last executing test programs:

2m33.982725321s ago: executing program 2 (id=6574):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe10537", 0x24}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48)
socket$kcm(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
close(0x4)
recvmsg(r4, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000002020207b1af8ff001a0000000000000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c2afcaeed2cfe8eae20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"/143], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
close(r5)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x22)

2m32.646706044s ago: executing program 2 (id=6584):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

2m30.125241686s ago: executing program 2 (id=6591):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040))
r1 = gettid()
perf_event_open(0x0, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x40, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x38, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50)

2m29.803765036s ago: executing program 2 (id=6594):
close(0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"/29], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (fail_nth: 4)

2m27.830842711s ago: executing program 2 (id=6600):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10)
sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)='[[', 0x2}], 0x1}, 0x80d1) (fail_nth: 34)

2m27.155268853s ago: executing program 2 (id=6604):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0x3)
perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x7, 0x8, 0x3, 0x1, 0x0, 0x5, 0x169920, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x2}, 0x8601, 0xc0, 0x8, 0x8, 0x9, 0xfffff181, 0x48, 0x0, 0x4, 0x0, 0x8}, r2, 0xa, 0xffffffffffffffff, 0xf)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000005c0)="afd4f8f58239", 0x2, r2, 0x4}, 0x38)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000)
sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4060019}, 0x20000841)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
close(r0)

2m11.972708225s ago: executing program 32 (id=6604):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0x3)
perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x7, 0x8, 0x3, 0x1, 0x0, 0x5, 0x169920, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x2}, 0x8601, 0xc0, 0x8, 0x8, 0x9, 0xfffff181, 0x48, 0x0, 0x4, 0x0, 0x8}, r2, 0xa, 0xffffffffffffffff, 0xf)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000080), 0x0, 0x0, &(0x7f00000005c0)="afd4f8f58239", 0x2, r2, 0x4}, 0x38)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000000)
sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4060019}, 0x20000841)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
close(r0)

6.588071477s ago: executing program 4 (id=7529):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)

6.339152875s ago: executing program 4 (id=7532):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0xfffffffffffffe3e, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
syz_clone(0x10000c00, 0x0, 0x0, 0x0, &(0x7f0000002d00), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

6.224079828s ago: executing program 5 (id=7534):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xfe, 0x0, 0x0, 0x4040000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000001c0), 0x7}, 0x300, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000047"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX], 0x48)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x110, 0x3, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1c, 0x0, 0x14)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]})

5.990447616s ago: executing program 0 (id=7537):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) (fail_nth: 3)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

5.903855009s ago: executing program 5 (id=7538):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x9, 0x7, 0x8, 0x50, 0x10}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x79, &(0x7f0000000200)=""/121, 0x41100, 0x58, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x1, 0x100, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0xa, 0x8}, {0x4, 0x1, 0x6, 0xb}, {0x4, 0x4, 0xe, 0xb}], 0x10, 0x10}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

5.24157904s ago: executing program 0 (id=7540):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x5}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x22, 0x2, 0x21)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x80044943, 0x0)
r4 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000000000000000008000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000bc509e8f116dfe66013bcd78341d997367a11924bd7682e73b6fde6961d19d85df278acfc3a7659d7fcf759e4f061f922753ef769ad14e9e4ce48e4a933e62451bcaf91c7a9a73feafd534853287f6ac8b5e2a1598c85a00b084a6192e5c6f498f2fe38d4aab283e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x13, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000480)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(r5, &(0x7f0000000840)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="74de1f3746670ded17be9e2b6f7f66548dd729914235ae7981dbc3ffd97f5152707d1ef8aeccbd4ab0dd4f9453982ae7c64e6b682284718392dfe98ebb7109fa633cd0f88b17b46a901e1439fc0ff4bd5e8d11086b2a8f3e6c9a48511dd0acecda14261458c34a4bb57b7c2d9f73448a495c59dbad1c5b53b6268d409a74c4a91d3e23f3e4aca71d11e9a5192ebac2bc2b0bbcced49b32410ba7aa49c13e41b87d5f5f64", 0xa4}, {&(0x7f0000000600)="6e61c4b0ef081681d435c8d7804add308bd70b10817fa963cd83d82f5426cf2e8d649b3df8aad346dff60230e0443d4c59228282c24ad7f5c905aeb7f9ec98cd9575486025f5999547e58bf0f2e2b074d07a89f9aa338b7adb8441f9848cd8ea4d4660916b15f15e8eb7e7", 0x6b}, {&(0x7f0000000680)}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x20040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000020000000", @ANYRES32=r6, @ANYBLOB="37f151963f6f2b79620668cf82499166eb29a238c7a1737334a470585c443d6c689daf07127dc38056b805f1fa7211695fc19fa5030ae3ed68e729aa1c30319922bada32caee5bbfeff0b865d3057087124bb76ac070ae5874f5c5158cf1fbf59838bb130126bd7b9afddbe85b0e052248df361f76edfaa93a0b3a72fc9614e419a5785268b7125f4e609278da5fa4ae2fa3937db5be1f", @ANYRES32=0x0, @ANYRES64=r9], 0x20)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x4)

3.875014884s ago: executing program 4 (id=7541):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) (fail_nth: 3)

3.743629229s ago: executing program 0 (id=7544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00abdefa6329fb650fbbb37a21e7000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000827edbc14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r5, &(0x7f0000000a00)}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000000000000000000000005d0545f867cd9e49e8b387552bd2ce032dea992b8647ea65ba4112e5052e2aa85006664fe1a6619ca4922abb97f2b5bc74c803e78806b031e5595b2ff9a36e1e1572433501941329f817b4898b00fec7a4c2ab4327af806fc8a55c0e78d81513e68fd307466f1a7fc876a71b8ee8fb4fb9351bb03336b33f24b4e357fb2d6379f4cf5b4c1f5f3d6d7b3a7d14b78005953f7fc2702c15a7db1ab7eaed917efb18a03202af8bec299cdb7ffc5dd3528ad311c2f217c9ecd63c1e80d3566f9555733bc9c27852addf14576725f04a6609d1fc1134192a05dce4ddabaef26bc1eca87b55628ec81f4db75ca164d4d61ba8dc58d6e3bdcb2b8803afb723951f022d3b", @ANYRES32=0x0, @ANYRES32=<r6=>0xffffffffffffffff], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x77fd0ba, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES16=r6, @ANYRES32=r8, @ANYBLOB="a7da14bde9c49646b4d62fe062a4b0cd493ccd8db31b4818c3c634d0394387e26dc9897dc166648d6a5f6bba32d7b3b22b870cb557dd6012e84c374d4ef137119dd29965835d1e298d81bf93bd5e5656c01fda3d525c29db72f7505474400c2785cfc359ede0a3b2bb59ef4d62f331fa17f0ba7376674062861e2021"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20)
recvmsg$unix(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x1f2ff)

3.275924914s ago: executing program 5 (id=7546):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a80", 0xb}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

3.179760847s ago: executing program 3 (id=7547):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2b1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b00)={r1, &(0x7f0000000940)="3af842866c2e96701fdb7eca2f7be675a185285e37a06181be4244e5182bd9a584a16918710d8f74f4a703b26b5add7981653ca2ca79c0bee7b6cf24185fa5a202bab849038a1a96f4c038f98722da04bf528cbcdc341f2efa3fc5f9402ce16c8ee3007e23e24fe335a66cb2155bf3ddc490583062caf65388a722b3d410a73ec7fec817bac7a0d8cb787f07a0242725acdddc394152032de06c91f659e8", &(0x7f0000000a00)=""/248, 0x4}, 0x20)
socketpair(0x2a, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f0000000880)={&(0x7f00000001c0)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/8, 0x8}], 0x9}, 0x10102)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04)

3.07204476s ago: executing program 4 (id=7548):
r0 = getpid()
r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x0, 0x20000000, 0xfffffffc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3, 0x9, 0x6, 0xb, 0x0, 0x1ff, 0x80008, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0xa800, 0x800, 0xf48, 0x9, 0xffffffff, 0x4, 0xafaf, 0x0, 0x9, 0x0, 0xfffffffffffffff7}, r0, 0x9, r1, 0x1)
recvmsg$kcm(r4, &(0x7f0000002500)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000002400), 0x6, &(0x7f0000002480)=""/75, 0x4b}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="130000000400520000040000001200e9919b829e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7, <r8=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=<r9=>r1, @ANYRES64=r7, @ANYRESHEX=r8, @ANYRES64, @ANYRES32, @ANYRES64=r1, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRESHEX=r9, @ANYRES8=r5, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=r0], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r12}, &(0x7f0000000280), &(0x7f0000000240)=r10}, 0x20)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000007c0)=r8, 0x4)
sendmsg$inet(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, 0x5c, 0x0, 0x0, 0x20}, 0x28)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x1, 0xb}, {0x10000002}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
close(r11)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
recvmsg(r14, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdd, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
r16 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b708000009000000698af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$tipc(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

2.989278793s ago: executing program 1 (id=7549):
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x1}, 0x0)

2.987994763s ago: executing program 5 (id=7550):
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000008000000060000000a00000003940600", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100002e050001ffc2d30000090000200000eac2", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r6, &(0x7f00000004c0)='syz1\x00', 0x1ff)
close(r4)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001c40))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@struct={0x8, 0x0, 0x0, 0x4, 0x0, 0x4}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x30, 0x0, 0x2e, 0x2b, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x3e}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2)
socket$kcm(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.851108917s ago: executing program 3 (id=7551):
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xaba58550b37a289, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r6, &(0x7f0000000180)="6e394a0baaaf", &(0x7f00000002c0)=""/252, 0x4}, 0x20)
recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

2.78025411s ago: executing program 1 (id=7552):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0xfffffffffffffe3e, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
syz_clone(0x10000c00, 0x0, 0x0, 0x0, &(0x7f0000002d00), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080))

