x20
[  292.801001][T10689]  ? rtnl_setlink+0x4e0/0x4e0
[  292.805678][T10689]  rtnetlink_rcv_msg+0x843/0xf90
[  292.810616][T10689]  ? rtnetlink_rcv_msg+0x220/0xf90
[  292.815731][T10689]  ? rtnetlink_bind+0x80/0x80
[  292.820406][T10689]  ? perf_trace_preemptirq_template+0x269/0x330
[  292.826650][T10689]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  292.832630][T10689]  ? lock_chain_count+0x20/0x20
[  292.837482][T10689]  ? __local_bh_enable_ip+0x13a/0x1c0
[  292.842852][T10689]  ? lockdep_hardirqs_on+0x98/0x150
[  292.848051][T10689]  ? __local_bh_enable_ip+0x13a/0x1c0
[  292.853425][T10689]  ? _local_bh_enable+0xa0/0xa0
[  292.858276][T10689]  ? __dev_queue_xmit+0x272/0x37e0
[  292.863384][T10689]  ? __dev_queue_xmit+0x1329/0x37e0
[  292.868578][T10689]  ? __dev_queue_xmit+0x272/0x37e0
[  292.873701][T10689]  ? ref_tracker_free+0x686/0x830
[  292.878728][T10689]  netlink_rcv_skb+0x235/0x4c0
[  292.883490][T10689]  ? rtnetlink_bind+0x80/0x80
[  292.888165][T10689]  ? netlink_ack+0x1160/0x1160
[  292.892936][T10689]  ? __lock_acquire+0x7eb0/0x7eb0
[  292.897961][T10689]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.903175][T10689]  netlink_unicast+0x7b1/0x930
[  292.907967][T10689]  netlink_sendmsg+0x8d0/0xbf0
[  292.912761][T10689]  ? netlink_getsockopt+0x590/0x590
[  292.917988][T10689]  ? apparmor_socket_sendmsg+0x8e/0x330
[  292.923564][T10689]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  292.928860][T10689]  ? security_socket_sendmsg+0x80/0xa0
[  292.934321][T10689]  ? netlink_getsockopt+0x590/0x590
[  292.939538][T10689]  ____sys_sendmsg+0x61b/0x980
[  292.944319][T10689]  ? __asan_memset+0x22/0x40
[  292.948911][T10689]  ? __sys_sendmsg_sock+0x30/0x30
[  292.953932][T10689]  ? __import_iovec+0x5f2/0x850
[  292.958793][T10689]  ? import_iovec+0x73/0xa0
[  292.963298][T10689]  ___sys_sendmsg+0x2a6/0x360
[  292.967978][T10689]  ? get_pid_task+0x20/0x1e0
[  292.972572][T10689]  ? __sys_sendmsg+0x2b0/0x2b0
[  292.977350][T10689]  ? __lock_acquire+0x7eb0/0x7eb0
[  292.982391][T10689]  __se_sys_sendmsg+0x1d0/0x2c0
[  292.987243][T10689]  ? perf_trace_preemptirq_template+0x269/0x330
[  292.993484][T10689]  ? __x64_sys_sendmsg+0x80/0x80
[  292.998441][T10689]  ? lockdep_hardirqs_on+0x98/0x150
[  293.003646][T10689]  do_syscall_64+0x55/0xb0
[  293.008062][T10689]  ? clear_bhb_loop+0x40/0x90
[  293.012747][T10689]  ? clear_bhb_loop+0x40/0x90
[  293.017443][T10689]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.023351][T10689] RIP: 0033:0x7f256ed9e559
[  293.027778][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.047393][T10689] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.055809][T10689] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  293.063779][T10689] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000e
[  293.071757][T10689] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  293.079725][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.087690][T10689] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  293.095695][T10689]  </TASK>
[  293.114159][   T51] Bluetooth: hci4: command tx timeout
[  293.513449][T10701] netlink: 'syz.2.1756': attribute type 10 has an invalid length.
[  293.528897][T10701] netlink: 181084 bytes leftover after parsing attributes in process `syz.2.1756'.
[  293.582245][T10700] delete_channel: no stack
[  293.613865][T10614] veth0_vlan: entered promiscuous mode
[  293.650503][T10614] veth1_vlan: entered promiscuous mode
[  293.736628][T10614] veth0_macvtap: entered promiscuous mode
[  293.767547][T10614] veth1_macvtap: entered promiscuous mode
[  293.836906][T10614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.887871][T10614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.909547][T10614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.944252][T10614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.972837][T10614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.981591][T10614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.156911][  T335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.182945][  T335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.205521][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1762'.
