last executing test programs:

8.715214859s ago: executing program 4 (id=3081):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48)
socket$kcm(0xa, 0x5, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
socket$kcm(0x10, 0x3, 0x10)

6.969015115s ago: executing program 4 (id=3094):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d2, 0x4, @perf_config_ext={0x4, 0x8}, 0x4, 0x800000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1')
r3 = socket$kcm(0x2, 0x2, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r3, 0x11, 0x68, &(0x7f00000005c0), 0x4)
close(r3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0, 0x50, 0x0, 0x0, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xd3, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700"], &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="9e36d448b36e48d2e10400000000", 0x0, 0xc, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$sock_attach_bpf(r5, 0x84, 0x12, &(0x7f0000000040)=r1, 0x4)
socket$kcm(0x2c, 0x3, 0x0)
r7 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x13, 0x0, 0x4)
write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x81000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x4305, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x40000)
sendmsg$tipc(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffbffff, 0x0, @perf_config_ext={0x0, 0x6}, 0xb040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0)
close(r9)
socket$kcm(0x23, 0x5, 0x0)

6.618684546s ago: executing program 4 (id=3098):
socketpair(0xa, 0x3, 0x6800, &(0x7f0000000400))

6.375039685s ago: executing program 4 (id=3102):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x106, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0, 0x200000000000000}, 0x38)

6.21974193s ago: executing program 4 (id=3105):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4880)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x448100, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

5.763087964s ago: executing program 4 (id=3108):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000730000000000"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0x2, 0x2, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x800})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

4.04929986s ago: executing program 3 (id=3128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}]}, 0x94)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))

3.569379385s ago: executing program 3 (id=3133):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r2}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)
sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, &(0x7f0000000380)}, 0x8880)

3.332114063s ago: executing program 3 (id=3136):
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51", 0x23}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

3.159899988s ago: executing program 3 (id=3139):
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x410001, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x5, 0x0, 0xe, 0x0, 0x5, 0x80001, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x21, 0x2, 0xfffffff8, 0x7, 0x66, 0x7, 0xf, 0x0, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x306)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000880), 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) (fail_nth: 2)

2.987914334s ago: executing program 0 (id=3140):
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x410001, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x8002, 0x0, 0x0, 0x0, 0x46fa, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x5, 0x0, 0xe, 0x0, 0x5, 0x81240, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x6}, 0x21, 0x2, 0xfffffff8, 0x7, 0x66, 0x7, 0xf, 0x0, 0x7}, r0, 0x10, 0xffffffffffffffff, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000880), 0x12)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085faffff0d00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x1, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xee87}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48)

2.365841414s ago: executing program 0 (id=3143):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x10000000, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
close(r3)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xe)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

2.259900507s ago: executing program 3 (id=3145):
perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000300), 0x0}, 0x20)
r4 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="1dcf31408ee997f05ce24e14799969cbca4adf90b40f8bfcbe976b916fd8127b7291beb0569c3e716c")
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x3, 0xa, 0x1, 0x98, 0x0, 0xfffffffffffff42c, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xb41c, 0x1, @perf_config_ext={0x12, 0x80000001}, 0x0, 0x6, 0x9, 0x5, 0xffffffffffffffc0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x1}, r4, 0xc, r1, 0x6)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000", @ANYRES32, @ANYBLOB="00000000000000002c00000000000000180000000000000000000000000000009500000000000000950000000000000079905023dc5a746f69aa41ab294fbd52e6874cefa2317023e7358c57fdce21bc454dcc43767c0e73743afbc75a67c277a3ee9c5858c6ec3f29546c671f4146c003ab83adf8a4b1f1a54f920c191359c1461c23f361546ef61f85d19644bbbc8ff232697bafc3d136461162afc3a963ceee3e436a05"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r5, 0x0, 0x0}, 0x10)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.134918151s ago: executing program 2 (id=3147):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @empty, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11, 0xb, &(0x7f0000000640), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f0000000480)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x7}, 0x10200, 0x2, 0xfffffffe, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.999216866s ago: executing program 0 (id=3149):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x4008804)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20b2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x3, 0x4, 0x9}, 0x0, 0xfffffffffffffffd, r2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r6, 0x0, 0x0, 0xff76, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
close(r0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x2000000)
socket$kcm(0x2, 0x200000000000006, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000500)=ANY=[@ANYRES32=r8, @ANYRES32=r1, @ANYRES8, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32, @ANYRESHEX=r7], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x110805, 0x0, 0x200, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0x39, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653bb7019", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x21, 0x2, 0xa)

1.907139538s ago: executing program 1 (id=3151):
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}], 0x38}, 0x8000)
sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f00000020c0)}, {&(0x7f0000000f00)="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", 0x728}, {0x0}, {0x0}, {&(0x7f0000001d80)="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", 0x1000}], 0x6}, 0x0)
r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000380)=0x7)
socketpair(0x10, 0x3, 0xe, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c0000000000000000000000080000001c"], 0x38}, 0x2000004)

1.708936035s ago: executing program 2 (id=3152):
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x6}, 0x8100, 0xc8, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03f50000000060007538e486dd630ace2212102900fe800000000000"], 0xcfa4)

1.531875291s ago: executing program 2 (id=3153):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0xb, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x15, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r1})
openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x80, 0x0}, 0x4000040)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0xb, &(0x7f0000000100), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003d000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1.504147272s ago: executing program 1 (id=3154):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="2e00000710008102b78cc358f86515e00000000025000000e3bd6efb4400490009002e0010000000ba8000051201", 0x2e}], 0x1}, 0x0)

1.356769946s ago: executing program 1 (id=3155):
socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
socketpair(0x1, 0x5, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0xcfa4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, 0x0, 0x44)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bccb58d1f00000000000000000000000080000000620000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000ad000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

807.202214ms ago: executing program 1 (id=3156):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}]}, 0x94)
socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0))

561.098562ms ago: executing program 2 (id=3157):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10)
bpf$ITER_CREATE(0xb, 0x0, 0x0) (async)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa000000, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, 0x101}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x29, 0x39, "43b6a6b2aa"}], 0x18}, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)

477.619475ms ago: executing program 1 (id=3158):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4880)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000), 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x448100, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

376.018388ms ago: executing program 2 (id=3159):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x10000000, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe}, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
close(r3)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xe)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})

375.409968ms ago: executing program 0 (id=3160):
r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)

313.08613ms ago: executing program 1 (id=3161):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x43, &(0x7f0000000000), 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xe, 0x0, &(0x7f0000000240), &(0x7f0000000280)='syzkaller\x00', 0xa14a, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x7ff, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000001000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4], &(0x7f0000001040)=[{0x1, 0x1, 0xc, 0x2}, {0x3, 0x4, 0x8}, {0x1, 0x1, 0x5, 0x9}, {0x5, 0x2, 0xc, 0x7}, {0x0, 0x5, 0xd, 0x7}, {0x5, 0x5, 0xc}, {0x0, 0x2, 0x0, 0x9}], 0x10, 0x80}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
recvmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x1, 0x84)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01009dd3e4e0000000000c0000000ce4ffff0600000005f2ffffff"], 0x0, 0x2b, 0x0, 0x5, 0x7}, 0x28)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce81120329"], 0xfdef)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0xe, 0x80, 0xff, 0x0, 0x6, 0x44640, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x7c7, 0x2}, 0x1089, 0x0, 0xffff0001, 0x5, 0x2, 0x4, 0xfaf9}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

250.661652ms ago: executing program 0 (id=3162):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$kcm(0x10, 0x2, 0x0)

215.844433ms ago: executing program 3 (id=3163):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='-4', @ANYRESDEC=r6], 0xc)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=""/31, 0x0, 0x1f, 0x0, 0x92, 0x10000}, 0x28)
socket$kcm(0x11, 0x200000000000003, 0x300)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r7, 0x0, 0x5, 0x1}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="030000000400000004000084fa6cb20000000000", @ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES16=r9, @ANYBLOB="7de441615aeb450fbc3821e5faec9eb5e59fddb8e99897b9c972b98e629e41e70f01e4db8825b5c2165481514c0dd08784f09f4fe418ccbf81153aedcae47456936925e8a267419d7827e7893b4e11c9b6fe98ab57ac99915c1fba54e705563b61bc34aba8f038d22cf5bcc816b16ff3d9929171bc15cfb43b421462c2e9d5627bcb9910ec6fa33a703ac8acc8dc4a5af424189f26ac92e8f0bc6aca3b8e4460ab8de867d6"], 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bdf7b333c4d438b8e39cc8102aac43e4c0e32826862d7a78efa4adcd84094a8ca5eec9605e73100cebba75a413241df18feb623b3c17ad05fb82b31a6ed6f3719f0f3cfc4e559b6e9ca083383dade85e8eec148d33d165091c74fb085094a283b87c25f65f978fc9e609b3edaf038cee2d18d69c482540cf164be873af4a42b3a1f956612196f62618685f6e3bfd57e5db630986a25850e1e8da22910e1def699577904a0a520221f4d6346d", 0xd9}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

13.55956ms ago: executing program 2 (id=3164):
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @empty, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11, 0xb, &(0x7f0000000640), 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000004)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x7}, 0x10200, 0x2, 0xfffffffe, 0x3, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=3165):
r0 = socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x4, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x8132, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x400, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x9c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4523, 0x0, 0x8004, 0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x2, 0x28}, 0x50)
r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a0400", 0x14}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r10})
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)

kernel console output (not intermixed with test programs):