2.629504435s ago: executing program 5 (id=7553):
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x8054)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, 0x0, 0x24000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.409067082s ago: executing program 1 (id=7554):
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4821a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0xf17b17cb08554aef, 0x7, 0xfffffffd, 0xfffe}, 0x0, 0x2000000000000001, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x5, 0xb, &(0x7f0000002d40)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x5}, 0x0, 0x7fffffffffd, 0x1, 0x0, 0x0, 0x704a, 0x0, 0x0, 0x9}, 0x0, 0x2000000000007, 0xffffffffffffffff, 0xb)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x22, 0x2, 0x21)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x4, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x80044943, 0x0)
r4 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1, &(0x7f0000000640)=""/8, 0x8}, 0x61)
r5 = socket$kcm(0x21, 0x2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1e00000000000000000008000800000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000bc509e8f116dfe66013bcd78341d997367a11924bd7682e73b6fde6961d19d85df278acfc3a7659d7fcf759e4f061f922753ef769ad14e9e4ce48e4a933e62451bcaf91c7a9a73feafd534853287f6ac8b5e2a1598c85a00b084a6192e5c6f498f2fe38d4aab283e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r7, 0x0, &(0x7f0000000200)=""/76}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x13, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r7, 0x58, &(0x7f0000000480)}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$sock(r5, &(0x7f0000000840)={&(0x7f0000000400)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)="74de1f3746670ded17be9e2b6f7f66548dd729914235ae7981dbc3ffd97f5152707d1ef8aeccbd4ab0dd4f9453982ae7c64e6b682284718392dfe98ebb7109fa633cd0f88b17b46a901e1439fc0ff4bd5e8d11086b2a8f3e6c9a48511dd0acecda14261458c34a4bb57b7c2d9f73448a495c59dbad1c5b53b6268d409a74c4a91d3e23f3e4aca71d11e9a5192ebac2bc2b0bbcced49b32410ba7aa49c13e41b87d5f5f64", 0xa4}, {&(0x7f0000000600)="6e61c4b0ef081681d435c8d7804add308bd70b10817fa963cd83d82f5426cf2e8d649b3df8aad346dff60230e0443d4c59228282c24ad7f5c905aeb7f9ec98cd9575486025f5999547e58bf0f2e2b074d07a89f9aa338b7adb8441f9848cd8ea4d4660916b15f15e8eb7e7", 0x6b}, {&(0x7f0000000680)}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x20040)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000020000000", @ANYRES32=r6, @ANYBLOB="37f151963f6f2b79620668cf82499166eb29a238c7a1737334a470585c443d6c689daf07127dc38056b805f1fa7211695fc19fa5030ae3ed68e729aa1c30319922bada32caee5bbfeff0b865d3057087124bb76ac070ae5874f5c5158cf1fbf59838bb130126bd7b9afddbe85b0e052248df361f76edfaa93a0b3a72fc9614e419a5785268b7125f4e609278da5fa4ae2fa3937db5be1f", @ANYRES32=0x0, @ANYRES64=r9], 0x20)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x4)

2.408827812s ago: executing program 3 (id=7555):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

2.378888423s ago: executing program 0 (id=7556):
syz_clone(0x2000000, &(0x7f0000000300)="6ab9164408b3975063cd79594acc162156e1744e7f93868e08263434f961f0467088301a9c56e96e876ed6bce017fd88d50b14a39c38354e1be1865731eb", 0x3e, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000189add3becbc9df36c19eaa0979082d17e50daf8619c0b81de8135db29147db76efc83162ea43c86c8fee8c61e3ae359e7f033996d6675233edfe823f436cc41c466038a466f106896542d2e4edbd43b7ca279c17d8a5336184b078816087391bb9d3c1223d6e96b1b2ccfeae6823d819f52e46aa29a26ae521a4cb81d37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20)

2.105525392s ago: executing program 3 (id=7557):
socket$kcm(0x2, 0x3, 0x84) (async, rerun: 32)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async, rerun: 32)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
close(0xffffffffffffffff)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0x6, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfc, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x5, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x2000000) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000240)=0x3) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305828, &(0x7f0000000040)=0x20000) (async)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfdf4}, 0x94) (async, rerun: 32)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32)
syz_open_procfs$namespace(0x0, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}, {0x0, 0x4, 0x10006}]}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.965382276s ago: executing program 1 (id=7558):
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

1.84269058s ago: executing program 0 (id=7559):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x11)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)

1.724370974s ago: executing program 4 (id=7560):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x46, 0xed, 0x1}, 0x28)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5d}}, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0x10, 0x3, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00fffe10008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)

1.714195345s ago: executing program 1 (id=7561):
r0 = socket$kcm(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050400000010"], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x23d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000015006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000380), 0x4)

239.944822ms ago: executing program 3 (id=7562):
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x1}, 0x0)

201.443983ms ago: executing program 4 (id=7563):
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x8054)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg(0xffffffffffffffff, 0x0, 0x24000000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x26, 0x800, 0x8, &(0x7f0000000040))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

159.826945ms ago: executing program 5 (id=7564):
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0xfffffffffffffe3e, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
syz_clone(0x10000c00, 0x0, 0x0, 0x0, &(0x7f0000002d00), 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, 0x0)

125.466486ms ago: executing program 1 (id=7565):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@var={0xb, 0x0, 0x0, 0xe, 0x1, 0x3}, @var={0xe, 0x0, 0x0, 0xe, 0x3, 0x2}, @struct={0xd, 0x7, 0x0, 0x4, 0x1, 0x1, [{0x4, 0x2, 0x5}, {0xd}, {0x6, 0x2, 0x3}, {0x3, 0x4, 0xb}, {0xf, 0x3, 0x9}, {0x1, 0x1, 0x3}, {0x9, 0x1, 0xe}]}, @struct={0x5, 0x8, 0x0, 0x4, 0x0, 0x9, [{0xc, 0x2, 0x5d}, {0x3, 0x5, 0x7}, {0x9, 0x1, 0xfffffff7}, {0x1, 0x1, 0x800}, {0xc, 0x3, 0x3}, {0x4, 0x1, 0x1ff}, {0x4, 0x1, 0x5}, {0x8, 0x3, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000680)=""/112, 0x107, 0x70, 0x1, 0x6, 0x10000}, 0x28)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x11, &(0x7f0000000280)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}], &(0x7f0000000340)='syzkaller\x00', 0xfa9b, 0x5e, &(0x7f00000003c0)=""/94, 0x41100, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x6, 0x5, 0x39f}, 0x10, 0x7f75, r4, 0x2, &(0x7f00000007c0)=[r3, r3, r3, r3, r3, r3], &(0x7f00000008c0)=[{0x4, 0x5, 0x8, 0x9}, {0x2, 0x4, 0x0, 0xa}]}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = syz_clone(0x80000800, &(0x7f0000000500)="1ebe07d7567a", 0x6, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="9c6b0fc64ee952")
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x6, 0x5, 0x1, 0x6, 0x0, 0x1, 0x40000, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0x4}, 0x4806, 0x6, 0x6, 0x4, 0x7, 0x5d, 0x9, 0x0, 0x4, 0x0, 0x2}, r8, 0xffffffffffffffff, r7, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x521f8277f5a26037, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private1, 0xffffffff, 0x4}, 0x80, &(0x7f0000000200)}, 0x20010)
close(r0)

77.027947ms ago: executing program 3 (id=7566):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff00000000090000001801", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48)

0s ago: executing program 0 (id=7567):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

kernel console output (not intermixed with test programs):