[  294.276866][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.307127][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.415206][T10729] netlink: 'syz.2.1765': attribute type 7 has an invalid length.
[  294.424898][T10729] FAULT_INJECTION: forcing a failure.
[  294.424898][T10729] name failslab, interval 1, probability 0, space 0, times 0
[  294.454191][T10729] CPU: 0 PID: 10729 Comm: syz.2.1765 Not tainted syzkaller #0
[  294.461690][T10729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  294.471756][T10729] Call Trace:
[  294.475051][T10729]  <TASK>
[  294.477991][T10729]  dump_stack_lvl+0x18c/0x250
[  294.482697][T10729]  ? show_regs_print_info+0x20/0x20
[  294.487908][T10729]  ? load_image+0x420/0x420
[  294.492436][T10729]  ? __might_sleep+0xe0/0xe0
[  294.497045][T10729]  ? __lock_acquire+0x7eb0/0x7eb0
[  294.502095][T10729]  should_fail_ex+0x394/0x4c0
[  294.506801][T10729]  should_failslab+0x9/0x20
[  294.511324][T10729]  slab_pre_alloc_hook+0x59/0x300
[  294.516369][T10729]  ? fib_create_info+0xa8d/0x2390
[  294.521419][T10729]  ? fib_create_info+0xa8d/0x2390
[  294.526475][T10729]  __kmem_cache_alloc_node+0x53/0x250
[  294.531873][T10729]  ? fib_create_info+0xa8d/0x2390
[  294.536915][T10729]  __kmalloc+0xa7/0x240
[  294.541092][T10729]  fib_create_info+0xa8d/0x2390
[  294.545979][T10729]  fib_table_insert+0xc6/0x1b00
[  294.550843][T10729]  ? lwtunnel_valid_encap_type_attr+0x220/0x290
[  294.557109][T10729]  ? rtm_to_fib_config+0x1065/0x13b0
[  294.562432][T10729]  ? fib_new_table+0x10a/0x2d0
[  294.567215][T10729]  inet_rtm_newroute+0x14b/0x240
[  294.572165][T10729]  ? rcu_read_unlock+0xa0/0xa0
[  294.576945][T10729]  ? rcu_read_unlock+0xa0/0xa0
[  294.581707][T10729]  rtnetlink_rcv_msg+0x843/0xf90
[  294.586644][T10729]  ? rtnetlink_rcv_msg+0x220/0xf90
[  294.591761][T10729]  ? rtnetlink_bind+0x80/0x80
[  294.596443][T10729]  ? perf_trace_preemptirq_template+0xac/0x330
[  294.602597][T10729]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  294.608575][T10729]  ? lock_chain_count+0x20/0x20
[  294.613431][T10729]  ? __local_bh_enable_ip+0x13a/0x1c0
[  294.618796][T10729]  ? lockdep_hardirqs_on+0x98/0x150
[  294.623997][T10729]  ? __local_bh_enable_ip+0x13a/0x1c0
[  294.629364][T10729]  ? _local_bh_enable+0xa0/0xa0
[  294.634214][T10729]  ? __dev_queue_xmit+0x272/0x37e0
[  294.639323][T10729]  ? __dev_queue_xmit+0x1329/0x37e0
[  294.644518][T10729]  ? __dev_queue_xmit+0x272/0x37e0
[  294.649654][T10729]  ? ref_tracker_free+0x686/0x830
[  294.654691][T10729]  netlink_rcv_skb+0x235/0x4c0
[  294.659459][T10729]  ? rtnetlink_bind+0x80/0x80
[  294.664144][T10729]  ? netlink_ack+0x1160/0x1160
[  294.668921][T10729]  ? __lock_acquire+0x7eb0/0x7eb0
[  294.673953][T10729]  ? netlink_deliver_tap+0x2e/0x1b0
[  294.679157][T10729]  netlink_unicast+0x7b1/0x930
[  294.683929][T10729]  netlink_sendmsg+0x8d0/0xbf0
[  294.688698][T10729]  ? netlink_getsockopt+0x590/0x590
[  294.693897][T10729]  ? apparmor_socket_sendmsg+0x8e/0x330
[  294.699442][T10729]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  294.704724][T10729]  ? security_socket_sendmsg+0x80/0xa0
[  294.710180][T10729]  ? netlink_getsockopt+0x590/0x590