P: 0033:0x7faaf00fbe59
[  405.164151][T11576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.183754][T11576] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  405.192185][T11576] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  405.200164][T11576] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  405.208136][T11576] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  405.216105][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.224076][T11576] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  405.232094][T11576]  </TASK>
[  405.878881][T11586] netlink: 'syz.0.2368': attribute type 1 has an invalid length.
[  406.252144][T11597] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2369'.
[  406.628741][T11605] netlink: 'syz.4.2373': attribute type 21 has an invalid length.
[  407.193548][T11616] netlink: 'syz.3.2376': attribute type 15 has an invalid length.
[  407.252514][T11616] netlink: 'syz.3.2376': attribute type 7 has an invalid length.
[  407.301285][T11616] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2376'.
[  407.334422][T11618] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2377'.
[  407.884445][T11634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2383'.
[  408.120909][T11636] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2384'.
[  409.566995][T11676] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2399'.
[  409.736602][T11680] netlink: 'syz.4.2401': attribute type 25 has an invalid length.
[  409.783449][T11680] netlink: 'syz.4.2401': attribute type 29 has an invalid length.
[  409.852574][T11685] FAULT_INJECTION: forcing a failure.
[  409.852574][T11685] name failslab, interval 1, probability 0, space 0, times 0
[  409.939964][T11685] CPU: 1 PID: 11685 Comm: syz.0.2403 Not tainted syzkaller #0
[  409.947465][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  409.957539][T11685] Call Trace:
[  409.960820][T11685]  <TASK>
[  409.963749][T11685]  dump_stack_lvl+0x188/0x250
[  409.968422][T11685]  ? show_regs_print_info+0x20/0x20
[  409.973609][T11685]  ? load_image+0x400/0x400
[  409.978113][T11685]  ? rcu_lock_release+0x5/0x20
[  409.982869][T11685]  should_fail+0x38c/0x4c0
[  409.987277][T11685]  should_failslab+0x5/0x20
[  409.991772][T11685]  slab_pre_alloc_hook+0x51/0xc0
[  409.996702][T11685]  ? batadv_tt_local_event+0x53/0x6f0
[  410.002063][T11685]  kmem_cache_alloc+0x3d/0x290
[  410.006812][T11685]  ? batadv_tt_hash_find+0x614/0x6d0
[  410.012086][T11685]  batadv_tt_local_event+0x53/0x6f0
[  410.017272][T11685]  ? batadv_tt_global_hash_find+0x50/0x50
[  410.022984][T11685]  ? batadv_tt_global_entry_put+0x140/0x140
[  410.028869][T11685]  batadv_tt_local_remove+0x119/0x230
[  410.034234][T11685]  batadv_interface_set_mac_addr+0x2ee/0x510
[  410.040204][T11685]  ? batadv_interface_set_rx_mode+0x10/0x10
[  410.046083][T11685]  ? raw_notifier_call_chain+0x143/0x160
[  410.051709][T11685]  dev_set_mac_address+0x27a/0x400
[  410.056812][T11685]  ? dev_pre_changeaddr_notify+0x120/0x120
[  410.062699][T11685]  ? rwsem_write_trylock+0x135/0x1c0
[  410.067975][T11685]  ? clear_nonspinnable+0x60/0x60
[  410.073001][T11685]  dev_set_mac_address_user+0x2d/0x50
[  410.078363][T11685]  do_setlink+0x8b0/0x3d60
[  410.082778][T11685]  ? nlmsg_parse_deprecated_strict+0x110/0x110
[  410.088919][T11685]  ? stack_trace_save+0xa6/0xf0
[  410.093755][T11685]  ? stack_trace_snprint+0xf0/0xf0
[  410.098907][T11685]  ? __nla_validate_parse+0x1fe0/0x2940
[  410.104440][T11685]  ? __kasan_kmalloc+0xcc/0xf0
[  410.109207][T11685]  ? __nla_validate+0x50/0x50
[  410.113886][T11685]  ? validate_linkmsg+0x3db/0x4c0
[  410.118902][T11685]  rtnl_newlink+0x1658/0x1a50
[  410.123582][T11685]  ? rtnl_setlink+0x500/0x500
[  410.128245][T11685]  ? mark_lock+0x94/0x320
[  410.132561][T11685]  ? __lock_acquire+0x13bc/0x7d10
[  410.137607][T11685]  ? kmem_cache_free+0x8f/0x210
[  410.142505][T11685]  ? rtnl_setlink+0x500/0x500
[  410.147172][T11685]  rtnetlink_rcv_msg+0x844/0xf30
[  410.152105][T11685]  ? rtnetlink_bind+0x80/0x80
[  410.156775][T11685]  ? __local_bh_enable_ip+0x136/0x1c0
[  410.162143][T11685]  ? lockdep_hardirqs_on+0x94/0x140
[  410.167334][T11685]  ? __local_bh_enable_ip+0x136/0x1c0
[  410.172692][T11685]  ? _local_bh_enable+0xa0/0xa0
[  410.177538][T11685]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  410.182772][T11685]  ? dev_queue_xmit+0x20/0x20
[  410.187433][T11685]  ? memcpy+0x3c/0x60
[  410.191401][T11685]  ? __copy_skb_header+0x3ba/0x4f0
[  410.196502][T11685]  ? __skb_clone+0x480/0x790
[  410.201083][T11685]  netlink_rcv_skb+0x1f5/0x440
[  410.205833][T11685]  ? rtnetlink_bind+0x80/0x80
[  410.210500][T11685]  ? netlink_ack+0xb50/0xb50
[  410.215086][T11685]  netlink_unicast+0x774/0x920
[  410.219845][T11685]  netlink_sendmsg+0x8ba/0xbe0
[  410.224600][T11685]  ? netlink_getsockopt+0x570/0x570
[  410.229789][T11685]  ? aa_sock_msg_perm+0x94/0x150
[  410.234714][T11685]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  410.239983][T11685]  ? security_socket_sendmsg+0x7c/0xa0
[  410.245429][T11685]  ? netlink_getsockopt+0x570/0x570
[  410.250611][T11685]  ____sys_sendmsg+0x5b7/0x8f0
[  410.255372][T11685]  ? __sys_sendmsg_sock+0x30/0x30
[  410.260390][T11685]  ? import_iovec+0x6f/0xa0
[  410.264884][T11685]  ___sys_sendmsg+0x236/0x2e0
[  410.269559][T11685]  ? __sys_sendmsg+0x2a0/0x2a0
[  410.274321][T11685]  ? vfs_write+0x8b2/0xd60
[  410.278739][T11685]  __se_sys_sendmsg+0x1af/0x290
[  410.283590][T11685]  ? __x64_sys_sendmsg+0x80/0x80
[  410.288518][T11685]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  410.294497][T11685]  ? lockdep_hardirqs_on+0x94/0x140
[  410.299689][T11685]  do_syscall_64+0x4c/0xa0
[  410.304090][T11685]  ? clear_bhb_loop+0x30/0x80
[  410.308751][T11685]  ? clear_bhb_loop+0x30/0x80
[  410.313426][T11685]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.319304][T11685] RIP: 0033:0x7f0ba54a3e59
[  410.323712][T11685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.343317][T11685] RSP: 002b:00007f0ba36fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  410.351722][T11685] RAX: ffffffffffffffda RBX: 00007f0ba571cfa0 RCX: 00007f0ba54a3e59
[  410.359682][T11685] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003
[  410.367638][T11685] RBP: 00007f0ba36fd090 R08: 0000000000000000 R09: 0000000000000000
[  410.375604][T11685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  410.383560][T11685] R13: 00007f0ba571d038 R14: 00007f0ba571cfa0 R15: 00007fff4f75e498
[  410.391533][T11685]  </TASK>
[  410.399247][T11691] netlink: 'syz.2.2402': attribute type 3 has an invalid length.
[  410.428239][T11691] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2402'.
[  410.553323][T11688] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2404'.
[  410.689700][T11704] FAULT_INJECTION: forcing a failure.
[  410.689700][T11704] name failslab, interval 1, probability 0, space 0, times 0
[  410.710954][T11704] CPU: 1 PID: 11704 Comm: syz.4.2408 Not tainted syzkaller #0
[  410.718463][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  410.728533][T11704] Call Trace:
[  410.731825][T11704]  <TASK>
[  410.734790][T11704]  dump_stack_lvl+0x188/0x250
[  410.739496][T11704]  ? show_regs_print_info+0x20/0x20
[  410.744981][T11704]  ? load_image+0x400/0x400
[  410.749505][T11704]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  410.755500][T11704]  ? lockdep_hardirqs_on+0x94/0x140
[  410.760716][T11704]  should_fail+0x38c/0x4c0
[  410.765158][T11704]  should_failslab+0x5/0x20
[  410.769674][T11704]  slab_pre_alloc_hook+0x51/0xc0
[  410.774639][T11704]  ? skb_clone+0x1bd/0x350
[  410.779072][T11704]  kmem_cache_alloc+0x3d/0x290
[  410.784031][T11704]  skb_clone+0x1bd/0x350
[  410.788290][T11704]  bpf_clone_redirect+0x15f/0x470
[  410.793506][T11704]  ? ktime_get+0x247/0x270
[  410.797941][T11704]  bpf_prog_ed198f4594f8762b+0x19/0x8cc
[  410.803675][T11704]  bpf_test_run+0x2a8/0x800
[  410.808216][T11704]  ? convert___skb_to_skb+0x4c0/0x4c0
[  410.813610][T11704]  ? eth_get_headlen+0x200/0x200
[  410.818549][T11704]  ? __build_skb+0x1e2/0x2e0
[  410.823128][T11704]  ? convert___skb_to_skb+0x3d/0x4c0
[  410.828488][T11704]  bpf_prog_test_run_skb+0x98b/0x10b0
[  410.833937][T11704]  ? cpu_online+0x60/0x60
[  410.838274][T11704]  bpf_prog_test_run+0x31e/0x390
[  410.843220][T11704]  __sys_bpf+0x5a5/0x6f0
[  410.847460][T11704]  ? bpf_link_show_fdinfo+0x380/0x380
[  410.852835][T11704]  ? vtime_user_exit+0x2c8/0x3e0
[  410.857778][T11704]  __x64_sys_bpf+0x78/0x90
[  410.862186][T11704]  do_syscall_64+0x4c/0xa0
[  410.866589][T11704]  ? clear_bhb_loop+0x30/0x80
[  410.871251][T11704]  ? clear_bhb_loop+0x30/0x80
[  410.875917][T11704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.881794][T11704] RIP: 0033:0x7faaf00fbe59
[  410.886194][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.905815][T11704] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  410.914302][T11704] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  410.922263][T11704] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  410.930222][T11704] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  410.938176][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.946131][T11704] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  410.954100][T11704]  </TASK>
[  413.293638][T11688] team0: Port device team_slave_0 removed
[  413.658955][T11720] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2415'.
[  414.139149][T11738] FAULT_INJECTION: forcing a failure.
[  414.139149][T11738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.186950][T11738] CPU: 1 PID: 11738 Comm: syz.2.2423 Not tainted syzkaller #0
[  414.194462][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  414.204550][T11738] Call Trace:
[  414.207851][T11738]  <TASK>
[  414.210802][T11738]  dump_stack_lvl+0x188/0x250
[  414.215504][T11738]  ? show_regs_print_info+0x20/0x20
[  414.220743][T11738]  ? load_image+0x400/0x400
[  414.225268][T11738]  ? __lock_acquire+0x7d10/0x7d10
[  414.230303][T11738]  should_fail+0x38c/0x4c0
[  414.234731][T11738]  _copy_from_user+0x2e/0x170
[  414.239432][T11738]  iovec_from_user+0x142/0x370
[  414.244236][T11738]  __import_iovec+0x70/0x490
[  414.248870][T11738]  import_iovec+0x6f/0xa0
[  414.253233][T11738]  ___sys_sendmsg+0x1fd/0x2e0
[  414.257932][T11738]  ? __sys_sendmsg+0x2a0/0x2a0
[  414.262736][T11738]  __se_sys_sendmsg+0x1af/0x290
[  414.267600][T11738]  ? __x64_sys_sendmsg+0x80/0x80
[  414.272538][T11738]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  414.278568][T11738]  ? lockdep_hardirqs_on+0x94/0x140
[  414.283804][T11738]  do_syscall_64+0x4c/0xa0
[  414.288233][T11738]  ? clear_bhb_loop+0x30/0x80
[  414.292924][T11738]  ? clear_bhb_loop+0x30/0x80
[  414.297623][T11738]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  414.303533][T11738] RIP: 0033:0x7f64e6215e59
[  414.307971][T11738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.327583][T11738] RSP: 002b:00007f64e446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.335995][T11738] RAX: ffffffffffffffda RBX: 00007f64e648efa0 RCX: 00007f64e6215e59
[  414.343968][T11738] RDX: 0000000000048000 RSI: 00002000000002c0 RDI: 000000000000000a
[  414.351948][T11738] RBP: 00007f64e446f090 R08: 0000000000000000 R09: 0000000000000000
[  414.359942][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.367912][T11738] R13: 00007f64e648f038 R14: 00007f64e648efa0 R15: 00007fff2b230a28
[  414.375930][T11738]  </TASK>
[  414.701688][T11762] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2431'.
[  414.876126][T11772] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2435'.
[  414.904717][T11772] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[  415.525065][T11797] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2444'.
[  415.815487][T11816] netlink: 'syz.3.2450': attribute type 10 has an invalid length.
[  415.847643][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2450'.
[  415.899118][T11816] batman_adv: batadv0: Adding interface: virt_wifi0
[  415.933553][T11816] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  415.962083][T11816] batman_adv: batadv0: Interface activated: virt_wifi0
[  416.526147][T11843] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2461'.
[  417.223802][T11876] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2477'.
[  417.376647][T11883] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2478'.
[  418.019148][T11905] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2486'.
[  418.304050][T11922] FAULT_INJECTION: forcing a failure.
[  418.304050][T11922] name failslab, interval 1, probability 0, space 0, times 0
[  418.383088][T11922] CPU: 0 PID: 11922 Comm: syz.1.2494 Not tainted syzkaller #0
[  418.390697][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  418.400782][T11922] Call Trace:
[  418.404091][T11922]  <TASK>
[  418.407045][T11922]  dump_stack_lvl+0x188/0x250
[  418.411765][T11922]  ? show_regs_print_info+0x20/0x20
[  418.417003][T11922]  ? load_image+0x400/0x400
[  418.421553][T11922]  ? __might_sleep+0xf0/0xf0
[  418.426169][T11922]  ? __lock_acquire+0x7d10/0x7d10
[  418.431214][T11922]  ? perf_trace_lock+0xe4/0x390
[  418.436104][T11922]  should_fail+0x38c/0x4c0
[  418.440579][T11922]  should_failslab+0x5/0x20
[  418.445106][T11922]  slab_pre_alloc_hook+0x51/0xc0
[  418.450060][T11922]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  418.456407][T11922]  ? proc_alloc_inode+0x19/0xa0
[  418.461272][T11922]  kmem_cache_alloc+0x3d/0x290
[  418.466054][T11922]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  418.472409][T11922]  proc_alloc_inode+0x19/0xa0
[  418.477098][T11922]  ? proc_invalidate_siblings_dcache+0x650/0x650
[  418.483449][T11922]  new_inode_pseudo+0x5f/0x210
[  418.488249][T11922]  new_inode+0x25/0x1c0
[  418.492431][T11922]  ? __lock_acquire+0x7d10/0x7d10
[  418.497491][T11922]  proc_pid_make_inode+0x20/0x1c0
[  418.502554][T11922]  proc_pident_instantiate+0x69/0x2b0
[  418.507963][T11922]  proc_pident_lookup+0x1c6/0x260
[  418.513023][T11922]  __lookup_slow+0x29d/0x410
[  418.517650][T11922]  ? lookup_one_len+0x2d0/0x2d0
[  418.522561][T11922]  ? down_read+0x1aa/0x2e0
[  418.527087][T11922]  lookup_slow+0x53/0x70
[  418.531351][T11922]  walk_component+0x319/0x460
[  418.536063][T11922]  link_path_walk+0x665/0xd70
[  418.540802][T11922]  ? handle_lookup_down+0x130/0x130
[  418.546019][T11922]  ? percpu_counter_add_batch+0x13b/0x160
[  418.551782][T11922]  path_openat+0x28d/0x2fa0
[  418.556381][T11922]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  418.562227][T11922]  ? do_filp_open+0x410/0x410
[  418.566931][T11922]  ? perf_trace_lock+0xe4/0x390
[  418.571989][T11922]  ? trace_event_raw_event_lock+0x270/0x270
[  418.577920][T11922]  do_filp_open+0x1e2/0x410
[  418.582553][T11922]  ? vfs_tmpfile+0x300/0x300
[  418.587313][T11922]  ? noop_direct_IO+0x10/0x10
[  418.592030][T11922]  ? _raw_spin_unlock+0x24/0x40
[  418.596983][T11922]  ? alloc_fd+0x598/0x630
[  418.601348][T11922]  do_sys_openat2+0x150/0x4b0
[  418.606044][T11922]  ? __lock_acquire+0x7d10/0x7d10
[  418.611093][T11922]  ? do_sys_open+0xe0/0xe0
[  418.615533][T11922]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  418.621537][T11922]  ? lock_chain_count+0x20/0x20
[  418.626402][T11922]  ? vtime_user_exit+0x2c8/0x3e0
[  418.631364][T11922]  __x64_sys_openat+0x135/0x160
[  418.636246][T11922]  do_syscall_64+0x4c/0xa0
[  418.640670][T11922]  ? clear_bhb_loop+0x30/0x80
[  418.645373][T11922]  ? clear_bhb_loop+0x30/0x80
[  418.650090][T11922]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  418.656011][T11922] RIP: 0033:0x7f853793968e
[  418.660444][T11922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  418.680055][T11922] RSP: 002b:00007f8535bd1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  418.688500][T11922] RAX: ffffffffffffffda RBX: 00007f8535bd26c0 RCX: 00007f853793968e
[  418.696486][T11922] RDX: 0000000000000002 RSI: 00007f8535bd1f90 RDI: ffffffffffffff9c
[  418.704476][T11922] RBP: 00007f8535bd2090 R08: 0000000000000000 R09: 0000000000000000
[  418.712463][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  418.720452][T11922] R13: 00007f8537bf2038 R14: 00007f8537bf1fa0 R15: 00007ffd6e7e52c8
[  418.728488][T11922]  </TASK>
[  418.744302][T11928] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2493'.
[  419.426783][T11961] netlink: 'syz.2.2504': attribute type 10 has an invalid length.
[  419.428381][T11956] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2505'.
[  419.517403][T11961] device geneve0 entered promiscuous mode
[  419.850501][T11961] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  419.865227][T11956] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  419.885731][T11956] CPU: 0 PID: 11956 Comm: syz.3.2505 Not tainted syzkaller #0
[  419.893256][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  419.903350][T11956] Call Trace:
[  419.906671][T11956]  <TASK>
[  419.909645][T11956]  dump_stack_lvl+0x188/0x250
[  419.914387][T11956]  ? show_regs_print_info+0x20/0x20
[  419.919623][T11956]  ? load_image+0x400/0x400
[  419.924202][T11956]  sysfs_warn_dup+0x8a/0xa0
[  419.928750][T11956]  sysfs_do_create_link_sd+0xc0/0x110
[  419.934600][T11956]  device_add+0x7f6/0x1000
[  419.939087][T11956]  wiphy_register+0x1e81/0x2c30
[  419.944027][T11956]  ? cfg80211_event_work+0x40/0x40
[  419.949164][T11956]  ? minstrel_ht_alloc+0x808/0x980
[  419.954326][T11956]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  419.960430][T11956]  ieee80211_register_hw+0x2aa1/0x3af0
[  419.965994][T11956]  ? ieee80211_tasklet_handler+0x20/0x20
[  419.971661][T11956]  ? rcu_is_watching+0x11/0xa0
[  419.976447][T11956]  ? memset+0x1e/0x40
[  419.980436][T11956]  ? hrtimer_init+0x10c/0x220
[  419.985136][T11956]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  419.990933][T11956]  hwsim_new_radio_nl+0xa6f/0xc40
[  419.996017][T11956]  genl_rcv_msg+0xcea/0xf90
[  420.000569][T11956]  ? genl_bind+0x380/0x380
[  420.005031][T11956]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  420.010240][T11956]  ? verify_lock_unused+0x140/0x140
[  420.015460][T11956]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  420.021211][T11956]  ? perf_trace_lock+0x301/0x390
[  420.026170][T11956]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  420.032740][T11956]  netlink_rcv_skb+0x1f5/0x440
[  420.037514][T11956]  ? genl_bind+0x380/0x380
[  420.041945][T11956]  ? netlink_ack+0xb50/0xb50
[  420.046551][T11956]  ? __lock_acquire+0x7d10/0x7d10