 an up link
[ 1142.981892][T25541] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.6610'.
[ 1143.234884][T25561] delete_channel: no stack
[ 1143.316899][T25566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6616'.
[ 1143.475644][T25570] device syzkaller0 entered promiscuous mode
[ 1143.508828][T25570] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[ 1143.551044][T25570] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.6619'.
[ 1143.798679][T25583] validate_nla: 4 callbacks suppressed
[ 1143.798695][T25583] netlink: 'syz.0.6631': attribute type 29 has an invalid length.
[ 1143.835026][T25583] netlink: 'syz.0.6631': attribute type 29 has an invalid length.
[ 1143.857917][T25580] netlink: 'syz.0.6631': attribute type 29 has an invalid length.
[ 1143.909293][T25580] netlink: 'syz.0.6631': attribute type 29 has an invalid length.
[ 1143.927499][T25586] netlink: 'syz.3.6621': attribute type 21 has an invalid length.
[ 1143.954383][T25586] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6621'.
[ 1143.994090][T25586] netlink: 'syz.3.6621': attribute type 4 has an invalid length.
[ 1144.015819][T25586] netlink: 'syz.3.6621': attribute type 5 has an invalid length.
[ 1145.121465][T25611] netlink: 'syz.1.6628': attribute type 21 has an invalid length.
[ 1145.212763][T25611] netlink: 'syz.1.6628': attribute type 6 has an invalid length.
[ 1145.324682][T25613] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1145.359070][T25613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1145.438532][T25613] netlink: 'syz.0.6629': attribute type 29 has an invalid length.
[ 1146.368000][T25639] __nla_validate_parse: 4 callbacks suppressed
[ 1146.368015][T25639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6638'.
[ 1146.536655][T25644] team0: Port device geneve1 added
[ 1146.620789][T25650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6642'.
[ 1146.871635][T25663] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6645'.
[ 1147.432164][T25678] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6649'.
[ 1147.457664][T25678] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6649'.
[ 1147.687955][T25694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6656'.
[ 1148.107039][T25709] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6661'.
[ 1148.144086][T25701] syz.3.6658[25701] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1148.144219][T25701] syz.3.6658[25701] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1150.699188][T25735] validate_nla: 15 callbacks suppressed
[ 1150.699205][T25735] netlink: 'syz.4.6668': attribute type 21 has an invalid length.
[ 1150.786569][T25735] netlink: 'syz.4.6668': attribute type 6 has an invalid length.
[ 1150.804117][T25735] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6668'.
[ 1150.923329][T25737] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6666'.
[ 1151.300820][T25750] netlink: 'syz.0.6673': attribute type 4 has an invalid length.
[ 1151.316846][T25750] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6673'.
[ 1151.558215][T25753] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6674'.
[ 1151.598799][T25756] netlink: 'syz.0.6675': attribute type 10 has an invalid length.
[ 1152.150884][T25773] FAULT_INJECTION: forcing a failure.
[ 1152.150884][T25773] name failslab, interval 1, probability 0, space 0, times 0
[ 1152.155673][T25771] netlink: 'syz.4.6680': attribute type 21 has an invalid length.
[ 1152.181985][T25773] CPU: 1 PID: 25773 Comm: syz.3.6681 Not tainted syzkaller #0
[ 1152.189517][T25773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1152.199613][T25773] Call Trace:
[ 1152.202935][T25773]  <TASK>
[ 1152.205900][T25773]  dump_stack_lvl+0x188/0x24e
[ 1152.210638][T25773]  ? show_regs_print_info+0x12/0x12
[ 1152.211459][T25771] netlink: 'syz.4.6680': attribute type 6 has an invalid length.
[ 1152.215857][T25773]  ? load_image+0x400/0x400
[ 1152.215903][T25773]  ? __might_sleep+0xd0/0xd0
[ 1152.215929][T25773]  ? __lock_acquire+0x7d10/0x7d10
[ 1152.215968][T25773]  should_fail_ex+0x399/0x4d0
[ 1152.216006][T25773]  should_failslab+0x5/0x20
[ 1152.216025][T25773]  slab_pre_alloc_hook+0x59/0x310
[ 1152.216065][T25773]  kmem_cache_alloc_node+0x5a/0x320
[ 1152.243615][T25771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6680'.
[ 1152.247105][T25773]  ? __alloc_skb+0xfc/0x7e0
[ 1152.247151][T25773]  __alloc_skb+0xfc/0x7e0
[ 1152.247170][T25773]  ? netlink_autobind+0xda/0x300
[ 1152.247208][T25773]  netlink_sendmsg+0x654/0xbd0
[ 1152.247259][T25773]  ? netlink_getsockopt+0x550/0x550
[ 1152.247291][T25773]  ? aa_sock_msg_perm+0x94/0x150
[ 1152.247321][T25773]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1152.300682][T25773]  ? security_socket_sendmsg+0x7c/0xa0
[ 1152.306171][T25773]  ? netlink_getsockopt+0x550/0x550
[ 1152.311416][T25773]  ____sys_sendmsg+0x5be/0x970
[ 1152.316191][T25773]  ? __sys_sendmsg_sock+0x30/0x30
[ 1152.321216][T25773]  ? __import_iovec+0x315/0x500
[ 1152.326420][T25773]  ? import_iovec+0x6f/0xa0
[ 1152.331096][T25773]  ___sys_sendmsg+0x2a2/0x360
[ 1152.335781][T25773]  ? __sys_sendmsg+0x290/0x290
[ 1152.340559][T25773]  ? __lock_acquire+0x7d10/0x7d10
[ 1152.345603][T25773]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1152.350451][T25773]  ? __x64_sys_sendmsg+0x80/0x80
[ 1152.355398][T25773]  ? lockdep_hardirqs_on+0x94/0x140
[ 1152.360598][T25773]  do_syscall_64+0x4c/0xa0
[ 1152.365007][T25773]  ? clear_bhb_loop+0x60/0xb0
[ 1152.369685][T25773]  ? clear_bhb_loop+0x60/0xb0
[ 1152.374362][T25773]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1152.380262][T25773] RIP: 0033:0x7f9c4d99ce59
[ 1152.384677][T25773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1152.404309][T25773] RSP: 002b:00007f9c4e919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1152.412743][T25773] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1152.420714][T25773] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1152.428702][T25773] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1152.436692][T25773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1152.444658][T25773] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1152.452642][T25773]  </TASK>
[ 1152.775309][T25785] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6683'.
[ 1153.694708][T22853] Bluetooth: hci2: command 0x0406 tx timeout
[ 1156.214724][T25808] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6692'.
[ 1156.306548][T25812] netlink: 'syz.1.6693': attribute type 21 has an invalid length.
[ 1156.650993][T25816] netlink: 'syz.0.6694': attribute type 21 has an invalid length.
[ 1156.686800][T25816] netlink: 'syz.0.6694': attribute type 6 has an invalid length.
[ 1156.710311][T25816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6694'.
[ 1157.554697][T25835] netlink: 'syz.1.6697': attribute type 3 has an invalid length.
[ 1157.562640][T25835] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6697'.
[ 1157.984954][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1158.004154][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1158.012661][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1158.031829][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1158.039882][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1158.047840][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1158.234786][T25843] chnl_net:caif_netlink_parms(): no params data found
[ 1158.304012][T25843] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1158.311337][T25843] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1158.320600][T25843] device bridge_slave_0 entered promiscuous mode
[ 1158.335231][T25843] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1158.347268][T25843] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1158.360191][T25843] device bridge_slave_1 entered promiscuous mode
[ 1158.453959][T25843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1158.469625][T25843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1158.556434][T25843] team0: Port device team_slave_0 added
[ 1158.576239][T25843] team0: Port device team_slave_1 added
[ 1158.648065][T25843] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1158.674843][T25843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1158.730672][T25843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1158.770821][T25868] netlink: 'syz.1.6709': attribute type 21 has an invalid length.
[ 1158.784231][T25868] netlink: 'syz.1.6709': attribute type 6 has an invalid length.
[ 1158.801427][T25868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6709'.
[ 1158.835714][T25843] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1158.844519][T25843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1158.878318][T25843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1159.129883][T25843] device hsr_slave_0 entered promiscuous mode
[ 1159.587045][T25843] device hsr_slave_1 entered promiscuous mode
[ 1159.601625][T25843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1159.618205][T25843] Cannot create hsr debugfs directory
[ 1159.631156][T25877] netlink: 'syz.1.6713': attribute type 5 has an invalid length.
[ 1159.663870][T25877] netlink: 'syz.1.6713': attribute type 30 has an invalid length.
[ 1159.673037][T25875] netlink: 'syz.0.6712': attribute type 21 has an invalid length.
[ 1159.694559][T25875] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6712'.
[ 1159.738666][T25875] netlink: 'syz.0.6712': attribute type 5 has an invalid length.
[ 1159.784060][T25875] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6712'.
[ 1160.104227][T22853] Bluetooth: hci4: command 0x0409 tx timeout
[ 1161.354153][T25843] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1161.371017][T25901] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.6719'.
[ 1161.385041][T25843] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1161.407942][T25843] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1161.447324][T25843] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1161.542847][T25908] validate_nla: 1 callbacks suppressed
[ 1161.542862][T25908] netlink: 'syz.4.6723': attribute type 21 has an invalid length.
[ 1161.570990][T25908] netlink: 'syz.4.6723': attribute type 6 has an invalid length.
[ 1161.598792][T25908] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6723'.
[ 1161.691199][T25843] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1161.718881][T25843] 8021q: adding VLAN 0 to HW filter on device team0
[ 1161.744585][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1161.768940][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1161.800880][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1161.812904][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1161.822448][ T9469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1161.829703][ T9469] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1161.839173][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1161.848187][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1161.860257][ T9469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1161.867416][ T9469] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1161.911390][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1161.928440][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1161.979734][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1161.998355][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1162.023818][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1162.042970][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1162.079331][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1162.114815][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1162.132983][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1162.150994][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1162.161232][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1162.174037][T22853] Bluetooth: hci4: command 0x041b tx timeout