[  294.715379][T10729]  ____sys_sendmsg+0x61b/0x980
[  294.720242][T10729]  ? __asan_memset+0x22/0x40
[  294.724846][T10729]  ? __sys_sendmsg_sock+0x30/0x30
[  294.729878][T10729]  ? __import_iovec+0x5f2/0x850
[  294.734747][T10729]  ? import_iovec+0x73/0xa0
[  294.739262][T10729]  ___sys_sendmsg+0x2a6/0x360
[  294.743947][T10729]  ? get_pid_task+0x20/0x1e0
[  294.748547][T10729]  ? __sys_sendmsg+0x2b0/0x2b0
[  294.753329][T10729]  ? __lock_acquire+0x7eb0/0x7eb0
[  294.758374][T10729]  __se_sys_sendmsg+0x1d0/0x2c0
[  294.763230][T10729]  ? __x64_sys_sendmsg+0x80/0x80
[  294.768186][T10729]  ? lockdep_hardirqs_on+0x98/0x150
[  294.773387][T10729]  do_syscall_64+0x55/0xb0
[  294.777807][T10729]  ? clear_bhb_loop+0x40/0x90
[  294.782484][T10729]  ? clear_bhb_loop+0x40/0x90
[  294.787160][T10729]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  294.793058][T10729] RIP: 0033:0x7f256ed9e559
[  294.797472][T10729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.817088][T10729] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.825502][T10729] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  294.833469][T10729] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000003
[  294.841431][T10729] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  294.849398][T10729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.857368][T10729] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  294.865352][T10729]  </TASK>
[  295.124036][T10732] delete_channel: no stack
[  295.193274][   T51] Bluetooth: hci4: command tx timeout
[  295.431192][T10737] À: port 1(vlan0) entered blocking state
[  295.447763][T10737] À: port 1(vlan0) entered disabled state
[  295.475143][T10737] vlan0: entered allmulticast mode
[  295.505294][T10737] veth0_vlan: entered allmulticast mode
[  295.542221][T10737] vlan0: entered promiscuous mode
[  295.599383][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.611753][T10748] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.635826][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  295.645016][T10748] batman_adv: batadv0: Removing interface: batadv_slave_1
[  295.785512][T10749] delete_channel: no stack
[  296.194266][T10761] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1778'.
[  296.260854][T10761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  296.475303][T10765] delete_channel: no stack
[  296.675755][T10769] delete_channel: no stack
[  296.816564][T10777] delete_channel: no stack
[  296.931599][ T2916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.019450][ T2916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.110263][ T2916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.196119][T10789] delete_channel: no stack
[  297.208537][ T2916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.272904][   T51] Bluetooth: hci4: command tx timeout
[  297.395018][T10798] netlink: 'syz.2.1794': attribute type 33 has an invalid length.
[  297.414776][T10798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1794'.
[  297.626577][T10806] delete_channel: no stack
[  298.368822][T10831] delete_channel: no stack
[  298.497786][T10838] delete_channel: no stack
[  298.624954][T10849] FAULT_INJECTION: forcing a failure.