[  420.051604][T11956]  ? down_read+0x1aa/0x2e0
[  420.056037][T11956]  genl_rcv+0x24/0x40
[  420.060023][T11956]  netlink_unicast+0x774/0x920
[  420.064832][T11956]  netlink_sendmsg+0x8ba/0xbe0
[  420.069639][T11956]  ? netlink_getsockopt+0x570/0x570
[  420.074861][T11956]  ? aa_sock_msg_perm+0x94/0x150
[  420.079813][T11956]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  420.085100][T11956]  ? security_socket_sendmsg+0x7c/0xa0
[  420.090573][T11956]  ? netlink_getsockopt+0x570/0x570
[  420.095773][T11956]  ____sys_sendmsg+0x5b7/0x8f0
[  420.100581][T11956]  ? __sys_sendmsg_sock+0x30/0x30
[  420.105644][T11956]  ? import_iovec+0x6f/0xa0
[  420.110178][T11956]  ___sys_sendmsg+0x236/0x2e0
[  420.114894][T11956]  ? __sys_sendmsg+0x2a0/0x2a0
[  420.119715][T11956]  ? trace_event_raw_event_lock+0x270/0x270
[  420.125709][T11956]  __se_sys_sendmsg+0x1af/0x290
[  420.130580][T11956]  ? __x64_sys_sendmsg+0x80/0x80
[  420.135521][T11956]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  420.141556][T11956]  ? lockdep_hardirqs_on+0x94/0x140
[  420.146775][T11956]  do_syscall_64+0x4c/0xa0
[  420.151197][T11956]  ? clear_bhb_loop+0x30/0x80
[  420.155875][T11956]  ? clear_bhb_loop+0x30/0x80
[  420.160565][T11956]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  420.166462][T11956] RIP: 0033:0x7f5a116efe59
[  420.170976][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  420.190591][T11956] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  420.199018][T11956] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  420.206996][T11956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  420.214968][T11956] RBP: 00007f5a11785d6f R08: 0000000000000000 R09: 0000000000000000
[  420.222939][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.230911][T11956] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  420.238939][T11956]  </TASK>
[  420.285510][T11965] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2508'.
[  422.240614][T12005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.262034][T12005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.356889][T12012] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2525'.
[  422.370364][T12005] bridge0: port 3(batadv0) entered disabled state
[  422.457863][T12005] device batadv0 left promiscuous mode
[  422.562384][T12005] bridge0: port 3(batadv0) entered disabled state
[  422.654907][T12008] netlink: 'syz.0.2524': attribute type 10 has an invalid length.
[  422.744248][T12008] device geneve0 entered promiscuous mode
[  422.792557][T12008] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  422.802860][T12009] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2523'.
[  422.819133][T12012] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  422.842783][T12012] CPU: 0 PID: 12012 Comm: syz.2.2525 Not tainted syzkaller #0
[  422.850301][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  422.860402][T12012] Call Trace:
[  422.863724][T12012]  <TASK>
[  422.866700][T12012]  dump_stack_lvl+0x188/0x250
[  422.871425][T12012]  ? show_regs_print_info+0x20/0x20
[  422.876672][T12012]  ? load_image+0x400/0x400
[  422.881239][T12012]  sysfs_warn_dup+0x8a/0xa0
[  422.885780][T12012]  sysfs_do_create_link_sd+0xc0/0x110
[  422.891208][T12012]  device_add+0x7f6/0x1000
[  422.895740][T12012]  wiphy_register+0x1e81/0x2c30
[  422.900678][T12012]  ? cfg80211_event_work+0x40/0x40
[  422.905828][T12012]  ? minstrel_ht_alloc+0x808/0x980
[  422.910987][T12012]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  422.917195][T12012]  ieee80211_register_hw+0x2aa1/0x3af0
[  422.922717][T12012]  ? ieee80211_tasklet_handler+0x20/0x20
[  422.928381][T12012]  ? rcu_is_watching+0x11/0xa0
[  422.933163][T12012]  ? memset+0x1e/0x40
[  422.937157][T12012]  ? hrtimer_init+0x10c/0x220
[  422.941849][T12012]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  422.947608][T12012]  hwsim_new_radio_nl+0xa6f/0xc40
[  422.952833][T12012]  genl_rcv_msg+0xcea/0xf90
[  422.957353][T12012]  ? genl_bind+0x380/0x380
[  422.961866][T12012]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  422.967065][T12012]  ? verify_lock_unused+0x140/0x140
[  422.972271][T12012]  ? perf_trace_lock_acquire+0xed/0x3e0
[  422.977826][T12012]  ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0
[  422.984410][T12012]  ? perf_trace_lock+0x301/0x390
[  422.989350][T12012]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  422.995887][T12012]  netlink_rcv_skb+0x1f5/0x440
[  423.000654][T12012]  ? genl_bind+0x380/0x380
[  423.005116][T12012]  ? netlink_ack+0xb50/0xb50
[  423.009712][T12012]  ? __lock_acquire+0x7d10/0x7d10
[  423.014749][T12012]  ? down_read+0x1aa/0x2e0
[  423.019169][T12012]  genl_rcv+0x24/0x40
[  423.023146][T12012]  netlink_unicast+0x774/0x920
[  423.027920][T12012]  netlink_sendmsg+0x8ba/0xbe0
[  423.032694][T12012]  ? netlink_getsockopt+0x570/0x570
[  423.037894][T12012]  ? aa_sock_msg_perm+0x94/0x150
[  423.042833][T12012]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  423.048116][T12012]  ? security_socket_sendmsg+0x7c/0xa0
[  423.053571][T12012]  ? netlink_getsockopt+0x570/0x570
[  423.058765][T12012]  ____sys_sendmsg+0x5b7/0x8f0
[  423.063548][T12012]  ? __sys_sendmsg_sock+0x30/0x30
[  423.068586][T12012]  ? import_iovec+0x6f/0xa0
[  423.073112][T12012]  ___sys_sendmsg+0x236/0x2e0
[  423.077812][T12012]  ? __sys_sendmsg+0x2a0/0x2a0
[  423.082599][T12012]  ? trace_event_raw_event_lock+0x270/0x270
[  423.088535][T12012]  __se_sys_sendmsg+0x1af/0x290
[  423.093401][T12012]  ? __x64_sys_sendmsg+0x80/0x80
[  423.098440][T12012]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  423.104572][T12012]  ? lockdep_hardirqs_on+0x94/0x140
[  423.109777][T12012]  do_syscall_64+0x4c/0xa0
[  423.114190][T12012]  ? clear_bhb_loop+0x30/0x80
[  423.118860][T12012]  ? clear_bhb_loop+0x30/0x80
[  423.123534][T12012]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  423.129425][T12012] RIP: 0033:0x7f64e6215e59
[  423.133844][T12012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  423.153445][T12012] RSP: 002b:00007f64e446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  423.161855][T12012] RAX: ffffffffffffffda RBX: 00007f64e648efa0 RCX: 00007f64e6215e59
[  423.169819][T12012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  423.177783][T12012] RBP: 00007f64e62abd6f R08: 0000000000000000 R09: 0000000000000000
[  423.185750][T12012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  423.193803][T12012] R13: 00007f64e648f038 R14: 00007f64e648efa0 R15: 00007fff2b230a28
[  423.201826][T12012]  </TASK>
[  423.834322][T12048] FAULT_INJECTION: forcing a failure.
[  423.834322][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.856527][T12043] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2538'.
[  423.910691][T12048] CPU: 1 PID: 12048 Comm: syz.2.2535 Not tainted syzkaller #0
[  423.918197][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  423.928265][T12048] Call Trace:
[  423.931558][T12048]  <TASK>
[  423.934511][T12048]  dump_stack_lvl+0x188/0x250
[  423.939207][T12048]  ? show_regs_print_info+0x20/0x20
[  423.944423][T12048]  ? load_image+0x400/0x400
[  423.948957][T12048]  ? __lock_acquire+0x7d10/0x7d10
[  423.954011][T12048]  should_fail+0x38c/0x4c0
[  423.958457][T12048]  _copy_from_iter+0x40d/0x1170
[  423.963317][T12048]  ? __lock_acquire+0x7d10/0x7d10
[  423.968350][T12048]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  423.973731][T12048]  ? __virt_addr_valid+0x3c6/0x470
[  423.978840][T12048]  ? __phys_addr_symbol+0x2b/0x70
[  423.983851][T12048]  ? __check_object_size+0x30c/0x410
[  423.989128][T12048]  netlink_sendmsg+0x758/0xbe0
[  423.993887][T12048]  ? netlink_getsockopt+0x570/0x570
[  423.999074][T12048]  ? aa_sock_msg_perm+0x94/0x150
[  424.004011][T12048]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  424.009293][T12048]  ? security_socket_sendmsg+0x7c/0xa0
[  424.014740][T12048]  ? netlink_getsockopt+0x570/0x570
[  424.019924][T12048]  ____sys_sendmsg+0x5b7/0x8f0
[  424.024684][T12048]  ? __sys_sendmsg_sock+0x30/0x30
[  424.029699][T12048]  ? import_iovec+0x6f/0xa0
[  424.034209][T12048]  ___sys_sendmsg+0x236/0x2e0
[  424.038878][T12048]  ? __sys_sendmsg+0x2a0/0x2a0
[  424.043637][T12048]  ? vfs_write+0x8b2/0xd60
[  424.048056][T12048]  __se_sys_sendmsg+0x1af/0x290
[  424.052904][T12048]  ? __x64_sys_sendmsg+0x80/0x80
[  424.057842][T12048]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  424.063835][T12048]  ? lockdep_hardirqs_on+0x94/0x140
[  424.069026][T12048]  do_syscall_64+0x4c/0xa0
[  424.073521][T12048]  ? clear_bhb_loop+0x30/0x80
[  424.078362][T12048]  ? clear_bhb_loop+0x30/0x80
[  424.083027][T12048]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.089342][T12048] RIP: 0033:0x7f64e6215e59
[  424.093778][T12048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.113370][T12048] RSP: 002b:00007f64e446f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.121795][T12048] RAX: ffffffffffffffda RBX: 00007f64e648efa0 RCX: 00007f64e6215e59
[  424.129751][T12048] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003
[  424.137705][T12048] RBP: 00007f64e446f090 R08: 0000000000000000 R09: 0000000000000000
[  424.145751][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.153706][T12048] R13: 00007f64e648f038 R14: 00007f64e648efa0 R15: 00007fff2b230a28
[  424.161681][T12048]  </TASK>
[  424.252724][T12061] netlink: 'syz.4.2541': attribute type 10 has an invalid length.
[  424.280653][T12061] device geneve0 entered promiscuous mode
[  424.407438][T12061] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  424.679363][T12074] FAULT_INJECTION: forcing a failure.
[  424.679363][T12074] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  424.772548][T12074] CPU: 0 PID: 12074 Comm: syz.0.2547 Not tainted syzkaller #0
[  424.780073][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  424.790155][T12074] Call Trace:
[  424.793460][T12074]  <TASK>
[  424.796414][T12074]  dump_stack_lvl+0x188/0x250
[  424.801132][T12074]  ? show_regs_print_info+0x20/0x20
[  424.806366][T12074]  ? load_image+0x400/0x400
[  424.810911][T12074]  ? __lock_acquire+0x7d10/0x7d10
[  424.815988][T12074]  ? aa_label_sk_perm+0x3d0/0x530
[  424.821052][T12074]  should_fail+0x38c/0x4c0
[  424.825521][T12074]  _copy_from_user+0x2e/0x170
[  424.830237][T12074]  tcp_setsockopt+0x647/0x1e90
[  424.835050][T12074]  ? tcp_set_window_clamp+0x1a0/0x1a0
[  424.840447][T12074]  ? mutex_lock_io_nested+0x60/0x60
[  424.845673][T12074]  ? __lock_acquire+0x7d10/0x7d10
[  424.851151][T12074]  ? sock_common_setsockopt+0x32/0xb0
[  424.856554][T12074]  ? sock_common_recvmsg+0x1c0/0x1c0
[  424.861869][T12074]  smc_setsockopt+0x1b7/0xa30
[  424.866562][T12074]  ? smc_shutdown+0x5d0/0x5d0
[  424.871251][T12074]  ? aa_sock_opt_perm+0x74/0x100
[  424.876202][T12074]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  424.881743][T12074]  ? security_socket_setsockopt+0x7a/0xa0
[  424.887459][T12074]  ? smc_shutdown+0x5d0/0x5d0
[  424.892136][T12074]  __sys_setsockopt+0x2bf/0x3d0
[  424.896999][T12074]  __x64_sys_setsockopt+0xb1/0xc0
[  424.902028][T12074]  do_syscall_64+0x4c/0xa0
[  424.906443][T12074]  ? clear_bhb_loop+0x30/0x80
[  424.911117][T12074]  ? clear_bhb_loop+0x30/0x80
[  424.915789][T12074]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.921674][T12074] RIP: 0033:0x7f0ba54a3e59
[  424.926083][T12074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.945683][T12074] RSP: 002b:00007f0ba36fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  424.954100][T12074] RAX: ffffffffffffffda RBX: 00007f0ba571cfa0 RCX: 00007f0ba54a3e59
[  424.962068][T12074] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000003
[  424.970033][T12074] RBP: 00007f0ba36fd090 R08: 0000000000000004 R09: 0000000000000000
[  424.977994][T12074] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001
[  424.985959][T12074] R13: 00007f0ba571d038 R14: 00007f0ba571cfa0 R15: 00007fff4f75e498
[  424.993958][T12074]  </TASK>
[  425.781420][T12123] netlink: 'syz.4.2562': attribute type 39 has an invalid length.
[  426.257825][T12144] netlink: 64519 bytes leftover after parsing attributes in process `syz.1.2571'.
[  426.643085][   T26] Bluetooth: hci0: command 0x0406 tx timeout
[  427.327467][T12204] FAULT_INJECTION: forcing a failure.
[  427.327467][T12204] name failslab, interval 1, probability 0, space 0, times 0
[  427.383214][T12204] CPU: 1 PID: 12204 Comm: syz.4.2591 Not tainted syzkaller #0
[  427.390732][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  427.400813][T12204] Call Trace:
[  427.404102][T12204]  <TASK>
[  427.407047][T12204]  dump_stack_lvl+0x188/0x250
[  427.411747][T12204]  ? show_regs_print_info+0x20/0x20
[  427.416963][T12204]  ? load_image+0x400/0x400
[  427.421487][T12204]  ? __might_sleep+0xf0/0xf0
[  427.426092][T12204]  ? __lock_acquire+0x7d10/0x7d10
[  427.431136][T12204]  ? mark_lock+0x94/0x320
[  427.435485][T12204]  should_fail+0x38c/0x4c0
[  427.439929][T12204]  should_failslab+0x5/0x20
[  427.444446][T12204]  slab_pre_alloc_hook+0x51/0xc0
[  427.449398][T12204]  __kmalloc+0x6b/0x330
[  427.453567][T12204]  ? tomoyo_realpath_from_path+0x118/0x610
[  427.459396][T12204]  tomoyo_realpath_from_path+0x118/0x610
[  427.465061][T12204]  tomoyo_path_number_perm+0x242/0x660
[  427.470544][T12204]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  427.476013][T12204]  ? perf_trace_lock+0xe4/0x390
[  427.480868][T12204]  ? ktime_get+0x7b/0x270
[  427.485198][T12204]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  427.491179][T12204]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  427.497336][T12204]  security_file_ioctl+0x6c/0xa0
[  427.502268][T12204]  __se_sys_ioctl+0x48/0x170
[  427.506849][T12204]  do_syscall_64+0x4c/0xa0
[  427.511254][T12204]  ? clear_bhb_loop+0x30/0x80
[  427.515918][T12204]  ? clear_bhb_loop+0x30/0x80
[  427.520585][T12204]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  427.526464][T12204] RIP: 0033:0x7faaf00fbe59
[  427.530872][T12204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.550470][T12204] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  427.558876][T12204] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  427.566837][T12204] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009
[  427.574799][T12204] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  427.582928][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.590896][T12204] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  427.598868][T12204]  </TASK>
[  427.751288][T12204] ERROR: Out of memory at tomoyo_realpath_from_path.
[  429.067584][T12271] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.2615'.
[  430.469006][T12331] netlink: 'syz.4.2635': attribute type 10 has an invalid length.
[  432.705289][T12331] bond0: (slave geneve0): Releasing backup interface
[  432.729037][T12330] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2636'.
[  432.751497][T12330] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  432.769784][T12330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.383171][T12366] netlink: 'syz.3.2648': attribute type 21 has an invalid length.
[  433.714494][T12379] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2652'.
[  433.874072][T12387] netlink: 'syz.0.2654': attribute type 29 has an invalid length.
[  433.890231][T12387] netlink: 'syz.0.2654': attribute type 29 has an invalid length.
[  433.928783][T12392] netlink: 'syz.0.2654': attribute type 29 has an invalid length.
[  434.123126][T12402] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2660'.
[  434.189977][T12402] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  434.246257][T12402] CPU: 1 PID: 12402 Comm: syz.3.2660 Not tainted syzkaller #0
[  434.253772][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  434.263847][T12402] Call Trace:
[  434.267143][T12402]  <TASK>
[  434.270106][T12402]  dump_stack_lvl+0x188/0x250
[  434.274815][T12402]  ? show_regs_print_info+0x20/0x20
[  434.280036][T12402]  ? load_image+0x400/0x400
[  434.284677][T12402]  sysfs_warn_dup+0x8a/0xa0
[  434.289310][T12402]  sysfs_do_create_link_sd+0xc0/0x110
[  434.294712][T12402]  device_add+0x7f6/0x1000
[  434.299179][T12402]  wiphy_register+0x1e81/0x2c30
[  434.304097][T12402]  ? cfg80211_event_work+0x40/0x40
[  434.309236][T12402]  ? minstrel_ht_alloc+0x808/0x980
[  434.314496][T12402]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  434.320615][T12402]  ieee80211_register_hw+0x2aa1/0x3af0
[  434.326307][T12402]  ? ieee80211_tasklet_handler+0x20/0x20
[  434.331976][T12402]  ? rcu_is_watching+0x11/0xa0
[  434.336765][T12402]  ? memset+0x1e/0x40
[  434.340762][T12402]  ? hrtimer_init+0x10c/0x220
[  434.345461][T12402]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  434.351218][T12402]  hwsim_new_radio_nl+0xa6f/0xc40
[  434.356271][T12402]  genl_rcv_msg+0xcea/0xf90
[  434.360794][T12402]  ? genl_bind+0x380/0x380
[  434.365233][T12402]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  434.370439][T12402]  ? verify_lock_unused+0x140/0x140
[  434.375642][T12402]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  434.381368][T12402]  ? perf_trace_lock+0x301/0x390
[  434.386309][T12402]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  434.392870][T12402]  netlink_rcv_skb+0x1f5/0x440
[  434.397639][T12402]  ? genl_bind+0x380/0x380
[  434.402146][T12402]  ? netlink_ack+0xb50/0xb50
[  434.406734][T12402]  ? __lock_acquire+0x7d10/0x7d10
[  434.411768][T12402]  ? down_read+0x1aa/0x2e0
[  434.416187][T12402]  genl_rcv+0x24/0x40
[  434.420165][T12402]  netlink_unicast+0x774/0x920
[  434.425023][T12402]  netlink_sendmsg+0x8ba/0xbe0
[  434.429796][T12402]  ? netlink_getsockopt+0x570/0x570
[  434.434993][T12402]  ? aa_sock_msg_perm+0x94/0x150
[  434.439938][T12402]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  434.445216][T12402]  ? security_socket_sendmsg+0x7c/0xa0
[  434.450675][T12402]  ? netlink_getsockopt+0x570/0x570
[  434.455871][T12402]  ____sys_sendmsg+0x5b7/0x8f0
[  434.460651][T12402]  ? __sys_sendmsg_sock+0x30/0x30
[  434.465697][T12402]  ? import_iovec+0x6f/0xa0
[  434.470204][T12402]  ___sys_sendmsg+0x236/0x2e0
[  434.474894][T12402]  ? __sys_sendmsg+0x2a0/0x2a0
[  434.479676][T12402]  ? trace_event_raw_event_lock+0x270/0x270
[  434.485610][T12402]  __se_sys_sendmsg+0x1af/0x290
[  434.490466][T12402]  ? __x64_sys_sendmsg+0x80/0x80
[  434.495398][T12402]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  434.501401][T12402]  ? lockdep_hardirqs_on+0x94/0x140
[  434.506608][T12402]  do_syscall_64+0x4c/0xa0