[ 1162.188249][ T9469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1162.203004][T25843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1162.393477][T25933] netlink: 'syz.0.6728': attribute type 39 has an invalid length.
[ 1162.743036][ T9469] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1162.774786][T25943] netlink: 'syz.4.6731': attribute type 25 has an invalid length.
[ 1162.782651][T25943] netlink: 'syz.4.6731': attribute type 29 has an invalid length.
[ 1162.866407][T25944] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6731'.
[ 1162.881473][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1162.907368][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1162.944818][T25843] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1163.182236][T25953] netlink: 'syz.0.6735': attribute type 21 has an invalid length.
[ 1163.204346][T25953] netlink: 'syz.0.6735': attribute type 6 has an invalid length.
[ 1163.253372][T25953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6735'.
[ 1163.421730][T25959] FAULT_INJECTION: forcing a failure.
[ 1163.421730][T25959] name failslab, interval 1, probability 0, space 0, times 0
[ 1163.465209][T25959] CPU: 1 PID: 25959 Comm: syz.1.6737 Not tainted syzkaller #0
[ 1163.472731][T25959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1163.482807][T25959] Call Trace:
[ 1163.486104][T25959]  <TASK>
[ 1163.489046][T25959]  dump_stack_lvl+0x188/0x24e
[ 1163.493742][T25959]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1163.499920][T25959]  ? show_regs_print_info+0x12/0x12
[ 1163.505141][T25959]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1163.511347][T25959]  should_fail_ex+0x399/0x4d0
[ 1163.516043][T25959]  should_failslab+0x5/0x20
[ 1163.520541][T25959]  slab_pre_alloc_hook+0x59/0x310
[ 1163.525563][T25959]  ? tipc_nl_compat_doit+0x431/0x610
[ 1163.530847][T25959]  kmem_cache_alloc_node+0x5a/0x320
[ 1163.536064][T25959]  ? __alloc_skb+0xfc/0x7e0
[ 1163.540653][T25959]  __alloc_skb+0xfc/0x7e0
[ 1163.544982][T25959]  tipc_get_err_tlv+0x41/0x340
[ 1163.549748][T25959]  tipc_nl_compat_recv+0x7b8/0xaf0
[ 1163.554859][T25959]  ? rcu_is_watching+0x11/0xa0
[ 1163.559631][T25959]  ? tipc_netlink_compat_stop+0x20/0x20
[ 1163.565175][T25959]  ? lockdep_hardirqs_on+0x94/0x140
[ 1163.570372][T25959]  ? tipc_nl_bearer_disable+0x30/0x30
[ 1163.575742][T25959]  ? tipc_nl_compat_dumpit+0x780/0x780
[ 1163.581203][T25959]  ? genl_family_rcv_msg_doit+0x9a/0x330
[ 1163.586925][T25959]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1163.592476][T25959]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1163.598376][T25959]  ? memset+0x1e/0x40
[ 1163.602355][T25959]  ? genl_get_cmd+0x55f/0x8b0
[ 1163.607032][T25959]  genl_rcv_msg+0x604/0x790
[ 1163.611539][T25959]  ? genl_bind+0x360/0x360
[ 1163.615950][T25959]  ? tipc_netlink_compat_stop+0x20/0x20
[ 1163.621502][T25959]  netlink_rcv_skb+0x1fb/0x450
[ 1163.626261][T25959]  ? genl_bind+0x360/0x360
[ 1163.630682][T25959]  ? netlink_ack+0x1170/0x1170
[ 1163.635450][T25959]  ? down_read+0x1a8/0x2d0
[ 1163.639867][T25959]  genl_rcv+0x24/0x40
[ 1163.643870][T25959]  netlink_unicast+0x74d/0x8d0
[ 1163.648637][T25959]  netlink_sendmsg+0x8ad/0xbd0
[ 1163.653401][T25959]  ? netlink_getsockopt+0x550/0x550
[ 1163.658595][T25959]  ? __might_fault+0x98/0x120
[ 1163.663280][T25959]  ? aa_sock_msg_perm+0x94/0x150
[ 1163.668221][T25959]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1163.673499][T25959]  ? security_socket_sendmsg+0x7c/0xa0
[ 1163.678952][T25959]  ? netlink_getsockopt+0x550/0x550
[ 1163.684147][T25959]  ____sys_sendmsg+0x5be/0x970
[ 1163.688912][T25959]  ? __sys_sendmsg_sock+0x30/0x30
[ 1163.693934][T25959]  ? __import_iovec+0x315/0x500
[ 1163.698791][T25959]  ? import_iovec+0x6f/0xa0
[ 1163.703296][T25959]  ___sys_sendmsg+0x2a2/0x360
[ 1163.707975][T25959]  ? __sys_sendmsg+0x290/0x290
[ 1163.712750][T25959]  ? trace_call_bpf+0xbf/0x6b0
[ 1163.717533][T25959]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1163.722407][T25959]  ? __x64_sys_sendmsg+0x80/0x80
[ 1163.727364][T25959]  ? lockdep_hardirqs_on+0x94/0x140
[ 1163.732572][T25959]  do_syscall_64+0x4c/0xa0
[ 1163.736993][T25959]  ? clear_bhb_loop+0x60/0xb0
[ 1163.741676][T25959]  ? clear_bhb_loop+0x60/0xb0
[ 1163.746358][T25959]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1163.752252][T25959] RIP: 0033:0x7fa3a239ce59
[ 1163.756664][T25959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1163.776284][T25959] RSP: 002b:00007fa3a32cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1163.784705][T25959] RAX: ffffffffffffffda RBX: 00007fa3a2615fa0 RCX: 00007fa3a239ce59
[ 1163.792674][T25959] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1163.800640][T25959] RBP: 00007fa3a32cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1163.808606][T25959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1163.816571][T25959] R13: 00007fa3a2616038 R14: 00007fa3a2615fa0 R15: 00007ffc3c6c5d48
[ 1163.824554][T25959]  </TASK>
[ 1164.007431][T25970] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6738'.
[ 1164.254366][T22853] Bluetooth: hci4: command 0x040f tx timeout
[ 1164.499244][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1164.519327][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1164.558787][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1164.577984][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1164.627173][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1164.665037][ T9455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1164.722010][T25843] device veth0_vlan entered promiscuous mode
[ 1164.756875][T25984] netlink: 'syz.4.6744': attribute type 10 has an invalid length.
[ 1164.784218][T25984] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6744'.
[ 1164.956976][T25843] device veth1_vlan entered promiscuous mode
[ 1165.149507][T25843] device veth0_macvtap entered promiscuous mode
[ 1165.250514][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1165.276789][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1165.332527][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1165.402841][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1165.449885][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1166.349938][T22853] Bluetooth: hci4: command 0x0419 tx timeout
[ 1166.550768][T25843] device veth1_macvtap entered promiscuous mode
[ 1166.596810][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1166.612406][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1166.623547][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1166.634737][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1166.646281][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1166.658914][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1166.671189][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1166.681886][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1166.692005][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1166.706087][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1166.725653][T25843] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1166.751877][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1166.787203][ T9472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1167.621492][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.654881][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.667853][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.679304][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.690094][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.703003][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.713830][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.727721][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.745593][T25843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1167.763143][T25843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1167.779701][T25843] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1167.803604][T26008] netlink: 'syz.3.6749': attribute type 21 has an invalid length.
[ 1167.818417][T26008] netlink: 'syz.3.6749': attribute type 6 has an invalid length.
[ 1167.844226][T26008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6749'.
[ 1167.877062][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1167.891504][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1167.915551][T25843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.942171][T25843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.953624][T25843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1167.962676][T25843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1168.134357][ T9480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.160463][ T9480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1168.184976][ T9467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1168.225037][ T9465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1168.232960][ T9465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1168.248801][ T9480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1168.553968][T26022] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6753'.
[ 1169.222112][T26032] netlink: 'syz.0.6757': attribute type 39 has an invalid length.
[ 1170.082992][T26037] netlink: 'syz.3.6759': attribute type 10 has an invalid length.
[ 1170.104369][T26037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6759'.
[ 1170.153856][T26037] device dummy0 entered promiscuous mode
[ 1170.179607][T26037] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1170.285139][T26044] netlink: 'syz.0.6761': attribute type 21 has an invalid length.
[ 1170.309641][T26044] netlink: 'syz.0.6761': attribute type 6 has an invalid length.
[ 1170.341609][T26044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6761'.
[ 1171.185626][T26058] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6766'.
[ 1171.588254][T26069] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6769'.
[ 1171.980849][T26080] FAULT_INJECTION: forcing a failure.
[ 1171.980849][T26080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1172.033369][T26080] CPU: 1 PID: 26080 Comm: syz.3.6781 Not tainted syzkaller #0
[ 1172.040904][T26080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1172.050980][T26080] Call Trace:
[ 1172.054274][T26080]  <TASK>
[ 1172.057219][T26080]  dump_stack_lvl+0x188/0x24e
[ 1172.061920][T26080]  ? show_regs_print_info+0x12/0x12
[ 1172.067138][T26080]  ? load_image+0x400/0x400
[ 1172.071670][T26080]  ? __lock_acquire+0x7d10/0x7d10
[ 1172.076718][T26080]  should_fail_ex+0x399/0x4d0
[ 1172.081433][T26080]  _copy_from_user+0x2c/0x170
[ 1172.086128][T26080]  iovec_from_user+0x143/0x360
[ 1172.090905][T26080]  __import_iovec+0x6d/0x500
[ 1172.095590][T26080]  import_iovec+0x6f/0xa0
[ 1172.099921][T26080]  ___sys_sendmsg+0x252/0x360
[ 1172.104597][T26080]  ? __sys_sendmsg+0x290/0x290
[ 1172.109374][T26080]  ? trace_call_bpf+0xbf/0x6b0
[ 1172.114161][T26080]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1172.119008][T26080]  ? ct_nmi_exit+0x145/0x1c0
[ 1172.123594][T26080]  ? __x64_sys_sendmsg+0x80/0x80
[ 1172.128541][T26080]  ? lockdep_hardirqs_on+0x94/0x140
[ 1172.133743][T26080]  do_syscall_64+0x4c/0xa0
[ 1172.138153][T26080]  ? clear_bhb_loop+0x60/0xb0
[ 1172.142835][T26080]  ? clear_bhb_loop+0x60/0xb0
[ 1172.147514][T26080]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1172.153407][T26080] RIP: 0033:0x7f9c4d99ce59