[  298.624954][T10849] name failslab, interval 1, probability 0, space 0, times 0
[  298.649330][T10849] CPU: 1 PID: 10849 Comm: syz.2.1810 Not tainted syzkaller #0
[  298.656831][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  298.666910][T10849] Call Trace:
[  298.670293][T10849]  <TASK>
[  298.673243][T10849]  dump_stack_lvl+0x18c/0x250
[  298.677940][T10849]  ? show_regs_print_info+0x20/0x20
[  298.683162][T10849]  ? load_image+0x420/0x420
[  298.687693][T10849]  ? __might_sleep+0xe0/0xe0
[  298.692303][T10849]  ? __lock_acquire+0x7eb0/0x7eb0
[  298.697350][T10849]  ? mark_lock+0x94/0x320
[  298.701707][T10849]  should_fail_ex+0x394/0x4c0
[  298.706413][T10849]  should_failslab+0x9/0x20
[  298.710940][T10849]  slab_pre_alloc_hook+0x59/0x300
[  298.715987][T10849]  ? __get_vm_area_node+0x125/0x370
[  298.721213][T10849]  __kmem_cache_alloc_node+0x53/0x250
[  298.726615][T10849]  ? __get_vm_area_node+0x125/0x370
[  298.731838][T10849]  kmalloc_node_trace+0x26/0xe0
[  298.736717][T10849]  __get_vm_area_node+0x125/0x370
[  298.741769][T10849]  __vmalloc_node_range+0x36f/0x1320
[  298.747076][T10849]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  298.752641][T10849]  ? mark_lock+0x94/0x320
[  298.756998][T10849]  ? __lock_acquire+0x1431/0x7eb0
[  298.762061][T10849]  ? aa_get_newest_label+0xfd/0x5c0
[  298.767282][T10849]  ? free_vm_area+0x50/0x50
[  298.771806][T10849]  ? end_current_label_crit_section+0x170/0x170
[  298.778069][T10849]  ? verify_lock_unused+0x140/0x140
[  298.783297][T10849]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  298.788860][T10849]  __vmalloc+0x7a/0x90
[  298.792948][T10849]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  298.798509][T10849]  bpf_prog_alloc_no_stats+0x46/0x430
[  298.803906][T10849]  bpf_prog_alloc+0x3d/0x1a0
[  298.808516][T10849]  bpf_prog_load+0x6b2/0x1610
[  298.813225][T10849]  ? map_freeze+0x420/0x420
[  298.817746][T10849]  ? __might_fault+0xaa/0x120
[  298.822439][T10849]  ? __lock_acquire+0x7eb0/0x7eb0
[  298.827482][T10849]  ? file_end_write+0x159/0x250
[  298.832355][T10849]  ? __might_fault+0xaa/0x120
[  298.837048][T10849]  ? __might_fault+0xc6/0x120
[  298.841739][T10849]  ? __might_fault+0xaa/0x120
[  298.846432][T10849]  ? bpf_lsm_bpf+0x9/0x10
[  298.850782][T10849]  ? security_bpf+0x7e/0xa0
[  298.855309][T10849]  __sys_bpf+0x5ba/0x890
[  298.859576][T10849]  ? bpf_link_show_fdinfo+0x560/0x560
[  298.864985][T10849]  ? lock_chain_count+0x20/0x20
[  298.869864][T10849]  __x64_sys_bpf+0x7c/0x90
[  298.874302][T10849]  do_syscall_64+0x55/0xb0
[  298.878735][T10849]  ? clear_bhb_loop+0x40/0x90
[  298.883425][T10849]  ? clear_bhb_loop+0x40/0x90
[  298.888121][T10849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.894041][T10849] RIP: 0033:0x7f256ed9e559
[  298.898476][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.918100][T10849] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  298.926535][T10849] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  298.934530][T10849] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  298.942524][T10849] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  298.950515][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.958504][T10849] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  298.966511][T10849]  </TASK>
[  298.989134][T10849] syz.2.1810: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  299.005968][T10849] CPU: 1 PID: 10849 Comm: syz.2.1810 Not tainted syzkaller #0
[  299.013454][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  299.023520][T10849] Call Trace:
[  299.026810][T10849]  <TASK>
[  299.029754][T10849]  dump_stack_lvl+0x18c/0x250
[  299.034456][T10849]  ? show_regs_print_info+0x20/0x20
[  299.039675][T10849]  ? load_image+0x420/0x420
[  299.044206][T10849]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  299.050644][T10849]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  299.057172][T10849]  warn_alloc+0x246/0x340
[  299.061516][T10849]  ? __get_vm_area_node+0x125/0x370
[  299.066740][T10849]  ? zone_watermark_ok_safe+0x230/0x230
[  299.072307][T10849]  ? rcu_is_watching+0x15/0xb0
[  299.077101][T10849]  ? __get_vm_area_node+0x356/0x370
[  299.082327][T10849]  __vmalloc_node_range+0x394/0x1320
[  299.087630][T10849]  ? mark_lock+0x94/0x320
[  299.091961][T10849]  ? __lock_acquire+0x1431/0x7eb0
[  299.096993][T10849]  ? aa_get_newest_label+0xfd/0x5c0
[  299.102189][T10849]  ? free_vm_area+0x50/0x50
[  299.106693][T10849]  ? end_current_label_crit_section+0x170/0x170
[  299.112944][T10849]  ? verify_lock_unused+0x140/0x140