[  434.511020][T12402]  ? clear_bhb_loop+0x30/0x80
[  434.515691][T12402]  ? clear_bhb_loop+0x30/0x80
[  434.520363][T12402]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  434.526253][T12402] RIP: 0033:0x7f5a116efe59
[  434.530671][T12402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.550278][T12402] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.558694][T12402] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  434.566659][T12402] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  434.574622][T12402] RBP: 00007f5a11785d6f R08: 0000000000000000 R09: 0000000000000000
[  434.582586][T12402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.590573][T12402] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  434.598564][T12402]  </TASK>
[  434.865778][T12412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2663'.
[  434.883647][T12419] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2664'.
[  434.974487][T12421] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2665'.
[  435.495234][T12446] netlink: 'syz.0.2674': attribute type 39 has an invalid length.
[  436.528742][T12477] netlink: 'syz.2.2683': attribute type 46 has an invalid length.
[  436.541074][T12477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2683'.
[  436.678802][T12482] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2685'.
[  436.713147][T12482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  436.777965][T12482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  437.912953][T12543] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2709'.
[  437.923132][T12543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  438.070317][T12547] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2711'.
[  439.164692][T12591] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2726'.
[  439.198748][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  439.290130][T12591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.344185][T12603] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2729'.
[  439.468170][T12619] netlink: 'syz.0.2735': attribute type 10 has an invalid length.
[  439.510866][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2735'.
[  439.586028][T12627] FAULT_INJECTION: forcing a failure.
[  439.586028][T12627] name failslab, interval 1, probability 0, space 0, times 0
[  439.631087][T12632] FAULT_INJECTION: forcing a failure.
[  439.631087][T12632] name failslab, interval 1, probability 0, space 0, times 0
[  439.644202][T12632] CPU: 0 PID: 12632 Comm: syz.4.2740 Not tainted syzkaller #0
[  439.651677][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  439.661778][T12632] Call Trace:
[  439.665064][T12632]  <TASK>
[  439.668002][T12632]  dump_stack_lvl+0x188/0x250
[  439.672690][T12632]  ? lock_chain_count+0x20/0x20
[  439.677549][T12632]  ? show_regs_print_info+0x20/0x20
[  439.682750][T12632]  ? load_image+0x400/0x400
[  439.687263][T12632]  ? sctp_get_port_local+0x332/0x1510
[  439.692652][T12632]  should_fail+0x38c/0x4c0
[  439.697087][T12632]  should_failslab+0x5/0x20
[  439.701592][T12632]  slab_pre_alloc_hook+0x51/0xc0
[  439.706537][T12632]  ? sctp_get_port_local+0x6fc/0x1510
[  439.711920][T12632]  kmem_cache_alloc+0x3d/0x290
[  439.716700][T12632]  sctp_get_port_local+0x6fc/0x1510
[  439.721903][T12632]  ? __lock_acquire+0x7d10/0x7d10
[  439.726948][T12632]  ? sctp_do_bind+0x990/0x990
[  439.731640][T12632]  ? sctp_bind_addr_match+0x249/0x260
[  439.737025][T12632]  sctp_do_bind+0x555/0x990
[  439.741543][T12632]  sctp_connect_new_asoc+0x266/0x6a0
[  439.746840][T12632]  ? __sctp_connect+0xd80/0xd80
[  439.751779][T12632]  ? __local_bh_enable_ip+0x136/0x1c0
[  439.757171][T12632]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  439.762725][T12632]  ? security_sctp_bind_connect+0x85/0xb0
[  439.768810][T12632]  sctp_sendmsg+0x164a/0x2a30
[  439.773520][T12632]  ? aa_sk_perm+0x7dc/0x910
[  439.778112][T12632]  ? sctp_getsockopt+0x8a0/0x8a0
[  439.783061][T12632]  ? aa_af_perm+0x340/0x340
[  439.787568][T12632]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  439.794003][T12632]  ? sock_rps_record_flow+0x17/0x3b0
[  439.799303][T12632]  ? inet_sendmsg+0xe5/0x2f0
[  439.803908][T12632]  ? inet_send_prepare+0x260/0x260
[  439.809114][T12632]  ____sys_sendmsg+0x5b7/0x8f0
[  439.813904][T12632]  ? __sys_sendmsg_sock+0x30/0x30
[  439.818965][T12632]  ? import_iovec+0x6f/0xa0
[  439.823485][T12632]  ___sys_sendmsg+0x236/0x2e0
[  439.828196][T12632]  ? __sys_sendmsg+0x2a0/0x2a0
[  439.832994][T12632]  ? trace_event_raw_event_lock+0x270/0x270
[  439.838897][T12632]  ? vfs_write+0x8b2/0xd60
[  439.843352][T12632]  __se_sys_sendmsg+0x1af/0x290
[  439.848220][T12632]  ? __x64_sys_sendmsg+0x80/0x80
[  439.853169][T12632]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  439.859185][T12632]  ? lockdep_hardirqs_on+0x94/0x140
[  439.864396][T12632]  do_syscall_64+0x4c/0xa0
[  439.868818][T12632]  ? clear_bhb_loop+0x30/0x80
[  439.873498][T12632]  ? clear_bhb_loop+0x30/0x80
[  439.878179][T12632]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  439.884078][T12632] RIP: 0033:0x7faaf00fbe59
[  439.888499][T12632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.908113][T12632] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.916547][T12632] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  439.924530][T12632] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000003
[  439.932514][T12632] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  439.940491][T12632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.948513][T12632] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  439.956514][T12632]  </TASK>
[  439.959549][T12627] CPU: 1 PID: 12627 Comm: syz.3.2738 Not tainted syzkaller #0
[  439.967021][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  439.968149][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.977088][T12627] Call Trace:
[  439.977097][T12627]  <TASK>
[  439.977106][T12627]  dump_stack_lvl+0x188/0x250
[  439.977131][T12627]  ? show_regs_print_info+0x20/0x20
[  439.977150][T12627]  ? load_image+0x400/0x400
[  439.990880][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  439.994240][T12627]  ? memset+0x1e/0x40
[  439.994267][T12627]  should_fail+0x38c/0x4c0
[  440.018528][T12627]  should_failslab+0x5/0x20
[  440.023132][T12627]  slab_pre_alloc_hook+0x51/0xc0
[  440.028077][T12627]  ? __build_skb+0x26/0x2e0
[  440.032572][T12627]  kmem_cache_alloc+0x3d/0x290
[  440.037327][T12627]  __build_skb+0x26/0x2e0
[  440.041660][T12627]  build_skb+0x1e/0x170
[  440.045811][T12627]  bpf_prog_test_run_skb+0x260/0x10b0
[  440.051175][T12627]  ? __fget_files+0x40f/0x480
[  440.055848][T12627]  ? cpu_online+0x60/0x60
[  440.060165][T12627]  bpf_prog_test_run+0x31e/0x390
[  440.065095][T12627]  __sys_bpf+0x5a5/0x6f0
[  440.069358][T12627]  ? bpf_link_show_fdinfo+0x380/0x380
[  440.074823][T12627]  __x64_sys_bpf+0x78/0x90
[  440.079228][T12627]  do_syscall_64+0x4c/0xa0
[  440.083644][T12627]  ? clear_bhb_loop+0x30/0x80
[  440.088307][T12627]  ? clear_bhb_loop+0x30/0x80
[  440.092969][T12627]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  440.098848][T12627] RIP: 0033:0x7f5a116efe59
[  440.103251][T12627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.122846][T12627] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  440.131253][T12627] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  440.139213][T12627] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  440.147168][T12627] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  440.155125][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.163083][T12627] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  440.171069][T12627]  </TASK>
[  440.248569][T12636] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2742'.
[  441.264235][T12666] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2748'.
[  441.329738][T12672] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2756'.
[  441.414272][T12675] netlink: 'syz.3.2758': attribute type 3 has an invalid length.
[  441.422723][T12675] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2758'.
[  441.619189][T12687] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2763'.
[  441.662429][T12685] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2761'.
[  441.824116][T12694] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2765'.
[  442.066282][T12701] IPv6: …: Disabled Multicast RS
[  442.517438][T12724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.062134][T12786] netlink: 'syz.1.2801': attribute type 3 has an invalid length.
[  444.271289][T12799] __nla_validate_parse: 5 callbacks suppressed
[  444.271306][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2806'.
[  445.424496][T12838] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2816'.
[  445.535833][T12840] FAULT_INJECTION: forcing a failure.
[  445.535833][T12840] name failslab, interval 1, probability 0, space 0, times 0
[  445.611057][T12840] CPU: 1 PID: 12840 Comm: syz.4.2817 Not tainted syzkaller #0
[  445.618571][T12840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  445.628634][T12840] Call Trace:
[  445.631919][T12840]  <TASK>
[  445.634855][T12840]  dump_stack_lvl+0x188/0x250
[  445.639548][T12840]  ? show_regs_print_info+0x20/0x20
[  445.644762][T12840]  ? load_image+0x400/0x400
[  445.649288][T12840]  should_fail+0x38c/0x4c0
[  445.653730][T12840]  should_failslab+0x5/0x20
[  445.658255][T12840]  slab_pre_alloc_hook+0x51/0xc0
[  445.663199][T12840]  ? skb_clone+0x1bd/0x350
[  445.667624][T12840]  kmem_cache_alloc+0x3d/0x290
[  445.672400][T12840]  skb_clone+0x1bd/0x350
[  445.676657][T12840]  bpf_clone_redirect+0x15f/0x470
[  445.681698][T12840]  bpf_prog_208b094576c80b22+0x56/0x1b8
[  445.687248][T12840]  ? __kprobes_text_end+0x190ac0/0x190ac0
[  445.692977][T12840]  ? lockdep_hardirqs_on+0x94/0x140
[  445.698186][T12840]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  445.704361][T12840]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  445.710612][T12840]  ? seqcount_lockdep_reader_access+0x196/0x1d0
[  445.716864][T12840]  ? ktime_get_real_ts64+0x440/0x440
[  445.722175][T12840]  ? read_lock_is_recursive+0x10/0x10
[  445.727563][T12840]  ? __cant_sleep+0x220/0x220
[  445.732257][T12840]  ? ktime_get+0x247/0x270
[  445.736693][T12840]  bpf_test_run+0x2a8/0x800
[  445.741224][T12840]  ? convert___skb_to_skb+0x4c0/0x4c0
[  445.746610][T12840]  ? eth_get_headlen+0x200/0x200
[  445.751558][T12840]  ? __build_skb+0x1e2/0x2e0
[  445.756164][T12840]  ? convert___skb_to_skb+0x3d/0x4c0
[  445.761467][T12840]  bpf_prog_test_run_skb+0x98b/0x10b0
[  445.766869][T12840]  ? cpu_online+0x60/0x60
[  445.771206][T12840]  bpf_prog_test_run+0x31e/0x390
[  445.776159][T12840]  __sys_bpf+0x5a5/0x6f0
[  445.780421][T12840]  ? bpf_link_show_fdinfo+0x380/0x380
[  445.785812][T12840]  ? vtime_user_exit+0x2c8/0x3e0
[  445.790765][T12840]  __x64_sys_bpf+0x78/0x90
[  445.795187][T12840]  do_syscall_64+0x4c/0xa0
[  445.799609][T12840]  ? clear_bhb_loop+0x30/0x80
[  445.804303][T12840]  ? clear_bhb_loop+0x30/0x80
[  445.808994][T12840]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  445.814897][T12840] RIP: 0033:0x7faaf00fbe59
[  445.819324][T12840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.838939][T12840] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  445.847389][T12840] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  445.855467][T12840] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a
[  445.863454][T12840] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  445.871436][T12840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  445.879413][T12840] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  445.887411][T12840]  </TASK>
[  448.557421][T12846] netlink: 'syz.1.2819': attribute type 10 has an invalid length.
[  448.802491][T12859] netlink: 'syz.1.2824': attribute type 10 has an invalid length.
[  449.723790][T12894] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2836'.
[  449.792184][T12894] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2836'.
[  449.829571][T12901] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2838'.
[  449.857006][T12901] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2838'.
[  449.937367][T12909] FAULT_INJECTION: forcing a failure.
[  449.937367][T12909] name failslab, interval 1, probability 0, space 0, times 0
[  449.950439][T12909] CPU: 1 PID: 12909 Comm: syz.4.2842 Not tainted syzkaller #0
[  449.957917][T12909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  449.967984][T12909] Call Trace:
[  449.971272][T12909]  <TASK>
[  449.974214][T12909]  dump_stack_lvl+0x188/0x250
[  449.978912][T12909]  ? show_regs_print_info+0x20/0x20
[  449.984125][T12909]  ? load_image+0x400/0x400
[  449.988638][T12909]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  449.994550][T12909]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  450.000460][T12909]  ? _raw_spin_unlock+0x40/0x40
[  450.005329][T12909]  should_fail+0x38c/0x4c0
[  450.009762][T12909]  should_failslab+0x5/0x20
[  450.014276][T12909]  slab_pre_alloc_hook+0x51/0xc0
[  450.019223][T12909]  ? skb_clone+0x1bd/0x350
[  450.023629][T12909]  kmem_cache_alloc+0x3d/0x290
[  450.028382][T12909]  skb_clone+0x1bd/0x350
[  450.032619][T12909]  ? __neigh_event_send+0xe63/0x1470
[  450.037894][T12909]  __neigh_event_send+0xe70/0x1470
[  450.042994][T12909]  ? rcu_read_lock_held+0x40/0x40
[  450.048014][T12909]  neigh_resolve_output+0x1b3/0x6a0
[  450.053239][T12909]  ? __ipv6_neigh_lookup_noref+0x61d/0x7d0
[  450.059042][T12909]  ip6_finish_output2+0x108c/0x1510
[  450.064246][T12909]  ? nf_hook+0x360/0x360
[  450.068495][T12909]  ? ip6_finish_output+0x64c/0x7d0
[  450.073618][T12909]  ip6_send_skb+0x1b9/0x360
[  450.078127][T12909]  icmp6_send+0x133e/0x1990
[  450.082646][T12909]  ? icmpv6_push_pending_frames+0x450/0x450
[  450.088537][T12909]  ? __local_bh_enable_ip+0xd7/0x1c0
[  450.093900][T12909]  ? __local_bh_enable_ip+0x136/0x1c0
[  450.099278][T12909]  ? ip6_neigh_lookup+0x393/0x470
[  450.104295][T12909]  ? rt6_uncached_list_del+0x200/0x200
[  450.109745][T12909]  ip6_link_failure+0x35/0x490
[  450.114499][T12909]  ip_tunnel_xmit+0x1a6b/0x2280
[  450.119349][T12909]  ? slab_free_freelist_hook+0xea/0x170
[  450.124902][T12909]  ? kmem_cache_free+0x14c/0x210
[  450.129827][T12909]  ? skb_release_head_state+0x1e7/0x240
[  450.135365][T12909]  ? ip4_dst_hoplimit+0x2a0/0x2a0
[  450.140384][T12909]  ? gre_build_header+0x25b/0x8c0
[  450.145403][T12909]  gre_tap_xmit+0x4f9/0x6e0
[  450.149896][T12909]  dev_hard_start_xmit+0x2a5/0x7e0
[  450.155011][T12909]  sch_direct_xmit+0x25a/0x4b0
[  450.159771][T12909]  ? mrp_pdu_append_vecattr_event+0x1590/0x1590
[  450.165997][T12909]  ? verify_lock_unused+0xe0/0x140
[  450.171110][T12909]  __dev_queue_xmit+0x179f/0x2f80
[  450.176136][T12909]  ? rawv6_send_hdrinc+0xd7a/0x1690
[  450.181325][T12909]  ? dev_queue_xmit+0x20/0x20
[  450.185990][T12909]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  450.191964][T12909]  ? lock_chain_count+0x20/0x20
[  450.196804][T12909]  ? __ipv6_neigh_lookup_noref+0x61d/0x7d0
[  450.202596][T12909]  ? ip6_finish_output2+0xcb6/0x1510
[  450.207865][T12909]  ? ip6_finish_output2+0xe80/0x1510
[  450.213138][T12909]  ip6_finish_output2+0x1051/0x1510
[  450.218329][T12909]  ? nf_hook+0x360/0x360
[  450.222568][T12909]  rawv6_send_hdrinc+0xd7a/0x1690
[  450.227590][T12909]  ? rawv6_probe_proto_opt+0x300/0x300
[  450.233041][T12909]  ? rcu_lock_release+0x20/0x20
[  450.237873][T12909]  ? fl6_sock_lookup+0xc0/0xc0
[  450.242631][T12909]  rawv6_sendmsg+0x11b1/0x1700
[  450.247394][T12909]  ? compat_rawv6_ioctl+0x60/0x60
[  450.252428][T12909]  ? aa_af_perm+0x340/0x340
[  450.256923][T12909]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  450.263336][T12909]  ? sock_rps_record_flow+0x17/0x3b0
[  450.268613][T12909]  ? inet_sendmsg+0x78/0x2f0
[  450.273188][T12909]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  450.278459][T12909]  ? security_socket_sendmsg+0x7c/0xa0
[  450.283903][T12909]  ? inet_send_prepare+0x260/0x260
[  450.289001][T12909]  ____sys_sendmsg+0x5b7/0x8f0
[  450.293788][T12909]  ? __sys_sendmsg_sock+0x30/0x30
[  450.298808][T12909]  ? import_iovec+0x6f/0xa0
[  450.303304][T12909]  ___sys_sendmsg+0x236/0x2e0
[  450.307978][T12909]  ? __sys_sendmsg+0x2a0/0x2a0
[  450.312747][T12909]  ? vfs_write+0x8b2/0xd60
[  450.317173][T12909]  __se_sys_sendmsg+0x1af/0x290
[  450.322015][T12909]  ? __x64_sys_sendmsg+0x80/0x80
[  450.326941][T12909]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  450.332924][T12909]  ? lockdep_hardirqs_on+0x94/0x140
[  450.338204][T12909]  do_syscall_64+0x4c/0xa0
[  450.342605][T12909]  ? clear_bhb_loop+0x30/0x80
[  450.347269][T12909]  ? clear_bhb_loop+0x30/0x80
[  450.351937][T12909]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  450.357831][T12909] RIP: 0033:0x7faaf00fbe59
[  450.362253][T12909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  450.381943][T12909] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  450.390369][T12909] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  450.398335][T12909] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  450.406296][T12909] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  450.414257][T12909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  450.422212][T12909] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  450.430193][T12909]  </TASK>
[  452.998290][T12913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2841'.
[  453.112499][T12933] netlink: 'syz.0.2847': attribute type 4 has an invalid length.
[  453.120276][T12933] netlink: 'syz.0.2847': attribute type 5 has an invalid length.
[  453.129292][T12933] netlink: 'syz.0.2847': attribute type 6 has an invalid length.
[  453.140160][T12933] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.2847'.
[  453.149748][T12933] netlink: 'syz.0.2847': attribute type 1 has an invalid length.
[  453.165256][T12933] netlink: 'syz.0.2847': attribute type 2 has an invalid length.
[  453.194647][T12936] netlink: 'syz.0.2847': attribute type 10 has an invalid length.
[  453.207911][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2847'.
[  453.253440][T12940] FAULT_INJECTION: forcing a failure.
[  453.253440][T12940] name failslab, interval 1, probability 0, space 0, times 0
[  453.296595][T12940] CPU: 1 PID: 12940 Comm: syz.2.2851 Not tainted syzkaller #0
[  453.304107][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  453.314171][T12940] Call Trace:
[  453.317464][T12940]  <TASK>
[  453.320408][T12940]  dump_stack_lvl+0x188/0x250
[  453.325108][T12940]  ? show_regs_print_info+0x20/0x20
[  453.330325][T12940]  ? load_image+0x400/0x400
[  453.334851][T12940]  ? lockdep_init_map_type+0x25d/0x900
[  453.340350][T12940]  should_fail+0x38c/0x4c0
[  453.344799][T12940]  should_failslab+0x5/0x20
[  453.349334][T12940]  slab_pre_alloc_hook+0x51/0xc0
[  453.354287][T12940]  ? __build_skb+0x26/0x2e0
[  453.358802][T12940]  kmem_cache_alloc+0x3d/0x290
[  453.363570][T12940]  __build_skb+0x26/0x2e0
[  453.367898][T12940]  build_skb+0x1e/0x170
[  453.372044][T12940]  bpf_prog_test_run_skb+0x260/0x10b0
[  453.377409][T12940]  ? __fget_files+0x40f/0x480
[  453.382078][T12940]  ? cpu_online+0x60/0x60
[  453.386394][T12940]  bpf_prog_test_run+0x31e/0x390
[  453.391427][T12940]  __sys_bpf+0x5a5/0x6f0
[  453.395680][T12940]  ? bpf_link_show_fdinfo+0x380/0x380
[  453.401039][T12940]  ? rcu_nmi_exit+0x6f/0xf0
[  453.405549][T12940]  ? vtime_user_exit+0x2c8/0x3e0
[  453.410479][T12940]  __x64_sys_bpf+0x78/0x90
[  453.414881][T12940]  do_syscall_64+0x4c/0xa0
[  453.419281][T12940]  ? clear_bhb_loop+0x30/0x80
[  453.423943][T12940]  ? clear_bhb_loop+0x30/0x80
[  453.428605][T12940]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  453.434493][T12940] RIP: 0033:0x7f64e6215e59
[  453.438904][T12940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.458494][T12940] RSP: 002b:00007f64e446f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  453.466895][T12940] RAX: ffffffffffffffda RBX: 00007f64e648efa0 RCX: 00007f64e6215e59
[  453.474867][T12940] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  453.482824][T12940] RBP: 00007f64e446f090 R08: 0000000000000000 R09: 0000000000000000
[  453.490777][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.498735][T12940] R13: 00007f64e648f038 R14: 00007f64e648efa0 R15: 00007fff2b230a28
[  453.506699][T12940]  </TASK>
[  454.118395][T12980] FAULT_INJECTION: forcing a failure.
[  454.118395][T12980] name failslab, interval 1, probability 0, space 0, times 0
[  454.169110][T12980] CPU: 1 PID: 12980 Comm: syz.3.2863 Not tainted syzkaller #0
[  454.176617][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  454.186684][T12980] Call Trace:
[  454.189968][T12980]  <TASK>
[  454.192909][T12980]  dump_stack_lvl+0x188/0x250
[  454.197602][T12980]  ? show_regs_print_info+0x20/0x20
[  454.202826][T12980]  ? load_image+0x400/0x400
[  454.207336][T12980]  ? __might_sleep+0xf0/0xf0
[  454.211928][T12980]  ? __lock_acquire+0x7d10/0x7d10
[  454.217060][T12980]  ? netlink_insert+0xe95/0x11f0
[  454.222018][T12980]  should_fail+0x38c/0x4c0
[  454.226454][T12980]  should_failslab+0x5/0x20
[  454.230964][T12980]  slab_pre_alloc_hook+0x51/0xc0
[  454.235919][T12980]  kmem_cache_alloc_node+0x47/0x2d0
[  454.241128][T12980]  ? __alloc_skb+0xf4/0x750
[  454.245650][T12980]  __alloc_skb+0xf4/0x750
[  454.249999][T12980]  netlink_sendmsg+0x654/0xbe0
[  454.254780][T12980]  ? netlink_getsockopt+0x570/0x570
[  454.259988][T12980]  ? aa_sock_msg_perm+0x94/0x150
[  454.264935][T12980]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  454.270226][T12980]  ? security_socket_sendmsg+0x7c/0xa0
[  454.275691][T12980]  ? netlink_getsockopt+0x570/0x570
[  454.280904][T12980]  ____sys_sendmsg+0x5b7/0x8f0
[  454.285692][T12980]  ? __sys_sendmsg_sock+0x30/0x30
[  454.290734][T12980]  ? import_iovec+0x6f/0xa0
[  454.295248][T12980]  ___sys_sendmsg+0x236/0x2e0
[  454.299944][T12980]  ? __sys_sendmsg+0x2a0/0x2a0
[  454.304730][T12980]  ? trace_event_raw_event_lock+0x270/0x270
[  454.310641][T12980]  ? vfs_write+0x8b2/0xd60
[  454.315101][T12980]  __se_sys_sendmsg+0x1af/0x290
[  454.319963][T12980]  ? __x64_sys_sendmsg+0x80/0x80
[  454.324903][T12980]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  454.330930][T12980]  ? lockdep_hardirqs_on+0x94/0x140
[  454.336161][T12980]  do_syscall_64+0x4c/0xa0
[  454.340584][T12980]  ? clear_bhb_loop+0x30/0x80
[  454.345257][T12980]  ? clear_bhb_loop+0x30/0x80
[  454.349944][T12980]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  454.355846][T12980] RIP: 0033:0x7f5a116efe59
[  454.360257][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.379847][T12980] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.388256][T12980] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  454.396220][T12980] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  454.404176][T12980] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  454.412130][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.420087][T12980] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  454.428058][T12980]  </TASK>
[  455.452435][T13014] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2876'.
[  455.614454][T13018] FAULT_INJECTION: forcing a failure.
[  455.614454][T13018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.664739][T13018] CPU: 0 PID: 13018 Comm: syz.3.2877 Not tainted syzkaller #0
[  455.672246][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  455.675341][T13020] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2887'.
[  455.682316][T13018] Call Trace:
[  455.682329][T13018]  <TASK>
[  455.682339][T13018]  dump_stack_lvl+0x188/0x250
[  455.682375][T13018]  ? show_regs_print_info+0x20/0x20
[  455.682395][T13018]  ? load_image+0x400/0x400
[  455.682425][T13018]  ? __lock_acquire+0x7d10/0x7d10
[  455.717058][T13018]  should_fail+0x38c/0x4c0
[  455.721485][T13018]  _copy_from_iter+0x22e/0x1170
[  455.726340][T13018]  ? __lock_acquire+0x7d10/0x7d10
[  455.731377][T13018]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  455.736754][T13018]  ? __virt_addr_valid+0x3c6/0x470
[  455.741862][T13018]  ? __phys_addr_symbol+0x2b/0x70
[  455.746961][T13018]  ? __check_object_size+0x30c/0x410
[  455.752240][T13018]  netlink_sendmsg+0x758/0xbe0
[  455.757005][T13018]  ? netlink_getsockopt+0x570/0x570
[  455.762203][T13018]  ? aa_sock_msg_perm+0x94/0x150
[  455.767131][T13018]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  455.772406][T13018]  ? security_socket_sendmsg+0x7c/0xa0
[  455.777858][T13018]  ? netlink_getsockopt+0x570/0x570
[  455.783043][T13018]  ____sys_sendmsg+0x5b7/0x8f0
[  455.787811][T13018]  ? __sys_sendmsg_sock+0x30/0x30
[  455.792839][T13018]  ? import_iovec+0x6f/0xa0
[  455.797337][T13018]  ___sys_sendmsg+0x236/0x2e0
[  455.802019][T13018]  ? __sys_sendmsg+0x2a0/0x2a0
[  455.806790][T13018]  ? trace_event_raw_event_lock+0x270/0x270
[  455.812690][T13018]  ? vfs_write+0x8b2/0xd60
[  455.817131][T13018]  __se_sys_sendmsg+0x1af/0x290
[  455.821994][T13018]  ? __x64_sys_sendmsg+0x80/0x80
[  455.826923][T13018]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  455.832910][T13018]  ? lockdep_hardirqs_on+0x94/0x140
[  455.838104][T13018]  do_syscall_64+0x4c/0xa0
[  455.842508][T13018]  ? clear_bhb_loop+0x30/0x80
[  455.847179][T13018]  ? clear_bhb_loop+0x30/0x80
[  455.851846][T13018]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  455.857728][T13018] RIP: 0033:0x7f5a116efe59
[  455.862136][T13018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.881818][T13018] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.890224][T13018] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  455.898183][T13018] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000005
[  455.906141][T13018] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  455.914100][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.922063][T13018] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  455.930041][T13018]  </TASK>
[  456.490301][T13021] chnl_net:caif_netlink_parms(): no params data found
[  456.592360][T13047] netlink: 'syz.4.2888': attribute type 10 has an invalid length.
[  456.621785][T13047] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2888'.
[  457.134832][T13054] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2890'.
[  457.393537][T13021] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.425065][T13021] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.457130][T13021] device bridge_slave_0 entered promiscuous mode
[  457.476263][T13021] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.491082][T13021] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.527052][T13021] device bridge_slave_1 entered promiscuous mode
[  457.543044][T13078] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2894'.
[  457.627580][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.642556][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.749961][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.817938][T13021] team0: Port device team_slave_0 added
[  457.838971][T13021] team0: Port device team_slave_1 added
[  457.892428][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.939376][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.958412][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  457.986167][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.000647][T13093] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2903'.
[  458.020196][ T3159] Bluetooth: hci3: command 0x0409 tx timeout
[  458.021634][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.035539][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.067874][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  458.105702][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.198846][T13021] device hsr_slave_0 entered promiscuous mode
[  458.220546][T13021] device hsr_slave_1 entered promiscuous mode
[  458.232863][T13021] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  458.265066][T13021] Cannot create hsr debugfs directory
[  458.285016][T13105] netlink: 'syz.2.2906': attribute type 19 has an invalid length.
[  458.296133][T13105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2906'.
[  458.927431][T13126] netlink: 'syz.3.2914': attribute type 21 has an invalid length.
[  458.941083][T13126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2914'.
[  458.969642][T13134] netlink: 'syz.3.2914': attribute type 7 has an invalid length.
[  460.093911][   T21] Bluetooth: hci3: command 0x041b tx timeout
[  462.025838][T13146] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2917'.
[  462.165498][ T9652] Bluetooth: hci3: command 0x040f tx timeout
[  462.433646][T13021] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  462.637197][T13021] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  462.903726][T13021] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  462.921520][T13021] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  463.088144][T13195] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2929'.
[  463.264055][T13021] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.387033][    T9] device erspan0 left promiscuous mode
[  463.406665][    T9] ¥: port 1(erspan0) entered disabled state
[  463.674213][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  463.692581][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  463.840195][T13021] 8021q: adding VLAN 0 to HW filter on device team0
[  464.211998][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  464.232430][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  464.242102][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[  464.261601][ T1268] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.268751][ T1268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  464.291295][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  464.299938][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  464.321916][ T1268] bridge0: port 2(bridge_slave_1) entered blocking state
[  464.329005][ T1268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.356262][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  464.373672][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  464.405640][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  464.464060][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  464.475059][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  464.525340][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  464.553894][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  464.565170][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  464.610170][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  464.620230][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  464.656426][T13021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  464.672606][T13021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  464.680509][T13228] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2942'.
[  464.697717][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  464.706545][  T841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  464.859821][T13236] netlink: 'syz.3.2946': attribute type 10 has an invalid length.
[  464.882521][T13236] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2946'.
[  465.544045][T13236] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  465.571282][T13236] batman_adv: batadv0: Removing interface: virt_wifi0
[  465.889588][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  465.898787][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  465.954267][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.344921][T13259] netlink: 'syz.4.2953': attribute type 3 has an invalid length.
[  466.356281][T13259] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2953'.
[  466.402614][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  466.443549][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  466.613525][T13021] device veth0_vlan entered promiscuous mode
[  466.635374][T13273] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2957'.
[  466.648712][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  466.682308][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  466.738658][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  466.781899][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  466.905886][T13021] device veth1_vlan entered promiscuous mode
[  466.967972][T13021] device veth0_macvtap entered promiscuous mode
[  467.022907][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  467.048361][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  467.112260][    T9] device hsr_slave_0 left promiscuous mode
[  467.227653][    T9] device hsr_slave_1 left promiscuous mode
[  467.243335][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.306326][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.456173][    T9] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  467.481693][    T9] batman_adv: batadv0: Removing interface: virt_wifi0
[  467.566633][    T9] bridge0: port 5(bond0) entered disabled state
[  467.590710][    T9] bridge0: port 4(team0) entered disabled state
[  467.626809][    T9] device batadv0 left promiscuous mode
[  467.642529][    T9] bridge0: port 3(batadv0) entered disabled state
[  467.670253][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.694857][    T9] device bridge_slave_0 left promiscuous mode
[  467.709844][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.839717][    T9] device veth1_vlan left promiscuous mode
[  467.851838][    T9] device veth0_vlan left promiscuous mode
[  468.107368][    T9] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  468.153806][    T9] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  468.209059][    T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  468.218096][    T9] device batadv_slave_0 left promiscuous mode
[  468.233086][    T9] device team_slave_1 left promiscuous mode
[  468.243604][    T9] team0 (unregistering): Port device team_slave_1 removed
[  468.255925][    T9] device team_slave_0 left promiscuous mode
[  468.263905][    T9] team0 (unregistering): Port device team_slave_0 removed
[  468.276827][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.286249][    T9] device bond_slave_1 left promiscuous mode
[  468.305638][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.314874][    T9] device bond_slave_0 left promiscuous mode
[  468.369530][    T9] bond0 (unregistering): Released all slaves
[  468.428623][T13021] device veth1_macvtap entered promiscuous mode
[  468.438256][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  468.448527][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  468.488365][T13311] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2969'.
[  468.597317][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  468.621385][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.648805][T13021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.727706][T13320] device syzkaller0 entered promiscuous mode
[  468.744921][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  468.771867][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  468.809887][T13021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  468.830728][T13021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  468.866166][T13021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.885361][T13320] netlink: 'syz.1.2972': attribute type 19 has an invalid length.
[  468.904260][T13320] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2972'.
[  468.955451][T13332] netlink: 'syz.4.2975': attribute type 21 has an invalid length.
[  469.024414][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  469.036627][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  469.062726][T13021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.081778][T13021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.090533][T13021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.130713][T13021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.170171][T13344] netlink: 'syz.3.2979': attribute type 4 has an invalid length.
[  469.187090][T13344] netlink: 'syz.3.2979': attribute type 3 has an invalid length.
[  469.208635][T13344] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2979'.
[  471.109756][T13345] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2979'.
[  471.231621][T13348] delete_channel: no stack
[  471.239564][T13351] netlink: 'syz.3.2982': attribute type 21 has an invalid length.
[  471.519855][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.571116][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.624990][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  471.642158][T13359] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2984'.
[  471.669538][ T4853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.696333][ T4853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.697092][T13361] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2985'.