[ 1172.157816][T26080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1172.177437][T26080] RSP: 002b:00007f9c4e919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1172.185847][T26080] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1172.193830][T26080] RDX: 0000000020004c04 RSI: 0000200000000080 RDI: 0000000000000003
[ 1172.201795][T26080] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1172.209758][T26080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1172.217721][T26080] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1172.225703][T26080]  </TASK>
[ 1172.385281][T26084] netlink: 'syz.1.6772': attribute type 10 has an invalid length.
[ 1172.487651][T26084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6772'.
[ 1172.596318][T26084] device dummy0 entered promiscuous mode
[ 1172.672607][T26084] bridge0: port 3(dummy0) entered blocking state
[ 1172.806471][T26084] bridge0: port 3(dummy0) entered disabled state
[ 1172.925757][T26084] bridge0: port 3(dummy0) entered blocking state
[ 1172.932355][T26084] bridge0: port 3(dummy0) entered forwarding state
[ 1172.964782][T26088] netlink: 'syz.0.6773': attribute type 21 has an invalid length.
[ 1173.003934][T26088] netlink: 'syz.0.6773': attribute type 6 has an invalid length.
[ 1173.012047][T26088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6773'.
[ 1173.024673][T26093] netlink: 'syz.5.6771': attribute type 10 has an invalid length.
[ 1173.086058][T26093] team0: Device hsr_slave_0 failed to register rx_handler
[ 1173.136896][T26096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6776'.
[ 1173.524072][T26104] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6779'.
[ 1173.661159][T26104] netlink: 'syz.3.6779': attribute type 2 has an invalid length.
[ 1173.691160][T26104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6779'.
[ 1173.879628][T26112] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6782'.
[ 1175.284621][T26119] netlink: 'syz.1.6783': attribute type 23 has an invalid length.
[ 1175.358881][T26119] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6783'.
[ 1175.465095][T26118] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6784'.
[ 1175.495551][T26118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1177.218176][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.224642][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.414841][T26136] netlink: 'syz.5.6789': attribute type 21 has an invalid length.
[ 1178.422754][T26136] netlink: 'syz.5.6789': attribute type 6 has an invalid length.
[ 1178.473685][T26136] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6789'.
[ 1178.846559][T26155] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6794'.
[ 1179.703536][T26170] bond0: (slave macvlan0): Error: Slave device does not support XDP
[ 1180.036129][T26181] netlink: 'syz.5.6804': attribute type 21 has an invalid length.
[ 1180.059198][T26181] netlink: 'syz.5.6804': attribute type 6 has an invalid length.
[ 1180.073273][T26181] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6804'.
[ 1180.524717][T26193] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6807'.
[ 1182.207912][T26197] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6808'.
[ 1182.448286][T26208] FAULT_INJECTION: forcing a failure.
[ 1182.448286][T26208] name failslab, interval 1, probability 0, space 0, times 0
[ 1182.495556][T26208] CPU: 0 PID: 26208 Comm: syz.0.6812 Not tainted syzkaller #0
[ 1182.503105][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1182.513204][T26208] Call Trace:
[ 1182.516527][T26208]  <TASK>
[ 1182.519495][T26208]  dump_stack_lvl+0x188/0x24e
[ 1182.524227][T26208]  ? show_regs_print_info+0x12/0x12
[ 1182.529566][T26208]  ? load_image+0x400/0x400
[ 1182.534127][T26208]  ? __might_sleep+0xd0/0xd0
[ 1182.538765][T26208]  ? __lock_acquire+0x7d10/0x7d10
[ 1182.543867][T26208]  should_fail_ex+0x399/0x4d0
[ 1182.548603][T26208]  should_failslab+0x5/0x20
[ 1182.553004][T26209] delete_channel: no stack
[ 1182.553118][T26208]  slab_pre_alloc_hook+0x59/0x310
[ 1182.562600][T26208]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1182.568459][T26208]  __kmem_cache_alloc_node+0x4f/0x260
[ 1182.573885][T26208]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1182.579733][T26208]  kmalloc_trace+0x26/0xe0
[ 1182.584212][T26208]  apparmor_sk_alloc_security+0x74/0x100
[ 1182.589892][T26208]  security_sk_alloc+0x6a/0xa0
[ 1182.594707][T26208]  sk_prot_alloc+0x101/0x210
[ 1182.599338][T26208]  ? sk_alloc+0x20/0x340
[ 1182.603656][T26208]  sk_alloc+0x36/0x340
[ 1182.607771][T26208]  ? bpf_ctx_init+0x163/0x1a0
[ 1182.612516][T26208]  ? bpf_prog_test_run_skb+0x275/0x1890
[ 1182.618082][T26208]  bpf_prog_test_run_skb+0x371/0x1890
[ 1182.623478][T26208]  ? __fget_files+0x28/0x4b0
[ 1182.628112][T26208]  ? cpu_online+0xa0/0xa0
[ 1182.632458][T26208]  bpf_prog_test_run+0x31e/0x390
[ 1182.637415][T26208]  __sys_bpf+0x62b/0x780
[ 1182.641676][T26208]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1182.647093][T26208]  ? lock_chain_count+0x20/0x20
[ 1182.651975][T26208]  __x64_sys_bpf+0x78/0x90
[ 1182.656412][T26208]  do_syscall_64+0x4c/0xa0
[ 1182.660935][T26208]  ? clear_bhb_loop+0x60/0xb0
[ 1182.665643][T26208]  ? clear_bhb_loop+0x60/0xb0
[ 1182.670351][T26208]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1182.676257][T26208] RIP: 0033:0x7f77c799ce59
[ 1182.680680][T26208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1182.700301][T26208] RSP: 002b:00007f77c8802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1182.708733][T26208] RAX: ffffffffffffffda RBX: 00007f77c7c15fa0 RCX: 00007f77c799ce59
[ 1182.716713][T26208] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a
[ 1182.724691][T26208] RBP: 00007f77c8802090 R08: 0000000000000000 R09: 0000000000000000
[ 1182.732666][T26208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1182.740645][T26208] R13: 00007f77c7c16038 R14: 00007f77c7c15fa0 R15: 00007ffed3fc77c8
[ 1182.748665][T26208]  </TASK>
[ 1182.761438][T26209] delete_channel: no stack
[ 1182.820170][T26204] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6809'.
[ 1182.861115][T26204] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1183.555069][T26226] netlink: 'syz.5.6820': attribute type 21 has an invalid length.
[ 1183.562999][T26226] netlink: 'syz.5.6820': attribute type 6 has an invalid length.
[ 1183.625593][T26226] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6820'.
[ 1183.782106][T26233] netlink: 'syz.4.6822': attribute type 39 has an invalid length.
[ 1183.905059][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1183.966097][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1183.975322][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1183.984486][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1183.993591][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.002748][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.011870][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.020987][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.030094][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.039229][T26236] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1184.136900][T26248] netlink: 'syz.3.6826': attribute type 1 has an invalid length.
[ 1184.154347][T26248] netlink: 'syz.3.6826': attribute type 4 has an invalid length.
[ 1184.177816][T26248] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6826'.
[ 1184.275552][T26251] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6827'.
[ 1184.583671][T26259] netlink: 'syz.1.6840': attribute type 1 has an invalid length.
[ 1184.600924][T26259] netlink: 'syz.1.6840': attribute type 4 has an invalid length.
[ 1184.620118][T26259] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6840'.
[ 1184.631066][T26260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6838'.
[ 1184.881357][T26271] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6833'.
[ 1185.121346][T26275] delete_channel: no stack
[ 1185.233055][T26279] netlink: 'syz.0.6836': attribute type 21 has an invalid length.
[ 1185.262331][T26279] netlink: 'syz.0.6836': attribute type 6 has an invalid length.
[ 1185.297531][T26279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6836'.
[ 1185.895870][T26288] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6842'.
[ 1185.924280][ T4289] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4
[ 1186.392208][T26301] netlink: 'syz.1.6845': attribute type 1 has an invalid length.
[ 1186.440898][T26301] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6845'.
[ 1186.907296][T26315] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6850'.
[ 1186.999534][T26323] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6852'.
[ 1187.021734][T26318] delete_channel: no stack
[ 1188.402798][T26356] delete_channel: no stack
[ 1188.713069][T26380] validate_nla: 7 callbacks suppressed
[ 1188.713085][T26380] netlink: 'syz.4.6871': attribute type 1 has an invalid length.
[ 1188.739345][T26380] netlink: 'syz.4.6871': attribute type 4 has an invalid length.
[ 1189.119976][T26399] netlink: 'syz.3.6879': attribute type 21 has an invalid length.
[ 1189.138378][T26399] netlink: 'syz.3.6879': attribute type 6 has an invalid length.
[ 1189.202391][T26399] __nla_validate_parse: 8 callbacks suppressed
[ 1189.202407][T26399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6879'.
[ 1189.316597][T26404] netlink: 'syz.4.6880': attribute type 29 has an invalid length.
[ 1189.336630][T26404] netlink: 'syz.4.6880': attribute type 29 has an invalid length.
[ 1189.359379][T26403] netlink: 'syz.4.6880': attribute type 29 has an invalid length.
[ 1189.380871][T26410] netlink: 'syz.4.6880': attribute type 29 has an invalid length.
[ 1189.422665][T26400] delete_channel: no stack
[ 1190.132796][T26421] syz.0.6895[26421] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1190.133134][T26421] syz.0.6895[26421] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1190.374911][T26425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6886'.
[ 1190.618459][T26431] netlink: 'syz.5.6888': attribute type 1 has an invalid length.
[ 1190.637213][T26431] netlink: 'syz.5.6888': attribute type 4 has an invalid length.
[ 1190.704322][T26431] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6888'.
[ 1190.765354][T26440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6891'.
[ 1190.902549][T26443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6892'.
[ 1191.008508][T26449] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6893'.
[ 1191.130749][T26446] delete_channel: no stack
[ 1191.667171][T26470] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6901'.
[ 1192.404131][T26484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6905'.
[ 1192.918779][T26484] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1192.943311][T26484] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1192.971133][T26484] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1192.980680][T26490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6907'.
[ 1193.118813][T26492] device syzkaller0 entered promiscuous mode
[ 1193.171464][T26497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1193.207500][T26497] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1193.231637][T26506] delete_channel: no stack
[ 1193.237327][T26499] delete_channel: no stack
[ 1193.240349][T26506] delete_channel: no stack
[ 1193.253220][T26506] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6910'.
[ 1193.263118][T26506] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1193.286912][T26497] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1193.976721][ T9480] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1195.732638][T26532] validate_nla: 7 callbacks suppressed