[  299.118147][T10849]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  299.123690][T10849]  __vmalloc+0x7a/0x90
[  299.127760][T10849]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  299.133302][T10849]  bpf_prog_alloc_no_stats+0x46/0x430
[  299.138692][T10849]  bpf_prog_alloc+0x3d/0x1a0
[  299.143287][T10849]  bpf_prog_load+0x6b2/0x1610
[  299.147969][T10849]  ? map_freeze+0x420/0x420
[  299.152466][T10849]  ? __might_fault+0xaa/0x120
[  299.157140][T10849]  ? __lock_acquire+0x7eb0/0x7eb0
[  299.162162][T10849]  ? file_end_write+0x159/0x250
[  299.167016][T10849]  ? __might_fault+0xaa/0x120
[  299.171694][T10849]  ? __might_fault+0xc6/0x120
[  299.176363][T10849]  ? __might_fault+0xaa/0x120
[  299.181035][T10849]  ? bpf_lsm_bpf+0x9/0x10
[  299.185364][T10849]  ? security_bpf+0x7e/0xa0
[  299.189867][T10849]  __sys_bpf+0x5ba/0x890
[  299.194105][T10849]  ? bpf_link_show_fdinfo+0x560/0x560
[  299.199485][T10849]  ? lock_chain_count+0x20/0x20
[  299.204340][T10849]  __x64_sys_bpf+0x7c/0x90
[  299.208755][T10849]  do_syscall_64+0x55/0xb0
[  299.213162][T10849]  ? clear_bhb_loop+0x40/0x90
[  299.217833][T10849]  ? clear_bhb_loop+0x40/0x90
[  299.222500][T10849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.228395][T10849] RIP: 0033:0x7f256ed9e559
[  299.232810][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.252410][T10849] RSP: 002b:00007f256fcbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  299.260820][T10849] RAX: ffffffffffffffda RBX: 00007f256f025fa0 RCX: 00007f256ed9e559
[  299.268782][T10849] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[  299.276746][T10849] RBP: 00007f256fcbd090 R08: 0000000000000000 R09: 0000000000000000
[  299.284710][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.292682][T10849] R13: 00007f256f026038 R14: 00007f256f025fa0 R15: 00007ffe3e39c7f8
[  299.300659][T10849]  </TASK>
[  299.323086][T10849] Mem-Info:
[  299.327182][T10849] active_anon:5810 inactive_anon:0 isolated_anon:0
[  299.327182][T10849]  active_file:17828 inactive_file:40043 isolated_file:0
[  299.327182][T10849]  unevictable:768 dirty:363 writeback:0
[  299.327182][T10849]  slab_reclaimable:11512 slab_unreclaimable:97398
[  299.327182][T10849]  mapped:24722 shmem:1371 pagetables:582
[  299.327182][T10849]  sec_pagetables:0 bounce:0
[  299.327182][T10849]  kernel_misc_reclaimable:0
[  299.327182][T10849]  free:1333511 free_pcp:11358 free_cma:0
[  299.389992][T10849] Node 0 active_anon:23440kB inactive_anon:0kB active_file:71312kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98888kB dirty:1452kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11248kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no
[  299.423314][T10849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  299.479749][T10849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  299.517922][T10867] netlink: 'syz.1.1812': attribute type 2 has an invalid length.
[  299.543410][T10849] lowmem_reserve[]: 0 2505 2506 2506 2506
[  299.544517][T10867] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1812'.
[  299.549204][T10849] Node 0 DMA32 free:1430860kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:23000kB inactive_anon:0kB active_file:71312kB inactive_file:158888kB unevictable:1536kB writepending:1448kB present:3129332kB managed:2569932kB mlocked:0kB bounce:0kB free_pcp:25884kB local_pcp:18764kB free_cma:0kB
[  299.549266][T10849] lowmem_reserve[]: 0 0 1 1 1
[  299.549307][T10849] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  299.644387][T10849] lowmem_reserve[]: 0 0 0 0 0
[  299.649165][T10849] Node 1 Normal free:3888464kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20604kB local_pcp:8864kB free_cma:0kB
[  299.721878][T10849] lowmem_reserve[]: 0 0 0 0 0
[  299.732008][T10849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  299.789204][ T2916] 
[  299.791574][ T2916] ======================================================
[  299.798594][ T2916] WARNING: possible circular locking dependency detected
[  299.805627][ T2916] syzkaller #0 Not tainted
[  299.810042][ T2916] ------------------------------------------------------
[  299.817062][ T2916] kworker/u4:7/2916 is trying to acquire lock:
[  299.823216][ T2916] ffff8881427c4d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0
[  299.832809][ T2916] 
[  299.832809][ T2916] but task is already holding lock:
[  299.840172][ T2916] ffff88807aad0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  299.850539][ T2916] 
[  299.850539][ T2916] which lock already depends on the new lock.