[  471.734002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  471.969646][T13365] netlink: 'syz.3.2986': attribute type 19 has an invalid length.
[  471.991013][T13365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2986'.
[  472.459750][T13386] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2992'.
[  472.541022][T13386] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  472.708819][T13396] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2998'.
[  472.785908][T13403] FAULT_INJECTION: forcing a failure.
[  472.785908][T13403] name failslab, interval 1, probability 0, space 0, times 0
[  472.831641][T13403] CPU: 0 PID: 13403 Comm: syz.3.3000 Not tainted syzkaller #0
[  472.839251][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  472.849328][T13403] Call Trace:
[  472.852622][T13403]  <TASK>
[  472.855557][T13403]  dump_stack_lvl+0x188/0x250
[  472.860251][T13403]  ? show_regs_print_info+0x20/0x20
[  472.865464][T13403]  ? load_image+0x400/0x400
[  472.869989][T13403]  ? __might_sleep+0xf0/0xf0
[  472.874594][T13403]  ? __lock_acquire+0x7d10/0x7d10
[  472.879721][T13403]  ? mark_lock+0x94/0x320
[  472.884068][T13403]  should_fail+0x38c/0x4c0
[  472.888505][T13403]  should_failslab+0x5/0x20
[  472.893020][T13403]  slab_pre_alloc_hook+0x51/0xc0
[  472.897974][T13403]  __kmalloc+0x6b/0x330
[  472.902141][T13403]  ? tomoyo_realpath_from_path+0x118/0x610
[  472.907961][T13403]  tomoyo_realpath_from_path+0x118/0x610
[  472.913639][T13403]  tomoyo_path_number_perm+0x242/0x660
[  472.919120][T13403]  ? verify_lock_unused+0x140/0x140
[  472.924350][T13403]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  472.929826][T13403]  ? ksys_write+0x1c6/0x260
[  472.934387][T13403]  security_file_ioctl+0x6c/0xa0
[  472.939354][T13403]  __se_sys_ioctl+0x48/0x170
[  472.943960][T13403]  do_syscall_64+0x4c/0xa0
[  472.948390][T13403]  ? clear_bhb_loop+0x30/0x80
[  472.953079][T13403]  ? clear_bhb_loop+0x30/0x80
[  472.957768][T13403]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  472.963670][T13403] RIP: 0033:0x7f5a116efe59
[  472.968085][T13403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.987697][T13403] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  472.996124][T13403] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  473.004106][T13403] RDX: 0000200000000580 RSI: 0000000000008916 RDI: 0000000000000003
[  473.012077][T13403] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  473.020050][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.028021][T13403] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  473.036019][T13403]  </TASK>
[  473.260933][T13403] ERROR: Out of memory at tomoyo_realpath_from_path.
[  473.282767][T13416] netlink: 'syz.0.3004': attribute type 21 has an invalid length.
[  473.333687][T13416] netlink: 'syz.0.3004': attribute type 3 has an invalid length.
[  473.342916][T13416] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3004'.
[  473.579231][T13397] chnl_net:caif_netlink_parms(): no params data found
[  473.667003][T13431] netlink: 'syz.0.3008': attribute type 10 has an invalid length.
[  473.675224][T13431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3008'.
[  473.685580][T13431] device team0 entered promiscuous mode
[  473.691418][T13431] device team_slave_0 entered promiscuous mode
[  473.698099][T13431] device team_slave_1 entered promiscuous mode
[  473.708353][T13431] bridge0: port 3(team0) entered blocking state
[  473.715118][T13431] bridge0: port 3(team0) entered disabled state
[  473.724195][T13431] bridge0: port 3(team0) entered blocking state
[  473.730577][T13431] bridge0: port 3(team0) entered forwarding state
[  473.835788][T13437] netlink: 'syz.0.3009': attribute type 1 has an invalid length.
[  473.900762][T13397] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.949556][T13397] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.970106][T13397] device bridge_slave_0 entered promiscuous mode
[  473.978789][T13439] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3010'.
[  473.991875][T13397] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.999825][T13397] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.038182][T13397] device bridge_slave_1 entered promiscuous mode
[  474.170299][T13397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.228131][T13397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.371916][T13397] team0: Port device team_slave_0 added
[  474.413928][T13397] team0: Port device team_slave_1 added
[  474.456190][T13397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.478616][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.569234][T13397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.582721][T13465] FAULT_INJECTION: forcing a failure.
[  474.582721][T13465] name failslab, interval 1, probability 0, space 0, times 0
[  474.623411][T13465] CPU: 1 PID: 13465 Comm: syz.1.3020 Not tainted syzkaller #0
[  474.630932][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.641013][T13465] Call Trace:
[  474.644310][T13465]  <TASK>
[  474.647271][T13465]  dump_stack_lvl+0x188/0x250
[  474.651986][T13465]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  474.657737][T13465]  ? show_regs_print_info+0x20/0x20
[  474.662948][T13465]  ? load_image+0x400/0x400
[  474.667493][T13465]  should_fail+0x38c/0x4c0
[  474.671933][T13465]  should_failslab+0x5/0x20
[  474.676448][T13465]  slab_pre_alloc_hook+0x51/0xc0
[  474.681392][T13465]  ? skb_clone+0x1bd/0x350
[  474.685820][T13465]  kmem_cache_alloc+0x3d/0x290
[  474.690581][T13465]  skb_clone+0x1bd/0x350
[  474.694826][T13465]  __netlink_deliver_tap+0x3cd/0x7c0
[  474.700126][T13465]  netlink_deliver_tap+0x16c/0x180
[  474.705243][T13465]  netlink_unicast+0x74f/0x920
[  474.707760][T13397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.710045][T13465]  netlink_sendmsg+0x8ba/0xbe0
[  474.710092][T13465]  ? netlink_getsockopt+0x570/0x570
[  474.717909][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.721797][T13465]  ? aa_sock_msg_perm+0x94/0x150
[  474.721829][T13465]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  474.721852][T13465]  ? security_socket_sendmsg+0x7c/0xa0
[  474.721879][T13465]  ? netlink_getsockopt+0x570/0x570
[  474.721897][T13465]  ____sys_sendmsg+0x5b7/0x8f0
[  474.721944][T13465]  ? __sys_sendmsg_sock+0x30/0x30
[  474.721992][T13465]  ? import_iovec+0x6f/0xa0
[  474.722023][T13465]  ___sys_sendmsg+0x236/0x2e0
[  474.731737][T13397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.753065][T13465]  ? __sys_sendmsg+0x2a0/0x2a0
[  474.753127][T13465]  ? trace_event_raw_event_lock+0x270/0x270
[  474.753151][T13465]  ? vfs_write+0x8b2/0xd60
[  474.753229][T13465]  __se_sys_sendmsg+0x1af/0x290
[  474.753259][T13465]  ? __x64_sys_sendmsg+0x80/0x80
[  474.828157][T13465]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  474.834285][T13465]  ? lockdep_hardirqs_on+0x94/0x140
[  474.839503][T13465]  do_syscall_64+0x4c/0xa0
[  474.843925][T13465]  ? clear_bhb_loop+0x30/0x80
[  474.848607][T13465]  ? clear_bhb_loop+0x30/0x80
[  474.853287][T13465]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  474.859174][T13465] RIP: 0033:0x7f8537978e59
[  474.863584][T13465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.883323][T13465] RSP: 002b:00007f8535bd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.891739][T13465] RAX: ffffffffffffffda RBX: 00007f8537bf1fa0 RCX: 00007f8537978e59
[  474.899703][T13465] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000004
[  474.907665][T13465] RBP: 00007f8535bd2090 R08: 0000000000000000 R09: 0000000000000000
[  474.915627][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.923588][T13465] R13: 00007f8537bf2038 R14: 00007f8537bf1fa0 R15: 00007ffd6e7e52c8
[  474.931576][T13465]  </TASK>
[  474.938637][ T9643] Bluetooth: hci5: command 0x0409 tx timeout
[  474.945941][T13464] netlink: 'syz.4.3019': attribute type 39 has an invalid length.
[  475.024811][T13470] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3022'.
[  475.105858][T13397] device hsr_slave_0 entered promiscuous mode
[  475.116380][T13397] device hsr_slave_1 entered promiscuous mode
[  475.138779][T13397] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  475.181127][T13397] Cannot create hsr debugfs directory
[  475.187109][T13477] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3024'.
[  475.197961][T13476] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3023'.
[  475.581854][T13496] FAULT_INJECTION: forcing a failure.
[  475.581854][T13496] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  475.618095][T13397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.684632][T13496] CPU: 1 PID: 13496 Comm: syz.4.3031 Not tainted syzkaller #0
[  475.692137][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  475.702197][T13496] Call Trace:
[  475.705467][T13496]  <TASK>
[  475.708383][T13496]  dump_stack_lvl+0x188/0x250
[  475.713054][T13496]  ? show_regs_print_info+0x20/0x20
[  475.718236][T13496]  ? load_image+0x400/0x400
[  475.722731][T13496]  ? __lock_acquire+0x7d10/0x7d10
[  475.727749][T13496]  should_fail+0x38c/0x4c0
[  475.732163][T13496]  _copy_to_user+0x2e/0x130
[  475.736655][T13496]  put_user_ifreq+0x74/0xb0
[  475.741163][T13496]  sock_do_ioctl+0x272/0x320
[  475.745740][T13496]  ? sock_show_fdinfo+0xb0/0xb0
[  475.750584][T13496]  sock_ioctl+0x4d2/0x710
[  475.754900][T13496]  ? sock_poll+0x410/0x410
[  475.759314][T13496]  ? bpf_lsm_file_ioctl+0x5/0x10
[  475.764240][T13496]  ? security_file_ioctl+0x7c/0xa0
[  475.769359][T13496]  ? sock_poll+0x410/0x410
[  475.773765][T13496]  __se_sys_ioctl+0xfa/0x170
[  475.778349][T13496]  do_syscall_64+0x4c/0xa0
[  475.782754][T13496]  ? clear_bhb_loop+0x30/0x80
[  475.787415][T13496]  ? clear_bhb_loop+0x30/0x80
[  475.792077][T13496]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  475.797955][T13496] RIP: 0033:0x7faaf00fbe59
[  475.802360][T13496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.821952][T13496] RSP: 002b:00007faaee355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  475.830354][T13496] RAX: ffffffffffffffda RBX: 00007faaf0374fa0 RCX: 00007faaf00fbe59
[  475.838312][T13496] RDX: 0000200000000280 RSI: 0000000000008927 RDI: 0000000000000005
[  475.846363][T13496] RBP: 00007faaee355090 R08: 0000000000000000 R09: 0000000000000000
[  475.854336][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  475.862303][T13496] R13: 00007faaf0375038 R14: 00007faaf0374fa0 R15: 00007ffdbaf51a88
[  475.870292][T13496]  </TASK>
[  475.954796][T13507] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3034'.
[  476.075428][T13397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.111587][T13511] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3037'.
[  476.141223][T13515] netlink: 'syz.4.3036': attribute type 10 has an invalid length.
[  476.193243][T13397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.471909][T13532] netlink: 'syz.4.3044': attribute type 10 has an invalid length.
[  476.519010][T13532] netlink: 'syz.4.3044': attribute type 10 has an invalid length.
[  476.538232][T13532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3044'.
[  476.649447][T13538] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3047'.
[  476.661284][T13397] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  476.715089][T13397] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  476.739633][T13537] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3046'.
[  476.763234][T13397] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  476.803077][T13540] netlink: 'syz.1.3048': attribute type 21 has an invalid length.
[  476.828556][T13546] netlink: 'syz.3.3049': attribute type 2 has an invalid length.
[  476.837157][T13546] netlink: 'syz.3.3049': attribute type 8 has an invalid length.
[  476.848820][T13546] FAULT_INJECTION: forcing a failure.
[  476.848820][T13546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  476.866250][T13546] CPU: 1 PID: 13546 Comm: syz.3.3049 Not tainted syzkaller #0
[  476.873747][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  476.883825][T13546] Call Trace:
[  476.887116][T13546]  <TASK>
[  476.890054][T13546]  dump_stack_lvl+0x188/0x250
[  476.894728][T13546]  ? show_regs_print_info+0x20/0x20
[  476.899959][T13546]  ? load_image+0x400/0x400
[  476.904456][T13546]  ? __lock_acquire+0x7d10/0x7d10
[  476.909908][T13546]  should_fail+0x38c/0x4c0
[  476.914318][T13546]  _copy_from_user+0x2e/0x170
[  476.918982][T13546]  iovec_from_user+0x142/0x370
[  476.923744][T13546]  __import_iovec+0x70/0x490
[  476.928325][T13546]  import_iovec+0x6f/0xa0
[  476.932648][T13546]  ___sys_sendmsg+0x1fd/0x2e0
[  476.937328][T13546]  ? __sys_sendmsg+0x2a0/0x2a0
[  476.942093][T13546]  ? vfs_write+0x8b2/0xd60
[  476.946539][T13546]  __se_sys_sendmsg+0x1af/0x290
[  476.951384][T13546]  ? __x64_sys_sendmsg+0x80/0x80
[  476.956345][T13546]  ? syscall_enter_from_user_mode+0x2a/0x70
[  476.961049][ T9656] Bluetooth: hci5: command 0x041b tx timeout
[  476.962229][T13546]  do_syscall_64+0x4c/0xa0
[  476.962254][T13546]  ? clear_bhb_loop+0x30/0x80
[  476.977275][T13546]  ? clear_bhb_loop+0x30/0x80
[  476.981959][T13546]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  476.987849][T13546] RIP: 0033:0x7f5a116efe59
[  476.992266][T13546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.011872][T13546] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.020277][T13546] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  477.028267][T13546] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007
[  477.036246][T13546] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  477.044305][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.052362][T13546] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  477.060456][T13546]  </TASK>
[  477.075384][T13397] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  477.278578][T13550] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  477.288362][T13550] CPU: 1 PID: 13550 Comm: syz.3.3051 Not tainted syzkaller #0
[  477.295983][T13550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.306062][T13550] Call Trace:
[  477.309356][T13550]  <TASK>
[  477.312301][T13550]  dump_stack_lvl+0x188/0x250
[  477.317012][T13550]  ? show_regs_print_info+0x20/0x20
[  477.322246][T13550]  ? load_image+0x400/0x400
[  477.326804][T13550]  sysfs_warn_dup+0x8a/0xa0
[  477.331336][T13550]  sysfs_do_create_link_sd+0xc0/0x110
[  477.336736][T13550]  device_add+0x7f6/0x1000
[  477.341206][T13550]  wiphy_register+0x1e81/0x2c30
[  477.346123][T13550]  ? cfg80211_event_work+0x40/0x40
[  477.351268][T13550]  ? minstrel_ht_alloc+0x808/0x980
[  477.356411][T13550]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  477.362507][T13550]  ieee80211_register_hw+0x2aa1/0x3af0
[  477.368021][T13550]  ? ieee80211_tasklet_handler+0x20/0x20
[  477.373703][T13550]  ? rcu_is_watching+0x11/0xa0
[  477.378483][T13550]  ? memset+0x1e/0x40
[  477.382825][T13550]  ? hrtimer_init+0x10c/0x220
[  477.387525][T13550]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  477.393299][T13550]  hwsim_new_radio_nl+0xa6f/0xc40
[  477.398369][T13550]  genl_rcv_msg+0xcea/0xf90
[  477.402913][T13550]  ? genl_bind+0x380/0x380
[  477.407364][T13550]  ? __dev_queue_xmit+0x1cbf/0x2f80
[  477.412574][T13550]  ? verify_lock_unused+0x140/0x140
[  477.417795][T13550]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  477.423541][T13550]  ? perf_trace_lock+0x301/0x390
[  477.428500][T13550]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  477.435053][T13550]  netlink_rcv_skb+0x1f5/0x440
[  477.439850][T13550]  ? genl_bind+0x380/0x380
[  477.444295][T13550]  ? netlink_ack+0xb50/0xb50
[  477.449519][T13550]  ? __lock_acquire+0x7d10/0x7d10
[  477.454837][T13550]  ? down_read+0x1aa/0x2e0
[  477.459274][T13550]  genl_rcv+0x24/0x40
[  477.463266][T13550]  netlink_unicast+0x774/0x920
[  477.468065][T13550]  netlink_sendmsg+0x8ba/0xbe0
[  477.472873][T13550]  ? netlink_getsockopt+0x570/0x570
[  477.478103][T13550]  ? aa_sock_msg_perm+0x94/0x150
[  477.483074][T13550]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  477.488384][T13550]  ? security_socket_sendmsg+0x7c/0xa0
[  477.493871][T13550]  ? netlink_getsockopt+0x570/0x570
[  477.499094][T13550]  ____sys_sendmsg+0x5b7/0x8f0
[  477.503912][T13550]  ? __sys_sendmsg_sock+0x30/0x30
[  477.508979][T13550]  ? import_iovec+0x6f/0xa0
[  477.513516][T13550]  ___sys_sendmsg+0x236/0x2e0
[  477.518235][T13550]  ? __sys_sendmsg+0x2a0/0x2a0
[  477.523047][T13550]  ? trace_event_raw_event_lock+0x270/0x270
[  477.529019][T13550]  __se_sys_sendmsg+0x1af/0x290
[  477.533901][T13550]  ? __x64_sys_sendmsg+0x80/0x80
[  477.538861][T13550]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  477.544900][T13550]  ? lockdep_hardirqs_on+0x94/0x140
[  477.550132][T13550]  do_syscall_64+0x4c/0xa0
[  477.554577][T13550]  ? clear_bhb_loop+0x30/0x80
[  477.559274][T13550]  ? clear_bhb_loop+0x30/0x80
[  477.563977][T13550]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  477.569897][T13550] RIP: 0033:0x7f5a116efe59
[  477.574350][T13550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.593982][T13550] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.602422][T13550] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  477.610431][T13550] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  477.618416][T13550] RBP: 00007f5a11785d6f R08: 0000000000000000 R09: 0000000000000000
[  477.626410][T13550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.634390][T13550] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  477.642407][T13550]  </TASK>
[  477.693740][T13553] netlink: 'syz.4.3052': attribute type 10 has an invalid length.
[  477.742487][T13554] netlink: 'syz.1.3053': attribute type 2 has an invalid length.
[  477.755670][T13554] netlink: 'syz.1.3053': attribute type 8 has an invalid length.
[  477.917787][T13561] netlink: 'syz.1.3053': attribute type 2 has an invalid length.
[  477.927744][T13561] netlink: 'syz.1.3053': attribute type 8 has an invalid length.
[  478.189046][T13397] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.266761][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  478.283521][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  478.303746][T13397] 8021q: adding VLAN 0 to HW filter on device team0