[ 1195.732768][T26532] netlink: 'syz.5.6919': attribute type 2 has an invalid length.
[ 1196.053521][T26543] netlink: 'syz.5.6922': attribute type 21 has an invalid length.
[ 1196.077121][T26543] netlink: 'syz.5.6922': attribute type 6 has an invalid length.
[ 1196.114256][T26543] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6922'.
[ 1196.274858][T26544] delete_channel: no stack
[ 1196.323049][T26550] netlink: 'syz.5.6924': attribute type 29 has an invalid length.
[ 1196.344490][T26550] netlink: 'syz.5.6924': attribute type 29 has an invalid length.
[ 1196.411199][T26547] netlink: 'syz.5.6924': attribute type 29 has an invalid length.
[ 1196.445911][T26554] netlink: 'syz.3.6925': attribute type 2 has an invalid length.
[ 1196.505305][T26551] netlink: 'syz.3.6925': attribute type 10 has an invalid length.
[ 1196.534681][T26551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1196.622631][T26551] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1196.721227][T26551] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1196.745856][T26560] delete_channel: no stack
[ 1196.767355][T26561] netlink: 'syz.0.6930': attribute type 10 has an invalid length.
[ 1196.811314][T26561] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6930'.
[ 1197.252328][T26567] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6930'.
[ 1197.267808][T26573] FAULT_INJECTION: forcing a failure.
[ 1197.267808][T26573] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1197.278086][T26579] netlink: 'syz.3.6934': attribute type 21 has an invalid length.
[ 1197.281503][T26573] CPU: 0 PID: 26573 Comm: syz.5.6933 Not tainted syzkaller #0
[ 1197.289992][T26579] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6934'.
[ 1197.296114][T26573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1197.296130][T26573] Call Trace:
[ 1197.296138][T26573]  <TASK>
[ 1197.296146][T26573]  dump_stack_lvl+0x188/0x24e
[ 1197.296175][T26573]  ? show_regs_print_info+0x12/0x12
[ 1197.296193][T26573]  ? load_image+0x400/0x400
[ 1197.335987][T26573]  ? __lock_acquire+0x7d10/0x7d10
[ 1197.341044][T26573]  ? snprintf+0xe5/0x140
[ 1197.345320][T26573]  should_fail_ex+0x399/0x4d0
[ 1197.350069][T26573]  _copy_to_user+0x2c/0x130
[ 1197.354605][T26573]  simple_read_from_buffer+0xe3/0x150
[ 1197.360007][T26573]  proc_fail_nth_read+0x1a6/0x220
[ 1197.365068][T26573]  ? proc_fault_inject_write+0x310/0x310
[ 1197.370733][T26573]  ? fsnotify_perm+0x248/0x550
[ 1197.375532][T26573]  ? proc_fault_inject_write+0x310/0x310
[ 1197.381194][T26573]  vfs_read+0x2de/0xa00
[ 1197.385392][T26573]  ? kernel_read+0x1e0/0x1e0
[ 1197.390002][T26573]  ? __fget_files+0x28/0x4b0
[ 1197.394593][T26573]  ? __fget_files+0x28/0x4b0
[ 1197.399188][T26573]  ? __fget_files+0x43d/0x4b0
[ 1197.403872][T26573]  ? __fdget_pos+0x2ae/0x360
[ 1197.408545][T26573]  ? ksys_read+0x71/0x250
[ 1197.412877][T26573]  ksys_read+0x14c/0x250
[ 1197.417127][T26573]  ? vfs_write+0xa30/0xa30
[ 1197.421548][T26573]  ? lockdep_hardirqs_on+0x94/0x140
[ 1197.426747][T26573]  do_syscall_64+0x4c/0xa0
[ 1197.431162][T26573]  ? clear_bhb_loop+0x60/0xb0
[ 1197.435841][T26573]  ? clear_bhb_loop+0x60/0xb0
[ 1197.440523][T26573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1197.446434][T26573] RIP: 0033:0x7fde4a15d68e
[ 1197.450861][T26573] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1197.470649][T26573] RSP: 002b:00007fde4afcafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1197.479062][T26573] RAX: ffffffffffffffda RBX: 00007fde4afcb6c0 RCX: 00007fde4a15d68e
[ 1197.487030][T26573] RDX: 000000000000000f RSI: 00007fde4afcb0a0 RDI: 0000000000000004
[ 1197.495002][T26573] RBP: 00007fde4afcb090 R08: 0000000000000000 R09: 0000000000000000
[ 1197.502966][T26573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1197.510934][T26573] R13: 00007fde4a416038 R14: 00007fde4a415fa0 R15: 00007ffe66f43ed8
[ 1197.518916][T26573]  </TASK>
[ 1197.929940][T26590] delete_channel: no stack
[ 1198.357806][T26614] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6944'.
[ 1198.370117][T26612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6943'.
[ 1198.505907][T26612] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1198.525408][T26612] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1198.625638][T26612] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1198.806018][T26620] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6946'.
[ 1199.060463][T26628] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6950'.
[ 1199.455449][T26642] FAULT_INJECTION: forcing a failure.
[ 1199.455449][T26642] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1199.470609][T26642] CPU: 0 PID: 26642 Comm: syz.5.6953 Not tainted syzkaller #0
[ 1199.478113][T26642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1199.488192][T26642] Call Trace:
[ 1199.491488][T26642]  <TASK>
[ 1199.494436][T26642]  dump_stack_lvl+0x188/0x24e
[ 1199.499132][T26642]  ? show_regs_print_info+0x12/0x12
[ 1199.504347][T26642]  ? load_image+0x400/0x400
[ 1199.508871][T26642]  ? __lock_acquire+0x7d10/0x7d10
[ 1199.513926][T26642]  should_fail_ex+0x399/0x4d0
[ 1199.518625][T26642]  _copy_from_user+0x2c/0x170
[ 1199.523341][T26642]  __copy_msghdr+0x3b7/0x580
[ 1199.527941][T26642]  ___sys_sendmsg+0x210/0x360
[ 1199.532650][T26642]  ? __sys_sendmsg+0x290/0x290
[ 1199.537455][T26642]  ? __lock_acquire+0x7d10/0x7d10
[ 1199.542521][T26642]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1199.547390][T26642]  ? ct_nmi_exit+0x145/0x1c0
[ 1199.552001][T26642]  ? __x64_sys_sendmsg+0x80/0x80
[ 1199.556973][T26642]  ? lockdep_hardirqs_on+0x94/0x140
[ 1199.562198][T26642]  do_syscall_64+0x4c/0xa0
[ 1199.566635][T26642]  ? clear_bhb_loop+0x60/0xb0
[ 1199.571340][T26642]  ? clear_bhb_loop+0x60/0xb0
[ 1199.576042][T26642]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1199.581960][T26642] RIP: 0033:0x7fde4a19ce59
[ 1199.586397][T26642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1199.606026][T26642] RSP: 002b:00007fde4afcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1199.614466][T26642] RAX: ffffffffffffffda RBX: 00007fde4a415fa0 RCX: 00007fde4a19ce59
[ 1199.622591][T26642] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000015
[ 1199.630587][T26642] RBP: 00007fde4afcb090 R08: 0000000000000000 R09: 0000000000000000
[ 1199.638584][T26642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1199.646586][T26642] R13: 00007fde4a416038 R14: 00007fde4a415fa0 R15: 00007ffe66f43ed8
[ 1199.654593][T26642]  </TASK>
[ 1200.217072][T26665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6960'.
[ 1201.009803][T26690] validate_nla: 8 callbacks suppressed
[ 1201.009819][T26690] netlink: 'syz.4.6966': attribute type 39 has an invalid length.
[ 1201.879465][T26722] netlink: 'syz.4.6974': attribute type 21 has an invalid length.
[ 1201.941649][T26722] netlink: 'syz.4.6974': attribute type 6 has an invalid length.
[ 1201.947483][ T4289] Bluetooth: hci1: ISO packet for unknown connection handle 44
[ 1201.976523][T26722] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6974'.
[ 1202.406794][T26734] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6978'.
[ 1202.755092][T26752] netlink: 'syz.3.6985': attribute type 1 has an invalid length.
[ 1204.963791][T26760] netlink: 'syz.1.6988': attribute type 21 has an invalid length.
[ 1204.971700][T26760] netlink: 'syz.1.6988': attribute type 6 has an invalid length.
[ 1204.993943][T26760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6988'.
[ 1205.811457][T26784] netlink: 'syz.5.6995': attribute type 21 has an invalid length.
[ 1205.824004][T26784] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6995'.
[ 1205.833213][T26784] netlink: 'syz.5.6995': attribute type 5 has an invalid length.
[ 1205.841337][T26784] netlink: 'syz.5.6995': attribute type 6 has an invalid length.
[ 1205.849594][T26784] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6995'.
[ 1206.083032][T26793] netlink: 'syz.3.6997': attribute type 21 has an invalid length.
[ 1206.101482][T26793] netlink: 'syz.3.6997': attribute type 6 has an invalid length.
[ 1206.111385][T26793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6997'.
[ 1206.121844][T26796] netlink: 'syz.1.6998': attribute type 39 has an invalid length.
[ 1206.270189][ T4289] Bluetooth: hci3: ISO packet for unknown connection handle 44
[ 1206.492027][T26810] netlink: 'syz.0.7002': attribute type 21 has an invalid length.
[ 1206.520122][T26810] netlink: 'syz.0.7002': attribute type 6 has an invalid length.
[ 1206.542058][T26810] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7002'.
[ 1207.761715][T26830] netlink: 'syz.0.7010': attribute type 21 has an invalid length.
[ 1207.780663][T26830] netlink: 'syz.0.7010': attribute type 6 has an invalid length.
[ 1207.814007][T26830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7010'.
[ 1207.836388][T26832] netlink: 'syz.3.7011': attribute type 21 has an invalid length.
[ 1207.925783][T26832] netlink: 'syz.3.7011': attribute type 6 has an invalid length.
[ 1207.997739][T26832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7011'.
[ 1208.144813][T26836] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7012'.
[ 1208.478703][T26850] netlink: 'syz.0.7018': attribute type 5 has an invalid length.
[ 1208.492361][T26850] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7018'.
[ 1208.509754][T26848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7017'.
[ 1210.304561][T26890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7030'.
[ 1210.630499][T26893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7031'.
[ 1210.809818][T26908] FAULT_INJECTION: forcing a failure.
[ 1210.809818][T26908] name failslab, interval 1, probability 0, space 0, times 0
[ 1210.919739][T26908] CPU: 1 PID: 26908 Comm: syz.4.7036 Not tainted syzkaller #0
[ 1210.927275][T26908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1210.937361][T26908] Call Trace:
[ 1210.940658][T26908]  <TASK>
[ 1210.943605][T26908]  dump_stack_lvl+0x188/0x24e
[ 1210.948303][T26908]  ? show_regs_print_info+0x12/0x12
[ 1210.953507][T26908]  ? load_image+0x400/0x400
[ 1210.958014][T26908]  ? __lock_acquire+0x7d10/0x7d10
[ 1210.963046][T26908]  should_fail_ex+0x399/0x4d0
[ 1210.967726][T26908]  should_failslab+0x5/0x20
[ 1210.972228][T26908]  slab_pre_alloc_hook+0x59/0x310
[ 1210.977352][T26908]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1210.983521][T26908]  ? fib_create_info+0xa53/0x2490
[ 1210.988584][T26908]  __kmem_cache_alloc_node+0x4f/0x260
[ 1210.993989][T26908]  ? fib_create_info+0xa53/0x2490
[ 1210.999024][T26908]  __kmalloc+0xa0/0x240
[ 1211.003190][T26908]  fib_create_info+0xa53/0x2490
[ 1211.008079][T26908]  ? pcpu_alloc+0x11ff/0x19e0
[ 1211.012787][T26908]  fib_table_insert+0xc2/0x1b20
[ 1211.017651][T26908]  ? fib_trie_table+0x134/0x1c0
[ 1211.022497][T26908]  ? fib_new_table+0x27b/0x2d0
[ 1211.027261][T26908]  inet_rtm_newroute+0x147/0x230
[ 1211.032205][T26908]  ? rcu_read_unlock+0xa0/0xa0
[ 1211.036979][T26908]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1211.042084][T26908]  ? rtnetlink_rcv_msg+0x226/0xfc0
[ 1211.047190][T26908]  ? rcu_read_unlock+0xa0/0xa0
[ 1211.051960][T26908]  rtnetlink_rcv_msg+0x87c/0xfc0
[ 1211.056901][T26908]  ? rtnetlink_bind+0x80/0x80
[ 1211.061570][T26908]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1211.067023][T26908]  ? lockdep_hardirqs_on+0x94/0x140
[ 1211.072224][T26908]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1211.077623][T26908]  ? _local_bh_enable+0xa0/0xa0