[  299.850539][ T2916] 
[  299.860948][ T2916] 
[  299.860948][ T2916] the existing dependency chain (in reverse order) is:
[  299.869962][ T2916] 
[  299.869962][ T2916] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  299.877683][ T2916]        __mutex_lock+0x135/0xc80
[  299.882700][ T2916]        ieee80211_open+0x144/0x200
[  299.887884][ T2916]        __dev_open+0x2cb/0x430
[  299.892736][ T2916]        dev_open+0xab/0x190
[  299.897321][ T2916]        team_add_slave+0x703/0x28a0
[  299.902597][ T2916]        do_setlink+0xcde/0x3f40
[  299.907526][ T2916]        rtnl_newlink+0x1848/0x2170
[  299.912731][ T2916]        rtnetlink_rcv_msg+0x843/0xf90
[  299.918182][ T2916]        netlink_rcv_skb+0x235/0x4c0
[  299.923455][ T2916]        netlink_unicast+0x7b1/0x930
[  299.928727][ T2916]        netlink_sendmsg+0x8d0/0xbf0
[  299.934002][ T2916]        ____sys_sendmsg+0x61b/0x980
[  299.939277][ T2916]        ___sys_sendmsg+0x2a6/0x360
[  299.944465][ T2916]        __se_sys_sendmsg+0x1d0/0x2c0
[  299.949828][ T2916]        do_syscall_64+0x55/0xb0
[  299.954753][ T2916]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.961179][ T2916] 
[  299.961179][ T2916] -> #0 (team->team_lock_key#2){+.+.}-{3:3}:
[  299.969335][ T2916]        __lock_acquire+0x3a07/0x7eb0
[  299.974699][ T2916]        lock_acquire+0x19e/0x420
[  299.979713][ T2916]        __mutex_lock+0x135/0xc80
[  299.984900][ T2916]        team_del_slave+0x31/0x1b0
[  299.989998][ T2916]        team_device_event+0x297/0xa30
[  299.995446][ T2916]        notifier_call_chain+0x18f/0x380
[  300.001072][ T2916]        unregister_netdevice_many_notify+0x1037/0x1910
[  300.008007][ T2916]        unregister_netdevice_queue+0x2e9/0x330
[  300.014240][ T2916]        _cfg80211_unregister_wdev+0x16d/0x580
[  300.020380][ T2916]        ieee80211_remove_interfaces+0x4b3/0x690
[  300.026692][ T2916]        ieee80211_unregister_hw+0x5d/0x2a0
[  300.032569][ T2916]        mac80211_hwsim_del_radio+0x289/0x480
[  300.038627][ T2916]        hwsim_exit_net+0x58d/0x650
[  300.043813][ T2916]        cleanup_net+0x6f7/0xb00
[  300.048737][ T2916]        process_scheduled_works+0xa60/0x1600
[  300.054793][ T2916]        worker_thread+0xa5e/0xfe0
[  300.059892][ T2916]        kthread+0x2fa/0x390
[  300.064470][ T2916]        ret_from_fork+0x48/0x80
[  300.069395][ T2916]        ret_from_fork_asm+0x11/0x20
[  300.074669][ T2916] 
[  300.074669][ T2916] other info that might help us debug this:
[  300.074669][ T2916] 
[  300.084882][ T2916]  Possible unsafe locking scenario:
[  300.084882][ T2916] 
[  300.092312][ T2916]        CPU0                    CPU1
[  300.097673][ T2916]        ----                    ----
[  300.103039][ T2916]   lock(&rdev->wiphy.mtx);
[  300.107547][ T2916]                                lock(team->team_lock_key#2);
[  300.115010][ T2916]                                lock(&rdev->wiphy.mtx);
[  300.122025][ T2916]   lock(team->team_lock_key#2);
[  300.126957][ T2916] 
[  300.126957][ T2916]  *** DEADLOCK ***
[  300.126957][ T2916] 
[  300.135085][ T2916] 5 locks held by kworker/u4:7/2916:
[  300.140352][ T2916]  #0: ffff88801ae5d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  300.151230][ T2916]  #1: ffffc9000ba07d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  300.161759][ T2916]  #2: ffffffff8f1c5810 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00