[  478.339351][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  478.349999][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  478.362721][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.369855][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.405484][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  478.414026][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  478.450387][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  478.470198][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.477429][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.618479][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  478.720716][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  478.763299][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  478.791433][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  478.868047][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  478.906494][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  478.988297][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  479.044337][ T4271] Bluetooth: hci5: command 0x040f tx timeout
[  479.063295][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  479.110605][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  479.136332][T13601] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  479.165457][T13397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  479.182281][T13397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  479.196681][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  479.211113][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  479.388356][T13618] __nla_validate_parse: 10 callbacks suppressed
[  479.388372][T13618] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3071'.
[  479.415368][T13618] FAULT_INJECTION: forcing a failure.
[  479.415368][T13618] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  479.453782][T13618] CPU: 0 PID: 13618 Comm: syz.3.3071 Not tainted syzkaller #0
[  479.461288][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  479.471441][T13618] Call Trace:
[  479.474737][T13618]  <TASK>
[  479.477676][T13618]  dump_stack_lvl+0x188/0x250
[  479.482368][T13618]  ? show_regs_print_info+0x20/0x20
[  479.487573][T13618]  ? load_image+0x400/0x400
[  479.492069][T13618]  ? __lock_acquire+0x7d10/0x7d10
[  479.497087][T13618]  should_fail+0x38c/0x4c0
[  479.501497][T13618]  _copy_from_user+0x2e/0x170
[  479.506162][T13618]  __copy_msghdr_from_user+0xc9/0x630
[  479.511521][T13618]  ? verify_lock_unused+0x140/0x140
[  479.516706][T13618]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  479.521984][T13618]  ___sys_sendmsg+0x19a/0x2e0
[  479.526650][T13618]  ? __sys_sendmsg+0x2a0/0x2a0
[  479.531405][T13618]  ? vfs_write+0x8b2/0xd60
[  479.535830][T13618]  __se_sys_sendmsg+0x1af/0x290
[  479.540665][T13618]  ? __x64_sys_sendmsg+0x80/0x80
[  479.545587][T13618]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  479.551563][T13618]  ? lockdep_hardirqs_on+0x94/0x140
[  479.556752][T13618]  do_syscall_64+0x4c/0xa0
[  479.561152][T13618]  ? clear_bhb_loop+0x30/0x80
[  479.565812][T13618]  ? clear_bhb_loop+0x30/0x80
[  479.570475][T13618]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  479.576362][T13618] RIP: 0033:0x7f5a116efe59
[  479.580769][T13618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.600362][T13618] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.608760][T13618] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  479.616718][T13618] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005
[  479.624671][T13618] RBP: 00007f5a0f949090 R08: 0000000000000000 R09: 0000000000000000
[  479.632633][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  479.640602][T13618] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  479.648591][T13618]  </TASK>
[  479.688752][T13625] pim6reg0: tun_chr_ioctl cmd 21531
[  479.757434][T13622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3073'.
[  479.817829][    T9] device wlan1 left promiscuous mode
[  479.832853][    T9] team0: Port device wlan1 removed
[  479.880625][T13638] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3075'.
[  479.941977][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  479.949574][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  480.178312][T13397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.262693][    T9] device hsr_slave_0 left promiscuous mode
[  480.279448][    T9] device hsr_slave_1 left promiscuous mode
[  480.320231][    T9] bridge0: port 5(bond0) entered disabled state
[  480.375369][    T9] bridge0: port 4(team0) entered disabled state
[  480.392260][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.420176][    T9] device bridge_slave_0 left promiscuous mode
[  480.460784][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.482621][T13672] FAULT_INJECTION: forcing a failure.
[  480.482621][T13672] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  480.520963][T13672] CPU: 0 PID: 13672 Comm: syz.1.3085 Not tainted syzkaller #0
[  480.528465][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  480.538535][T13672] Call Trace:
[  480.541823][T13672]  <TASK>
[  480.544762][T13672]  dump_stack_lvl+0x188/0x250
[  480.549457][T13672]  ? show_regs_print_info+0x20/0x20
[  480.554673][T13672]  ? load_image+0x400/0x400
[  480.559187][T13672]  ? __lock_acquire+0x7d10/0x7d10
[  480.564221][T13672]  should_fail+0x38c/0x4c0
[  480.568652][T13672]  _copy_to_user+0x2e/0x130
[  480.573152][T13672]  simple_read_from_buffer+0xe3/0x150
[  480.578519][T13672]  proc_fail_nth_read+0x1a6/0x220
[  480.583561][T13672]  ? proc_fault_inject_write+0x310/0x310
[  480.589189][T13672]  ? fsnotify_perm+0x254/0x560
[  480.593944][T13672]  ? proc_fault_inject_write+0x310/0x310
[  480.599566][T13672]  vfs_read+0x301/0xd60
[  480.603722][T13672]  ? kernel_read+0x1e0/0x1e0
[  480.608300][T13672]  ? __fget_files+0x40f/0x480
[  480.612965][T13672]  ? mutex_lock_nested+0x17/0x20
[  480.617897][T13672]  ? __fdget_pos+0x2bf/0x370
[  480.622471][T13672]  ? ksys_read+0x71/0x260
[  480.626788][T13672]  ksys_read+0x152/0x260
[  480.631018][T13672]  ? vfs_write+0xd60/0xd60
[  480.635420][T13672]  ? lockdep_hardirqs_on+0x94/0x140
[  480.640606][T13672]  do_syscall_64+0x4c/0xa0
[  480.645007][T13672]  ? clear_bhb_loop+0x30/0x80
[  480.650102][T13672]  ? clear_bhb_loop+0x30/0x80
[  480.654793][T13672]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  480.660694][T13672] RIP: 0033:0x7f853793968e
[  480.665109][T13672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  480.684707][T13672] RSP: 002b:00007f8535bd1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  480.693118][T13672] RAX: ffffffffffffffda RBX: 00007f8535bd26c0 RCX: 00007f853793968e
[  480.701077][T13672] RDX: 000000000000000f RSI: 00007f8535bd20a0 RDI: 0000000000000006
[  480.709035][T13672] RBP: 00007f8535bd2090 R08: 0000000000000000 R09: 0000000000000000
[  480.717017][T13672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  480.724974][T13672] R13: 00007f8537bf2038 R14: 00007f8537bf1fa0 R15: 00007ffd6e7e52c8
[  480.732965][T13672]  </TASK>
[  480.742430][    T9] device veth1_macvtap left promiscuous mode
[  480.750449][    T9] device veth0_macvtap left promiscuous mode
[  480.757935][    T9] device veth1_vlan left promiscuous mode
[  480.769047][    T9] device veth0_vlan left promiscuous mode
[  481.016582][    T9] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  481.103777][    T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  481.113008][    T9] device batadv_slave_0 left promiscuous mode
[  481.122895][ T9643] Bluetooth: hci5: command 0x0419 tx timeout
[  481.126931][    T9] device team_slave_1 left promiscuous mode
[  481.141256][    T9] team0 (unregistering): Port device team_slave_1 removed
[  481.156806][    T9] device team_slave_0 left promiscuous mode
[  481.165238][    T9] team0 (unregistering): Port device team_slave_0 removed
[  481.183017][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  481.192877][    T9] device bond_slave_1 left promiscuous mode
[  481.206544][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  481.217015][    T9] device bond_slave_0 left promiscuous mode
[  481.278844][    T9] bond0 (unregistering): Released all slaves
[  481.375223][T13688] netlink: 731 bytes leftover after parsing attributes in process `syz.1.3089'.
[  481.520727][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  481.540183][T13699] FAULT_INJECTION: forcing a failure.
[  481.540183][T13699] name failslab, interval 1, probability 0, space 0, times 0
[  481.553496][T13699] CPU: 1 PID: 13699 Comm: syz.1.3092 Not tainted syzkaller #0
[  481.555547][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  481.560971][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  481.561011][T13699] Call Trace:
[  481.561018][T13699]  <TASK>
[  481.561028][T13699]  dump_stack_lvl+0x188/0x250
[  481.589969][T13699]  ? show_regs_print_info+0x20/0x20
[  481.595180][T13699]  ? load_image+0x400/0x400
[  481.599695][T13699]  should_fail+0x38c/0x4c0
[  481.604122][T13699]  should_failslab+0x5/0x20
[  481.608657][T13699]  slab_pre_alloc_hook+0x51/0xc0
[  481.613611][T13699]  kmem_cache_alloc_trace+0x47/0x2a0
[  481.618915][T13699]  ? tipc_nametbl_insert_publ+0x892/0x1390
[  481.624741][T13699]  tipc_nametbl_insert_publ+0x892/0x1390
[  481.630394][T13699]  tipc_nametbl_publish+0xc3/0x1e0
[  481.635505][T13699]  tipc_sk_publish+0x1c4/0x450
[  481.640348][T13699]  ? __lock_acquire+0x7d10/0x7d10
[  481.645363][T13699]  ? tipc_sk_withdraw+0x640/0x640
[  481.650376][T13699]  ? tipc_nametbl_build_group+0x451/0x490
[  481.656095][T13699]  tipc_sk_join+0x3a4/0x6a0
[  481.660591][T13699]  ? lockdep_hardirqs_on+0x94/0x140
[  481.665929][T13699]  ? __local_bh_enable_ip+0x136/0x1c0
[  481.671338][T13699]  ? __tipc_sendstream+0x1270/0x1270
[  481.676626][T13699]  tipc_setsockopt+0x6bf/0x960
[  481.681386][T13699]  ? tipc_shutdown+0x4d0/0x4d0
[  481.686175][T13699]  ? aa_sock_opt_perm+0x74/0x100
[  481.691106][T13699]  ? bpf_lsm_socket_setsockopt+0x5/0x10
[  481.696640][T13699]  ? security_socket_setsockopt+0x7a/0xa0
[  481.702383][T13699]  ? tipc_shutdown+0x4d0/0x4d0
[  481.707221][T13699]  __sys_setsockopt+0x2bf/0x3d0
[  481.712065][T13699]  __x64_sys_setsockopt+0xb1/0xc0
[  481.717090][T13699]  do_syscall_64+0x4c/0xa0
[  481.721502][T13699]  ? clear_bhb_loop+0x30/0x80
[  481.726168][T13699]  ? clear_bhb_loop+0x30/0x80
[  481.730835][T13699]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  481.736721][T13699] RIP: 0033:0x7f8537978e59
[  481.741126][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.760720][T13699] RSP: 002b:00007f8535bd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  481.769150][T13699] RAX: ffffffffffffffda RBX: 00007f8537bf1fa0 RCX: 00007f8537978e59
[  481.777115][T13699] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000008
[  481.785071][T13699] RBP: 00007f8535bd2090 R08: 0000000000000043 R09: 0000000000000000
[  481.793031][T13699] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001
[  481.800997][T13699] R13: 00007f8537bf2038 R14: 00007f8537bf1fa0 R15: 00007ffd6e7e52c8
[  481.808987][T13699]  </TASK>
[  481.812128][T13699] tipc: Failed to bind to 4294967295,0,0
[  481.856376][T13697] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3091'.
[  481.869873][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  481.881840][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  481.914274][T13397] device veth0_vlan entered promiscuous mode
[  481.932076][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  481.943845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  481.966367][T13397] device veth1_vlan entered promiscuous mode
[  482.044850][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  482.054829][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  482.084982][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  482.123066][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  482.184285][T13397] device veth0_macvtap entered promiscuous mode
[  482.231576][T13397] device veth1_macvtap entered promiscuous mode
[  482.298816][T13397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.323105][T13397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.338661][T13397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  482.367630][T13397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.390301][T13723] validate_nla: 7 callbacks suppressed
[  482.390318][T13723] netlink: 'syz.1.3099': attribute type 3 has an invalid length.
[  482.395937][T13397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.399296][T13397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.431703][T13723] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3099'.
[  482.440708][T13397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.465518][T13397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.503067][T13397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.539395][T13397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.592112][T13721] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3099'.
[  482.649272][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  482.673166][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  482.703653][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  482.724771][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  482.744171][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  482.767141][ T4853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  482.792273][T13397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.804034][T13397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.849550][T13397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.870927][T13397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.915978][T13744] netlink: 'syz.0.3100': attribute type 39 has an invalid length.
[  482.977435][T13743] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3105'.
[  483.182051][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.189904][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.259119][T13761] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.3110'.
[  483.268784][ T1268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  483.299302][ T1268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.327123][ T1268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.373511][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  483.955707][T13789] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3118'.
[  484.280390][T13804] netlink: 'syz.2.3120': attribute type 39 has an invalid length.
[  484.513367][T13791] chnl_net:caif_netlink_parms(): no params data found
[  484.666562][T13818] netlink: 'syz.0.3125': attribute type 10 has an invalid length.
[  484.787703][T13818] device macvlan0 entered promiscuous mode
[  484.864340][T13818] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  484.978434][T13791] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.031973][T13791] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.075984][T13791] device bridge_slave_0 entered promiscuous mode
[  485.111802][T13791] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.129773][T13791] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.168970][T13791] device bridge_slave_1 entered promiscuous mode
[  485.211532][T13836] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3131'.
[  485.273304][T13791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.304903][T13791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.382942][T13791] team0: Port device team_slave_0 added
[  485.414343][T13791] team0: Port device team_slave_1 added
[  485.480116][T13791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.496973][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.563994][T13791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.605404][T13791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.614595][T13791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.654640][T13791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.766331][T13791] device hsr_slave_0 entered promiscuous mode
[  485.777365][T13791] device hsr_slave_1 entered promiscuous mode
[  485.810118][    T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.899103][T13862] FAULT_INJECTION: forcing a failure.
[  485.899103][T13862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  485.929340][    T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.955706][T13862] CPU: 0 PID: 13862 Comm: syz.3.3139 Not tainted syzkaller #0
[  485.963216][T13862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  485.973282][T13862] Call Trace:
[  485.976568][T13862]  <TASK>
[  485.979502][T13862]  dump_stack_lvl+0x188/0x250
[  485.984189][T13862]  ? show_regs_print_info+0x20/0x20
[  485.989393][T13862]  ? load_image+0x400/0x400
[  485.993905][T13862]  ? __lock_acquire+0x7d10/0x7d10
[  485.998938][T13862]  ? perf_trace_lock_acquire+0xed/0x3e0
[  486.004497][T13862]  should_fail+0x38c/0x4c0
[  486.008944][T13862]  _copy_from_user+0x2e/0x170
[  486.013625][T13862]  iovec_from_user+0x142/0x370
[  486.018402][T13862]  __import_iovec+0x70/0x490
[  486.023008][T13862]  import_iovec+0x6f/0xa0
[  486.027343][T13862]  ___sys_sendmsg+0x1fd/0x2e0
[  486.032035][T13862]  ? __sys_sendmsg+0x2a0/0x2a0
[  486.036816][T13862]  ? trace_event_raw_event_lock+0x270/0x270
[  486.042707][T13862]  ? vfs_write+0x8b2/0xd60
[  486.047151][T13862]  __se_sys_sendmsg+0x1af/0x290
[  486.052014][T13862]  ? __x64_sys_sendmsg+0x80/0x80
[  486.056952][T13862]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  486.062949][T13862]  ? lockdep_hardirqs_on+0x94/0x140
[  486.068155][T13862]  do_syscall_64+0x4c/0xa0
[  486.072575][T13862]  ? clear_bhb_loop+0x30/0x80
[  486.077259][T13862]  ? clear_bhb_loop+0x30/0x80
[  486.081939][T13862]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  486.087838][T13862] RIP: 0033:0x7f5a116efe59
[  486.092255][T13862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.111864][T13862] RSP: 002b:00007f5a0f928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  486.120283][T13862] RAX: ffffffffffffffda RBX: 00007f5a11969090 RCX: 00007f5a116efe59
[  486.128252][T13862] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 0000000000000003
[  486.136223][T13862] RBP: 00007f5a0f928090 R08: 0000000000000000 R09: 0000000000000000
[  486.144282][T13862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  486.152250][T13862] R13: 00007f5a11969128 R14: 00007f5a11969090 R15: 00007fffb9d66668
[  486.160241][T13862]  </TASK>
[  486.174418][ T9654] Bluetooth: hci2: command 0x0409 tx timeout