[ 1211.082473][T26908]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1211.087588][T26908]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1211.092788][T26908]  ? __dev_queue_xmit+0x1cd2/0x37c0
[ 1211.097995][T26908]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1211.103138][T26908]  ? perf_trace_lock+0xf8/0x390
[ 1211.107991][T26908]  ? __copy_skb_header+0x3ba/0x4f0
[ 1211.113108][T26908]  ? trace_event_raw_event_lock+0x250/0x250
[ 1211.119004][T26908]  ? __skb_clone+0x480/0x790
[ 1211.123595][T26908]  netlink_rcv_skb+0x1fb/0x450
[ 1211.128357][T26908]  ? rtnetlink_bind+0x80/0x80
[ 1211.133034][T26908]  ? netlink_ack+0x1170/0x1170
[ 1211.137813][T26908]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1211.143038][T26908]  netlink_unicast+0x74d/0x8d0
[ 1211.147848][T26908]  netlink_sendmsg+0x8ad/0xbd0
[ 1211.152627][T26908]  ? netlink_getsockopt+0x550/0x550
[ 1211.157829][T26908]  ? aa_sock_msg_perm+0x94/0x150
[ 1211.162767][T26908]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1211.168050][T26908]  ? security_socket_sendmsg+0x7c/0xa0
[ 1211.173512][T26908]  ? netlink_getsockopt+0x550/0x550
[ 1211.178712][T26908]  ____sys_sendmsg+0x5be/0x970
[ 1211.183481][T26908]  ? __sys_sendmsg_sock+0x30/0x30
[ 1211.188498][T26908]  ? __import_iovec+0x315/0x500
[ 1211.193358][T26908]  ? import_iovec+0x6f/0xa0
[ 1211.197866][T26908]  ___sys_sendmsg+0x2a2/0x360
[ 1211.202549][T26908]  ? __sys_sendmsg+0x290/0x290
[ 1211.207325][T26908]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[ 1211.213102][T26908]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1211.217980][T26908]  ? __x64_sys_sendmsg+0x80/0x80
[ 1211.222949][T26908]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1211.228854][T26908]  do_syscall_64+0x4c/0xa0
[ 1211.233270][T26908]  ? clear_bhb_loop+0x60/0xb0
[ 1211.237952][T26908]  ? clear_bhb_loop+0x60/0xb0
[ 1211.242638][T26908]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1211.248531][T26908] RIP: 0033:0x7f14bf59ce59
[ 1211.252940][T26908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1211.272543][T26908] RSP: 002b:00007f14c039f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1211.280957][T26908] RAX: ffffffffffffffda RBX: 00007f14bf815fa0 RCX: 00007f14bf59ce59
[ 1211.288954][T26908] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1211.296924][T26908] RBP: 00007f14c039f090 R08: 0000000000000000 R09: 0000000000000000
[ 1211.304891][T26908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1211.312856][T26908] R13: 00007f14bf816038 R14: 00007f14bf815fa0 R15: 00007ffd5e068728
[ 1211.320840][T26908]  </TASK>
[ 1211.951016][T26932] validate_nla: 6 callbacks suppressed
[ 1211.951035][T26932] netlink: 'syz.0.7042': attribute type 1 has an invalid length.
[ 1212.004068][T26932] netlink: 'syz.0.7042': attribute type 4 has an invalid length.
[ 1212.025261][T26932] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7042'.
[ 1212.227392][T26938] netlink: 'syz.1.7045': attribute type 21 has an invalid length.
[ 1212.253652][T26938] netlink: 'syz.1.7045': attribute type 6 has an invalid length.
[ 1212.271124][T26938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7045'.
[ 1213.035064][T26960] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7054'.
[ 1213.093050][T26961] netlink: 'syz.3.7053': attribute type 3 has an invalid length.
[ 1213.154844][T26961] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7053'.
[ 1213.472185][T26975] netlink: 'syz.4.7057': attribute type 1 has an invalid length.
[ 1213.492374][T26975] netlink: 'syz.4.7057': attribute type 4 has an invalid length.
[ 1213.515132][T26975] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7057'.
[ 1213.856304][T26978] netlink: 'syz.5.7059': attribute type 10 has an invalid length.
[ 1213.883421][T26978] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7059'.
[ 1214.136110][T26992] FAULT_INJECTION: forcing a failure.
[ 1214.136110][T26992] name failslab, interval 1, probability 0, space 0, times 0
[ 1214.300490][T26992] CPU: 1 PID: 26992 Comm: syz.1.7064 Not tainted syzkaller #0
[ 1214.308089][T26992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1214.318241][T26992] Call Trace:
[ 1214.321594][T26992]  <TASK>
[ 1214.324592][T26992]  dump_stack_lvl+0x188/0x24e
[ 1214.329340][T26992]  ? show_regs_print_info+0x12/0x12
[ 1214.334591][T26992]  ? load_image+0x400/0x400
[ 1214.339179][T26992]  ? __might_sleep+0xd0/0xd0
[ 1214.343827][T26992]  ? __lock_acquire+0x7d10/0x7d10
[ 1214.348942][T26992]  should_fail_ex+0x399/0x4d0
[ 1214.353705][T26992]  should_failslab+0x5/0x20
[ 1214.358268][T26992]  slab_pre_alloc_hook+0x59/0x310
[ 1214.363357][T26992]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1214.369139][T26992]  __kmem_cache_alloc_node+0x4f/0x260
[ 1214.374601][T26992]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1214.380378][T26992]  __kmalloc+0xa0/0x240
[ 1214.384611][T26992]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1214.390266][T26992]  ? tomoyo_path_number_perm+0x205/0x650
[ 1214.395963][T26992]  tomoyo_path_number_perm+0x22f/0x650
[ 1214.401499][T26992]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1214.407014][T26992]  ? ksys_write+0x1c0/0x250
[ 1214.411576][T26992]  ? common_file_perm+0x171/0x1c0
[ 1214.416883][T26992]  ? __fget_files+0x28/0x4b0
[ 1214.421528][T26992]  ? __fget_files+0x28/0x4b0
[ 1214.426248][T26992]  security_file_ioctl+0x6c/0xa0
[ 1214.431343][T26992]  __se_sys_ioctl+0x48/0x170
[ 1214.436004][T26992]  do_syscall_64+0x4c/0xa0
[ 1214.440472][T26992]  ? clear_bhb_loop+0x60/0xb0
[ 1214.445195][T26992]  ? clear_bhb_loop+0x60/0xb0
[ 1214.449940][T26992]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1214.455879][T26992] RIP: 0033:0x7fa3a239ce59
[ 1214.460354][T26992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1214.480000][T26992] RSP: 002b:00007fa3a32cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1214.488466][T26992] RAX: ffffffffffffffda RBX: 00007fa3a2615fa0 RCX: 00007fa3a239ce59
[ 1214.496477][T26992] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004
[ 1214.504491][T26992] RBP: 00007fa3a32cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1214.512506][T26992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1214.520517][T26992] R13: 00007fa3a2616038 R14: 00007fa3a2615fa0 R15: 00007ffc3c6c5d48
[ 1214.528627][T26992]  </TASK>
[ 1214.602017][T27001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7066'.
[ 1214.803426][T26992] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1215.028134][T27012] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7071'.
[ 1215.908872][T27029] FAULT_INJECTION: forcing a failure.
[ 1215.908872][T27029] name failslab, interval 1, probability 0, space 0, times 0
[ 1215.952371][T27029] CPU: 0 PID: 27029 Comm: syz.5.7075 Not tainted syzkaller #0
[ 1215.959898][T27029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1215.969982][T27029] Call Trace:
[ 1215.973280][T27029]  <TASK>
[ 1215.976231][T27029]  dump_stack_lvl+0x188/0x24e
[ 1215.980948][T27029]  ? show_regs_print_info+0x12/0x12
[ 1215.986216][T27029]  ? load_image+0x400/0x400
[ 1215.990743][T27029]  ? __might_sleep+0xd0/0xd0
[ 1215.995353][T27029]  ? __lock_acquire+0x7d10/0x7d10
[ 1216.000406][T27029]  should_fail_ex+0x399/0x4d0
[ 1216.005126][T27029]  should_failslab+0x5/0x20
[ 1216.009654][T27029]  slab_pre_alloc_hook+0x59/0x310
[ 1216.014703][T27029]  ? sctp_association_new+0x86/0x25d0
[ 1216.020103][T27029]  __kmem_cache_alloc_node+0x4f/0x260
[ 1216.025504][T27029]  ? sctp_association_new+0x86/0x25d0
[ 1216.030896][T27029]  kmalloc_trace+0x26/0xe0
[ 1216.035336][T27029]  sctp_association_new+0x86/0x25d0
[ 1216.040551][T27029]  ? sctp_do_bind+0x6bd/0x990
[ 1216.045243][T27029]  sctp_connect_new_asoc+0x2da/0x6a0
[ 1216.050549][T27029]  ? __sctp_connect+0xd80/0xd80
[ 1216.055408][T27029]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1216.060783][T27029]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1216.066358][T27029]  ? security_sctp_bind_connect+0x85/0xb0
[ 1216.072105][T27029]  sctp_sendmsg+0x165d/0x2a40
[ 1216.076794][T27029]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1216.081730][T27029]  ? __might_fault+0xa6/0x120
[ 1216.086408][T27029]  ? aa_af_perm+0x340/0x340
[ 1216.090934][T27029]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1216.097393][T27029]  ? inet_sendmsg+0xe5/0x2f0
[ 1216.102002][T27029]  ? inet_send_prepare+0x260/0x260
[ 1216.107135][T27029]  ____sys_sendmsg+0x5be/0x970
[ 1216.111947][T27029]  ? __sys_sendmsg_sock+0x30/0x30
[ 1216.117000][T27029]  ? __import_iovec+0x315/0x500
[ 1216.121904][T27029]  ? import_iovec+0x6f/0xa0
[ 1216.126438][T27029]  ___sys_sendmsg+0x2a2/0x360
[ 1216.131145][T27029]  ? __sys_sendmsg+0x290/0x290
[ 1216.135954][T27029]  ? __lock_acquire+0x7d10/0x7d10
[ 1216.141038][T27029]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1216.145922][T27029]  ? __x64_sys_sendmsg+0x80/0x80
[ 1216.150919][T27029]  ? lockdep_hardirqs_on+0x94/0x140
[ 1216.156143][T27029]  do_syscall_64+0x4c/0xa0
[ 1216.160592][T27029]  ? clear_bhb_loop+0x60/0xb0
[ 1216.165375][T27029]  ? clear_bhb_loop+0x60/0xb0
[ 1216.170085][T27029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1216.176007][T27029] RIP: 0033:0x7fde4a19ce59
[ 1216.180439][T27029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1216.200081][T27029] RSP: 002b:00007fde4afcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1216.208533][T27029] RAX: ffffffffffffffda RBX: 00007fde4a415fa0 RCX: 00007fde4a19ce59
[ 1216.216540][T27029] RDX: 0000000000000080 RSI: 0000200000002500 RDI: 0000000000000003
[ 1216.224544][T27029] RBP: 00007fde4afcb090 R08: 0000000000000000 R09: 0000000000000000
[ 1216.232590][T27029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1216.240588][T27029] R13: 00007fde4a416038 R14: 00007fde4a415fa0 R15: 00007ffe66f43ed8
[ 1216.248627][T27029]  </TASK>
[ 1216.645283][T27046] netlink: 'syz.5.7080': attribute type 21 has an invalid length.
[ 1216.692506][T27046] netlink: 'syz.5.7080': attribute type 6 has an invalid length.
[ 1216.727613][T27046] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7080'.
[ 1217.102562][T27056] netlink: 'syz.1.7082': attribute type 19 has an invalid length.
[ 1217.133846][T27056] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.7082'.
[ 1217.658710][T27064] netlink: 'syz.4.7084': attribute type 21 has an invalid length.
[ 1217.667903][T27064] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7084'.
[ 1217.732193][T27072] FAULT_INJECTION: forcing a failure.
[ 1217.732193][T27072] name failslab, interval 1, probability 0, space 0, times 0
[ 1217.746831][T27072] CPU: 0 PID: 27072 Comm: syz.3.7087 Not tainted syzkaller #0
[ 1217.754415][T27072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1217.764487][T27072] Call Trace:
[ 1217.767788][T27072]  <TASK>
[ 1217.770745][T27072]  dump_stack_lvl+0x188/0x24e
[ 1217.775499][T27072]  ? show_regs_print_info+0x12/0x12
[ 1217.780725][T27072]  ? load_image+0x400/0x400
[ 1217.785254][T27072]  ? __might_sleep+0xd0/0xd0
[ 1217.789855][T27072]  ? __lock_acquire+0x7d10/0x7d10
[ 1217.794922][T27072]  should_fail_ex+0x399/0x4d0
[ 1217.799634][T27072]  should_failslab+0x5/0x20
[ 1217.804152][T27072]  slab_pre_alloc_hook+0x59/0x310
[ 1217.809201][T27072]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1217.815018][T27072]  __kmem_cache_alloc_node+0x4f/0x260
[ 1217.820394][T27072]  ? apparmor_sk_alloc_security+0x74/0x100
[ 1217.826201][T27072]  kmalloc_trace+0x26/0xe0
[ 1217.830643][T27072]  apparmor_sk_alloc_security+0x74/0x100
[ 1217.836307][T27072]  security_sk_alloc+0x6a/0xa0
[ 1217.841067][T27072]  sk_prot_alloc+0x101/0x210
[ 1217.845653][T27072]  ? sk_alloc+0x20/0x340
[ 1217.849904][T27072]  sk_alloc+0x36/0x340