[  300.171155][ T2916]  #3: ffffffff8f1d2888 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  300.180978][ T2916]  #4: ffff88807aad0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690
[  300.191754][ T2916] 
[  300.191754][ T2916] stack backtrace:
[  300.197624][ T2916] CPU: 1 PID: 2916 Comm: kworker/u4:7 Not tainted syzkaller #0
[  300.205157][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  300.215199][ T2916] Workqueue: netns cleanup_net
[  300.219972][ T2916] Call Trace:
[  300.223246][ T2916]  <TASK>
[  300.226164][ T2916]  dump_stack_lvl+0x18c/0x250
[  300.230827][ T2916]  ? load_image+0x420/0x420
[  300.235325][ T2916]  ? show_regs_print_info+0x20/0x20
[  300.240536][ T2916]  ? print_circular_bug+0x12b/0x1a0
[  300.245728][ T2916]  check_noncircular+0x2fc/0x400
[  300.250656][ T2916]  ? print_deadlock_bug+0x5d0/0x5d0
[  300.255843][ T2916]  ? lockdep_lock+0xf5/0x230
[  300.260426][ T2916]  ? _find_first_zero_bit+0xd6/0x100
[  300.265706][ T2916]  __lock_acquire+0x3a07/0x7eb0
[  300.270555][ T2916]  ? verify_lock_unused+0x140/0x140
[  300.275746][ T2916]  ? verify_lock_unused+0x140/0x140
[  300.280933][ T2916]  ? __up_read+0x2b8/0x6b0
[  300.285341][ T2916]  lock_acquire+0x19e/0x420
[  300.289852][ T2916]  ? team_del_slave+0x31/0x1b0
[  300.294617][ T2916]  ? __might_sleep+0xe0/0xe0
[  300.299200][ T2916]  ? read_lock_is_recursive+0x20/0x20
[  300.304567][ T2916]  __mutex_lock+0x135/0xc80
[  300.309064][ T2916]  ? team_del_slave+0x31/0x1b0
[  300.313821][ T2916]  ? __mutex_lock+0x30d/0xc80
[  300.318499][ T2916]  ? team_del_slave+0x31/0x1b0
[  300.323252][ T2916]  ? mutex_lock_nested+0x20/0x20
[  300.328181][ T2916]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  300.333811][ T2916]  team_del_slave+0x31/0x1b0
[  300.338392][ T2916]  team_device_event+0x297/0xa30
[  300.343324][ T2916]  notifier_call_chain+0x18f/0x380
[  300.348432][ T2916]  unregister_netdevice_many_notify+0x1037/0x1910
[  300.354849][ T2916]  ? unregister_netdevice_many+0x20/0x20
[  300.360479][ T2916]  ? kernfs_remove_by_name_ns+0x117/0x150
[  300.366194][ T2916]  ? __lock_acquire+0x7eb0/0x7eb0
[  300.371211][ T2916]  unregister_netdevice_queue+0x2e9/0x330
[  300.376928][ T2916]  ? list_netdevice+0x730/0x730
[  300.381774][ T2916]  ? kernfs_remove_by_name_ns+0x117/0x150
[  300.387485][ T2916]  _cfg80211_unregister_wdev+0x16d/0x580
[  300.393111][ T2916]  ieee80211_remove_interfaces+0x4b3/0x690
[  300.398910][ T2916]  ? ieee80211_do_stop+0x2030/0x2030
[  300.404183][ T2916]  ? rcu_is_watching+0x15/0xb0
[  300.408945][ T2916]  ieee80211_unregister_hw+0x5d/0x2a0
[  300.414312][ T2916]  mac80211_hwsim_del_radio+0x289/0x480
[  300.419856][ T2916]  ? rhashtable_remove_fast+0xc00/0xc00
[  300.425400][ T2916]  hwsim_exit_net+0x58d/0x650
[  300.430067][ T2916]  ? hwsim_init_net+0x90/0x90
[  300.434736][ T2916]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  300.440530][ T2916]  cleanup_net+0x6f7/0xb00
[  300.444937][ T2916]  ? ops_free_list+0x3b0/0x3b0
[  300.449691][ T2916]  ? _raw_spin_unlock_irq+0x23/0x50
[  300.454881][ T2916]  ? process_scheduled_works+0x975/0x1600
[  300.460592][ T2916]  ? process_scheduled_works+0x975/0x1600
[  300.466303][ T2916]  process_scheduled_works+0xa60/0x1600
[  300.471849][ T2916]  ? worker_attach_to_pool+0x370/0x370
[  300.477302][ T2916]  ? assign_work+0x3cc/0x5d0
[  300.481884][ T2916]  worker_thread+0xa5e/0xfe0
[  300.486481][ T2916]  kthread+0x2fa/0x390