[  486.217028][T13864] netlink: 'syz.2.3138': attribute type 10 has an invalid length.
[  486.254546][T13864] team0: Device ipvlan1 failed to register rx_handler
[  486.324314][    T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.643600][T13878] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3144'.
[  486.859384][T13882] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3145'.
[  487.562006][T13882] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  487.611040][T13882] CPU: 1 PID: 13882 Comm: syz.3.3145 Not tainted syzkaller #0
[  487.618557][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  487.628635][T13882] Call Trace:
[  487.631927][T13882]  <TASK>
[  487.634865][T13882]  dump_stack_lvl+0x188/0x250
[  487.639567][T13882]  ? show_regs_print_info+0x20/0x20
[  487.644791][T13882]  ? load_image+0x400/0x400
[  487.649335][T13882]  sysfs_warn_dup+0x8a/0xa0
[  487.653871][T13882]  sysfs_do_create_link_sd+0xc0/0x110
[  487.659266][T13882]  device_add+0x7f6/0x1000
[  487.663726][T13882]  wiphy_register+0x1e81/0x2c30
[  487.668625][T13882]  ? cfg80211_event_work+0x40/0x40
[  487.673771][T13882]  ? minstrel_ht_alloc+0x808/0x980
[  487.678922][T13882]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  487.685022][T13882]  ieee80211_register_hw+0x2aa1/0x3af0
[  487.690541][T13882]  ? ieee80211_tasklet_handler+0x20/0x20
[  487.696221][T13882]  ? rcu_is_watching+0x11/0xa0
[  487.701099][T13882]  ? memset+0x1e/0x40
[  487.705106][T13882]  ? hrtimer_init+0x10c/0x220
[  487.709897][T13882]  mac80211_hwsim_new_radio+0x20d3/0x4080
[  487.715665][T13882]  hwsim_new_radio_nl+0xa6f/0xc40
[  487.720740][T13882]  genl_rcv_msg+0xcea/0xf90
[  487.725269][T13882]  ? lock_chain_count+0x20/0x20
[  487.730159][T13882]  ? genl_bind+0x380/0x380
[  487.734609][T13882]  ? verify_lock_unused+0x140/0x140
[  487.739833][T13882]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  487.746458][T13882]  ? perf_trace_lock+0xe4/0x390
[  487.751342][T13882]  ? hwsim_tx_info_frame_received_nl+0x1020/0x1020
[  487.757892][T13882]  netlink_rcv_skb+0x1f5/0x440
[  487.762680][T13882]  ? genl_bind+0x380/0x380
[  487.767122][T13882]  ? netlink_ack+0xb50/0xb50
[  487.771737][T13882]  ? __lock_acquire+0x7d10/0x7d10
[  487.776790][T13882]  ? down_read+0x1aa/0x2e0
[  487.781230][T13882]  genl_rcv+0x24/0x40
[  487.785232][T13882]  netlink_unicast+0x774/0x920
[  487.790030][T13882]  netlink_sendmsg+0x8ba/0xbe0
[  487.794818][T13882]  ? netlink_getsockopt+0x570/0x570
[  487.800037][T13882]  ? aa_sock_msg_perm+0x94/0x150
[  487.804995][T13882]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  487.810298][T13882]  ? security_socket_sendmsg+0x7c/0xa0
[  487.815788][T13882]  ? netlink_getsockopt+0x570/0x570
[  487.821011][T13882]  ____sys_sendmsg+0x5b7/0x8f0
[  487.825819][T13882]  ? __sys_sendmsg_sock+0x30/0x30
[  487.830884][T13882]  ? import_iovec+0x6f/0xa0
[  487.835426][T13882]  ___sys_sendmsg+0x236/0x2e0
[  487.840134][T13882]  ? __sys_sendmsg+0x2a0/0x2a0
[  487.844933][T13882]  ? trace_event_raw_event_lock+0x270/0x270
[  487.850891][T13882]  __se_sys_sendmsg+0x1af/0x290
[  487.855794][T13882]  ? __x64_sys_sendmsg+0x80/0x80
[  487.860867][T13882]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  487.866897][T13882]  ? lockdep_hardirqs_on+0x94/0x140
[  487.872137][T13882]  do_syscall_64+0x4c/0xa0
[  487.876574][T13882]  ? clear_bhb_loop+0x30/0x80
[  487.881268][T13882]  ? clear_bhb_loop+0x30/0x80
[  487.885970][T13882]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  487.891887][T13882] RIP: 0033:0x7f5a116efe59
[  487.896321][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  487.915943][T13882] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  487.924383][T13882] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  487.932373][T13882] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  487.940361][T13882] RBP: 00007f5a11785d6f R08: 0000000000000000 R09: 0000000000000000
[  487.948349][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  487.956345][T13882] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  487.964356][T13882]  </TASK>
[  488.244185][ T9652] Bluetooth: hci2: command 0x041b tx timeout
[  488.481472][T13936] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3158'.
[  488.590195][T13791] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  488.619496][T13791] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  488.662128][T13791] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  488.822152][T13791] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  488.948049][    C1] 
[  488.948059][    C1] ================================
[  488.948063][    C1] WARNING: inconsistent lock state
[  488.948078][    C1] syzkaller #0 Not tainted
[  488.948087][    C1] --------------------------------
[  488.948091][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  488.948097][    C1] syz.3.3163/13952 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  488.948112][    C1] ffff88802049e420 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520
[  488.948151][    C1] {INITIAL USE} state was registered at:
[  488.948163][    C1]   lock_acquire+0x19e/0x400
[  488.948181][    C1]   _raw_spin_lock_irqsave+0xb0/0x100
[  488.948195][    C1]   htab_map_delete_elem+0x1b2/0x520
[  488.948207][    C1]   bpf_prog_6164f3e647ab800e+0x3d/0x68c
[  488.948223][    C1]   bpf_overflow_handler+0x1c2/0x4a0
[  488.948239][    C1]   __perf_event_overflow+0x364/0x530
[  488.948254][    C1]   perf_bp_event+0x276/0x320
[  488.948266][    C1]   hw_breakpoint_exceptions_notify+0x152/0x470
[  488.948279][    C1]   atomic_notifier_call_chain+0x15d/0x280
[  488.948294][    C1]   notify_die+0x141/0x1a0
[  488.948307][    C1]   notify_debug+0x20/0x30
[  488.948322][    C1]   noist_exc_debug+0x73/0x120
[  488.948335][    C1]   asm_exc_debug+0x2f/0x40
[  488.948347][    C1] irq event stamp: 1714
[  488.948353][    C1] hardirqs last  enabled at (1713): [<ffffffff81b563a6>] seqcount_lockdep_reader_access+0x106/0x190
[  488.948373][    C1] hardirqs last disabled at (1714): [<ffffffff89bd55ce>] exc_debug+0x6e/0x130
[  488.948392][    C1] softirqs last  enabled at (1476): [<ffffffff881d0825>] netlink_insert+0xe95/0x11f0
[  488.948410][    C1] softirqs last disabled at (1474): [<ffffffff87db850b>] release_sock+0x2b/0x1b0
[  488.948427][    C1] 
[  488.948427][    C1] other info that might help us debug this:
[  488.948432][    C1]  Possible unsafe locking scenario:
[  488.948432][    C1] 
[  488.948436][    C1]        CPU0
[  488.948438][    C1]        ----
[  488.948442][    C1]   lock(&htab->lockdep_key);
[  488.948451][    C1]   <Interrupt>
[  488.948454][    C1]     lock(&htab->lockdep_key);
[  488.948471][    C1] 
[  488.948471][    C1]  *** DEADLOCK ***
[  488.948471][    C1] 
[  488.948475][    C1] no locks held by syz.3.3163/13952.
[  488.948482][    C1] 
[  488.948482][    C1] stack backtrace:
[  488.948487][    C1] CPU: 1 PID: 13952 Comm: syz.3.3163 Not tainted syzkaller #0
[  488.948501][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  488.948509][    C1] Call Trace:
[  488.948515][    C1]  <#DB>
[  488.948522][    C1]  dump_stack_lvl+0x188/0x250
[  488.948543][    C1]  ? show_regs_print_info+0x20/0x20
[  488.948573][    C1]  ? print_usage_bug+0x42a/0x690
[  488.948589][    C1]  ? verify_lock_unused+0x18/0x140
[  488.948617][    C1]  lock_acquire+0x2c3/0x400
[  488.948644][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  488.948664][    C1]  ? read_lock_is_recursive+0x10/0x10
[  488.948679][    C1]  ? perf_trace_lock+0x197/0x390
[  488.948691][    C1]  ? look_up_lock_class+0x71/0x110
[  488.948713][    C1]  ? verify_lock_unused+0x18/0x140
[  488.948741][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[  488.948754][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  488.948768][    C1]  ? _raw_spin_lock+0x40/0x40
[  488.948790][    C1]  ? htab_map_hash+0x329/0x6d0
[  488.948812][    C1]  htab_map_delete_elem+0x1b2/0x520
[  488.948845][    C1]  bpf_prog_6164f3e647ab800e+0x3d/0x68c
[  488.948864][    C1]  bpf_overflow_handler+0x1c2/0x4a0
[  488.948891][    C1]  ? perf_event_switch_output+0x730/0x730
[  488.948906][    C1]  ? trace_call_bpf+0x515/0x5b0
[  488.948939][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  488.948960][    C1]  __perf_event_overflow+0x364/0x530
[  488.948989][    C1]  perf_bp_event+0x276/0x320
[  488.949010][    C1]  ? perf_trace_lock_acquire+0x340/0x3e0
[  488.949030][    C1]  ? perf_event_free_bpf_prog+0x110/0x110
[  488.949094][    C1]  ? rcu_lock_acquire+0x9/0x30
[  488.949115][    C1]  ? read_lock_is_recursive+0x10/0x10
[  488.949149][    C1]  hw_breakpoint_exceptions_notify+0x152/0x470
[  488.949176][    C1]  atomic_notifier_call_chain+0x15d/0x280
[  488.949204][    C1]  notify_die+0x141/0x1a0
[  488.949227][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  488.949258][    C1]  ? exc_debug+0x6e/0x130
[  488.949277][    C1]  ? trace_hardirqs_off_finish+0x57/0x1f0
[  488.949302][    C1]  notify_debug+0x20/0x30
[  488.949317][    C1]  exc_debug+0xcf/0x130
[  488.949341][    C1]  asm_exc_debug+0x1a/0x40
[  488.949357][    C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  488.949376][    C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8
[  488.949390][    C1] RSP: 0018:ffffc900033ef7f8 EFLAGS: 00050206
[  488.949405][    C1] RAX: ffffffff83e22601 RBX: 0000000000033fe0 RCX: 0000000000033ce0
[  488.949417][    C1] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003451300
[  488.949428][    C1] RBP: ffffc900033ef950 R08: ffffc90003484fdf R09: 1ffff920006909fb
[  488.949439][    C1] R10: dffffc0000000000 R11: fffff520006909fc R12: ffffc90003451000
[  488.949450][    C1] R13: dffffc00000000ff R14: 0000200000000040 R15: 0000000000000000
[  488.949487][    C1]  ? _copy_from_iter+0x241/0x1170
[  488.949519][    C1]  </#DB>
[  488.949524][    C1]  <TASK>
[  488.949529][    C1]  _copy_from_iter+0x318/0x1170
[  488.949573][    C1]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  488.949588][    C1]  ? __build_skb+0x26/0x2e0
[  488.949607][    C1]  ? rcu_is_watching+0x11/0xa0
[  488.949621][    C1]  ? __build_skb+0x26/0x2e0
[  488.949638][    C1]  ? kmem_cache_alloc+0x133/0x290
[  488.949655][    C1]  ? __virt_addr_valid+0xbd/0x470
[  488.949674][    C1]  ? __phys_addr_symbol+0x2b/0x70
[  488.949688][    C1]  ? __check_object_size+0x30c/0x410
[  488.949714][    C1]  netlink_sendmsg+0x758/0xbe0
[  488.949748][    C1]  ? netlink_getsockopt+0x570/0x570
[  488.949772][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  488.949796][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  488.949811][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  488.949830][    C1]  ? netlink_getsockopt+0x570/0x570
[  488.949846][    C1]  ____sys_sendmsg+0x5b7/0x8f0
[  488.949883][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  488.949921][    C1]  ? import_iovec+0x6f/0xa0
[  488.949947][    C1]  ___sys_sendmsg+0x236/0x2e0
[  488.949983][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  488.950026][    C1]  ? trace_event_raw_event_lock+0x270/0x270
[  488.950097][    C1]  __se_sys_sendmsg+0x1af/0x290
[  488.950121][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  488.950136][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  488.950177][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  488.950203][    C1]  do_syscall_64+0x4c/0xa0
[  488.950218][    C1]  ? clear_bhb_loop+0x30/0x80
[  488.950232][    C1]  ? clear_bhb_loop+0x30/0x80
[  488.950253][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  488.950269][    C1] RIP: 0033:0x7f5a116efe59
[  488.950286][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.950299][    C1] RSP: 002b:00007f5a0f949028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.950316][    C1] RAX: ffffffffffffffda RBX: 00007f5a11968fa0 RCX: 00007f5a116efe59
[  488.950328][    C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  488.950338][    C1] RBP: 00007f5a11785d6f R08: 0000000000000000 R09: 0000000000000000
[  488.950348][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.950358][    C1] R13: 00007f5a11969038 R14: 00007f5a11968fa0 R15: 00007fffb9d66668
[  488.950402][    C1]  </TASK>
[  489.759377][T13962] netlink: 'syz.0.3165': attribute type 4 has an invalid length.
[  489.833299][T13962] netlink: 'syz.0.3165': attribute type 1 has an invalid length.
[  489.865432][T13791] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.885632][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  489.924964][T13962] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3165'.
[  489.943731][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  489.964252][T13791] 8021q: adding VLAN 0 to HW filter on device team0
[  490.000546][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  490.051457][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  490.101214][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.108283][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.199066][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  490.231369][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  490.241636][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  490.263790][ T4890] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.270914][ T4890] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.298251][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  490.321856][ T9656] Bluetooth: hci2: command 0x040f tx timeout
[  490.330691][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  490.359550][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  490.381923][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  490.390289][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  490.411395][T13952] netlink: 'syz.3.3163': attribute type 2 has an invalid length.
[  490.419510][T13952] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3163'.
[  490.429693][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  490.442637][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  490.467724][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  490.478517][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  490.487583][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  490.497654][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  490.508447][T13791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  490.563915][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.572701][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.597467][T13791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.648070][    T9] device hsr_slave_0 left promiscuous mode
[  490.655854][    T9] device hsr_slave_1 left promiscuous mode
[  490.663217][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.672187][    T9] device bridge_slave_0 left promiscuous mode
[  490.678325][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.687310][    T9] device veth1_macvtap left promiscuous mode
[  490.693469][    T9] device veth0_macvtap left promiscuous mode
[  490.699484][    T9] device veth1_vlan left promiscuous mode
[  490.706615][    T9] device veth0_vlan left promiscuous mode
[  490.756380][    T9] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  490.790743][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.806993][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.837270][    T9] bond0 (unregistering): Released all slaves
[  490.909492][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  490.919286][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  490.940714][T13791] device veth0_vlan entered promiscuous mode
[  490.952512][T13791] device veth1_vlan entered promiscuous mode
[  490.967154][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  490.975394][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  490.983871][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  490.991975][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  490.999596][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  491.020405][T13791] device veth0_macvtap entered promiscuous mode
[  491.035382][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  491.044064][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  491.053363][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  491.063111][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  491.073404][T13791] device veth1_macvtap entered promiscuous mode
[  491.085603][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.096670][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.106608][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.117271][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.127310][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.137811][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.148710][T13791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.159229][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.169998][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.179873][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.190340][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.200234][T13791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.210702][T13791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.221867][T13791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.237618][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  491.245576][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  491.254758][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  491.263397][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  491.272270][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  491.282836][T13791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.291957][T13791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.300706][T13791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.309511][T13791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.355841][T13791] ieee80211 phy90: Selected rate control algorithm 'minstrel_ht'
[  491.377268][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.378069][T13791] ieee80211 phy91: Selected rate control algorithm 'minstrel_ht'
[  491.391920][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.401671][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  491.426947][ T4890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.436136][ T4890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.445317][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  492.402840][ T9652] Bluetooth: hci2: command 0x0419 tx timeout