[  300.490536][ T2916]  ? pr_cont_work+0x550/0x550
[  300.495201][ T2916]  ? kthread_blkcg+0xd0/0xd0
[  300.499777][ T2916]  ret_from_fork+0x48/0x80
[  300.504189][ T2916]  ? kthread_blkcg+0xd0/0xd0
[  300.508766][ T2916]  ret_from_fork_asm+0x11/0x20
[  300.513526][ T2916]  </TASK>
[  300.519390][T10849] Node 0 DMA32: 1712*4kB (UME) 1169*8kB (UME) 761*16kB (UM) 456*32kB (UME) 318*64kB (UME) 198*128kB (UME) 46*256kB (UME) 26*512kB (UME) 23*1024kB (UME) 14*2048kB (UM) 309*4096kB (M) = 1431640kB
[  300.539084][ T2916] mac80211_hwsim hwsim7 ..ãc¤± (unregistering): left promiscuous mode
[  300.539105][ T2916] mac80211_hwsim hwsim7 ..ãc¤± (unregistering): left allmulticast mode
[  300.557601][ T2916] team0: Port device ..ãc¤± removed
[  300.566743][T10849] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  300.578770][T10849] Node 1 Normal: 144*4kB (UME) 54*8kB (UME) 46*16kB (UME) 24*32kB (UME) 16*64kB (UE) 9*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 947*4096kB (M) = 3888464kB
[  300.598251][T10849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  300.608162][T10849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  300.618162][T10849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  300.636956][T10849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  300.646620][T10849] 59243 total pagecache pages
[  300.651327][T10849] 0 pages in swap cache
[  300.656576][T10849] Free swap  = 124996kB
[  300.660808][T10849] Total swap = 124996kB
[  300.665413][T10849] 2097051 pages RAM
[  300.669245][T10849] 0 pages HighMem/MovableOnly
[  300.674243][T10849] 421118 pages reserved
[  300.681432][T10885] netlink: 'syz.1.1815': attribute type 10 has an invalid length.
[  300.689529][T10885] nla_validate_range_unsigned: 60 callbacks suppressed
[  300.689543][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.704322][T10849] 0 pages cma reserved
[  300.712887][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.739134][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.748103][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.769051][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.778369][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.786989][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.794988][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.803005][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.811100][T10885] netlink: 'syz.1.1815': attribute type 11 has an invalid length.
[  300.825452][T10885] netlink: 'syz.1.1815': attribute type 4 has an invalid length.
[  300.833268][T10885] netlink: 'syz.1.1815': attribute type 5 has an invalid length.
[  300.841039][T10885] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.1815'.
[  300.869693][ T2916] hsr_slave_0: left promiscuous mode
[  300.878981][T10883] delete_channel: no stack
[  300.886990][ T2916] veth0_macvtap: left promiscuous mode
[  300.892596][ T2916] veth1_vlan: left allmulticast mode
[  300.909793][ T2916] veth1_vlan: left promiscuous mode
[  300.987070][ T2916] geneve1 (unregistering): left promiscuous mode
[  300.996381][ T2916] geneve1 (unregistering): left allmulticast mode
[  301.005130][ T2916] team0 (unregistering): Port device geneve1 removed
[  301.148524][ T2916] team_slave_1 (unregistering): left promiscuous mode
[  301.155389][ T2916] team_slave_1 (unregistering): left allmulticast mode
[  301.162791][ T2916] team0 (unregistering): Port device team_slave_1 removed