[ 1217.853998][T27072]  ? bpf_ctx_init+0x163/0x1a0
[ 1217.858679][T27072]  ? bpf_prog_test_run_skb+0x275/0x1890
[ 1217.864239][T27072]  bpf_prog_test_run_skb+0x371/0x1890
[ 1217.869628][T27072]  ? __fget_files+0x28/0x4b0
[ 1217.874230][T27072]  ? cpu_online+0xa0/0xa0
[ 1217.878560][T27072]  bpf_prog_test_run+0x31e/0x390
[ 1217.883507][T27072]  __sys_bpf+0x62b/0x780
[ 1217.887747][T27072]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1217.893135][T27072]  ? lock_chain_count+0x20/0x20
[ 1217.897987][T27072]  __x64_sys_bpf+0x78/0x90
[ 1217.902417][T27072]  do_syscall_64+0x4c/0xa0
[ 1217.906830][T27072]  ? clear_bhb_loop+0x60/0xb0
[ 1217.911523][T27072]  ? clear_bhb_loop+0x60/0xb0
[ 1217.916198][T27072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1217.922087][T27072] RIP: 0033:0x7f9c4d99ce59
[ 1217.926529][T27072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1217.946134][T27072] RSP: 002b:00007f9c4e919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1217.954545][T27072] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1217.962521][T27072] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1217.970492][T27072] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1217.978543][T27072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1217.986505][T27072] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1217.994485][T27072]  </TASK>
[ 1218.086222][T27076] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7088'.
[ 1218.097354][T27070] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7086'.
[ 1218.163365][T27070] net_ratelimit: 6522 callbacks suppressed
[ 1218.163380][T27070] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[ 1218.512891][T27089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7092'.
[ 1218.992641][T27099] netlink: 'syz.3.7096': attribute type 21 has an invalid length.
[ 1219.041877][T27099] netlink: 'syz.3.7096': attribute type 6 has an invalid length.
[ 1219.096277][T27099] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7096'.
[ 1219.660728][T27121] netlink: 'syz.1.7103': attribute type 9 has an invalid length.
[ 1219.672966][T27121] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.7103'.
[ 1220.268322][T22853] Bluetooth: hci1: command 0x0406 tx timeout
[ 1222.045132][T27132] netlink: 'syz.3.7109': attribute type 21 has an invalid length.
[ 1222.064872][T27137] FAULT_INJECTION: forcing a failure.
[ 1222.064872][T27137] name failslab, interval 1, probability 0, space 0, times 0
[ 1222.091628][T27132] netlink: 'syz.3.7109': attribute type 6 has an invalid length.
[ 1222.104119][T27137] CPU: 0 PID: 27137 Comm: syz.1.7108 Not tainted syzkaller #0
[ 1222.111617][T27137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1222.121674][T27137] Call Trace:
[ 1222.124947][T27137]  <TASK>
[ 1222.127872][T27137]  dump_stack_lvl+0x188/0x24e
[ 1222.132557][T27137]  ? show_regs_print_info+0x12/0x12
[ 1222.137750][T27137]  ? load_image+0x400/0x400
[ 1222.142254][T27137]  ? __might_sleep+0xd0/0xd0
[ 1222.146836][T27137]  ? __lock_acquire+0x7d10/0x7d10
[ 1222.151860][T27137]  should_fail_ex+0x399/0x4d0
[ 1222.156532][T27137]  should_failslab+0x5/0x20
[ 1222.161024][T27137]  slab_pre_alloc_hook+0x59/0x310
[ 1222.166043][T27137]  ? sk_prot_alloc+0xe7/0x210
[ 1222.170716][T27137]  __kmem_cache_alloc_node+0x4f/0x260
[ 1222.176082][T27137]  ? sk_prot_alloc+0xe7/0x210
[ 1222.180752][T27137]  __kmalloc+0xa0/0x240
[ 1222.184909][T27137]  sk_prot_alloc+0xe7/0x210
[ 1222.189407][T27137]  ? sk_alloc+0x20/0x340
[ 1222.193645][T27137]  sk_alloc+0x36/0x340
[ 1222.197709][T27137]  ? bpf_ctx_init+0x163/0x1a0
[ 1222.202384][T27137]  ? bpf_prog_test_run_skb+0x275/0x1890
[ 1222.207925][T27137]  bpf_prog_test_run_skb+0x371/0x1890
[ 1222.213296][T27137]  ? __fget_files+0x28/0x4b0
[ 1222.217897][T27137]  ? cpu_online+0xa0/0xa0
[ 1222.222223][T27137]  bpf_prog_test_run+0x31e/0x390
[ 1222.227159][T27137]  __sys_bpf+0x62b/0x780
[ 1222.231403][T27137]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1222.236780][T27137]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1222.242944][T27137]  __x64_sys_bpf+0x78/0x90
[ 1222.247358][T27137]  do_syscall_64+0x4c/0xa0
[ 1222.251769][T27137]  ? clear_bhb_loop+0x60/0xb0
[ 1222.256441][T27137]  ? clear_bhb_loop+0x60/0xb0
[ 1222.261118][T27137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1222.267008][T27137] RIP: 0033:0x7fa3a239ce59
[ 1222.271417][T27137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1222.291016][T27137] RSP: 002b:00007fa3a32cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1222.299428][T27137] RAX: ffffffffffffffda RBX: 00007fa3a2615fa0 RCX: 00007fa3a239ce59
[ 1222.307396][T27137] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[ 1222.315358][T27137] RBP: 00007fa3a32cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1222.323324][T27137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1222.331289][T27137] R13: 00007fa3a2616038 R14: 00007fa3a2615fa0 R15: 00007ffc3c6c5d48
[ 1222.339264][T27137]  </TASK>
[ 1222.356773][T27132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7109'.
[ 1222.792157][T27155] netlink: 'syz.4.7117': attribute type 21 has an invalid length.
[ 1222.833941][T27155] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7117'.
[ 1222.901017][T27155] netlink: 'syz.4.7117': attribute type 5 has an invalid length.
[ 1222.952163][T27159] netlink: 'syz.1.7119': attribute type 21 has an invalid length.
[ 1222.993038][T27159] netlink: 'syz.1.7119': attribute type 6 has an invalid length.
[ 1223.044063][T27159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7119'.
[ 1223.151857][T27167] netlink: 'syz.0.7121': attribute type 21 has an invalid length.
[ 1223.430171][T27172] netlink: 'syz.1.7122': attribute type 21 has an invalid length.
[ 1223.495211][T27172] netlink: 'syz.1.7122': attribute type 6 has an invalid length.
[ 1223.535245][T27172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7122'.
[ 1223.608567][T27176] netlink: 'syz.4.7124': attribute type 1 has an invalid length.
[ 1223.620839][T27176] netlink: 'syz.4.7124': attribute type 4 has an invalid length.
[ 1223.630570][T27176] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.7124'.
[ 1224.119930][T27190] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7129'.
[ 1224.145092][T27190] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7129'.
[ 1224.187048][T27187] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7129'.
[ 1224.224438][T27193] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.7129'.
[ 1224.534861][T27203] netlink: 'syz.1.7133': attribute type 21 has an invalid length.
[ 1224.551000][T27203] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7133'.
[ 1224.808538][T27212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7137'.
[ 1224.830176][T27213] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7138'.
[ 1225.004821][ T9462] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1225.548541][T27235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7147'.
[ 1226.974890][T27279] FAULT_INJECTION: forcing a failure.
[ 1226.974890][T27279] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1227.034079][T27279] CPU: 0 PID: 27279 Comm: syz.1.7166 Not tainted syzkaller #0
[ 1227.041590][T27279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1227.051660][T27279] Call Trace:
[ 1227.054952][T27279]  <TASK>
[ 1227.057895][T27279]  dump_stack_lvl+0x188/0x24e
[ 1227.062597][T27279]  ? show_regs_print_info+0x12/0x12
[ 1227.067810][T27279]  ? load_image+0x400/0x400
[ 1227.072340][T27279]  ? __lock_acquire+0x7d10/0x7d10
[ 1227.077397][T27279]  ? __virt_addr_valid+0x188/0x540
[ 1227.082532][T27279]  should_fail_ex+0x399/0x4d0
[ 1227.087225][T27279]  _copy_from_user+0x2c/0x170
[ 1227.091926][T27279]  bpf_prog_test_run_skb+0x268/0x1890
[ 1227.097338][T27279]  ? __fget_files+0x28/0x4b0
[ 1227.101959][T27279]  ? __fget_files+0x28/0x4b0
[ 1227.106576][T27279]  ? __fget_files+0x43d/0x4b0
[ 1227.111298][T27279]  ? cpu_online+0xa0/0xa0
[ 1227.115658][T27279]  bpf_prog_test_run+0x31e/0x390
[ 1227.120621][T27279]  __sys_bpf+0x62b/0x780
[ 1227.124889][T27279]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1227.130307][T27279]  ? lock_chain_count+0x20/0x20
[ 1227.135192][T27279]  __x64_sys_bpf+0x78/0x90
[ 1227.139655][T27279]  do_syscall_64+0x4c/0xa0
[ 1227.144089][T27279]  ? clear_bhb_loop+0x60/0xb0
[ 1227.148789][T27279]  ? clear_bhb_loop+0x60/0xb0
[ 1227.153494][T27279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1227.159417][T27279] RIP: 0033:0x7fa3a239ce59
[ 1227.163847][T27279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1227.183476][T27279] RSP: 002b:00007fa3a32cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1227.191915][T27279] RAX: ffffffffffffffda RBX: 00007fa3a2615fa0 RCX: 00007fa3a239ce59
[ 1227.199991][T27279] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[ 1227.207959][T27279] RBP: 00007fa3a32cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1227.215922][T27279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1227.223887][T27279] R13: 00007fa3a2616038 R14: 00007fa3a2615fa0 R15: 00007ffc3c6c5d48
[ 1227.231949][T27279]  </TASK>
[ 1227.838631][T27307] validate_nla: 19 callbacks suppressed
[ 1227.838648][T27307] netlink: 'syz.1.7178': attribute type 1 has an invalid length.
[ 1227.884550][T27307] netlink: 'syz.1.7178': attribute type 4 has an invalid length.
[ 1227.923053][T27310] FAULT_INJECTION: forcing a failure.
[ 1227.923053][T27310] name failslab, interval 1, probability 0, space 0, times 0
[ 1228.004749][T27310] CPU: 0 PID: 27310 Comm: syz.3.7179 Not tainted syzkaller #0
[ 1228.012275][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1228.022360][T27310] Call Trace:
[ 1228.025656][T27310]  <TASK>
[ 1228.028601][T27310]  dump_stack_lvl+0x188/0x24e
[ 1228.033302][T27310]  ? show_regs_print_info+0x12/0x12
[ 1228.038575][T27310]  ? load_image+0x400/0x400
[ 1228.043108][T27310]  ? __might_sleep+0xd0/0xd0
[ 1228.047722][T27310]  ? __lock_acquire+0x7d10/0x7d10
[ 1228.052779][T27310]  should_fail_ex+0x399/0x4d0
[ 1228.057487][T27310]  should_failslab+0x5/0x20
[ 1228.062013][T27310]  slab_pre_alloc_hook+0x59/0x310
[ 1228.067063][T27310]  ? bpf_prog_test_run_skb+0x241/0x1890
[ 1228.072617][T27310]  __kmem_cache_alloc_node+0x4f/0x260
[ 1228.077995][T27310]  ? bpf_prog_test_run_skb+0x241/0x1890
[ 1228.083577][T27310]  __kmalloc+0xa0/0x240
[ 1228.087737][T27310]  bpf_prog_test_run_skb+0x241/0x1890
[ 1228.093111][T27310]  ? __fget_files+0x28/0x4b0
[ 1228.097704][T27310]  ? __fget_files+0x28/0x4b0
[ 1228.102292][T27310]  ? __fget_files+0x43d/0x4b0
[ 1228.107068][T27310]  ? cpu_online+0xa0/0xa0
[ 1228.111396][T27310]  bpf_prog_test_run+0x31e/0x390
[ 1228.116341][T27310]  __sys_bpf+0x62b/0x780
[ 1228.120615][T27310]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1228.125994][T27310]  ? lock_chain_count+0x20/0x20
[ 1228.131120][T27310]  __x64_sys_bpf+0x78/0x90
[ 1228.135534][T27310]  do_syscall_64+0x4c/0xa0
[ 1228.139944][T27310]  ? clear_bhb_loop+0x60/0xb0
[ 1228.144629][T27310]  ? clear_bhb_loop+0x60/0xb0
[ 1228.149304][T27310]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1228.155198][T27310] RIP: 0033:0x7f9c4d99ce59
[ 1228.159630][T27310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1228.179248][T27310] RSP: 002b:00007f9c4e919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1228.187658][T27310] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1228.195635][T27310] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[ 1228.203603][T27310] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1228.211847][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1228.219826][T27310] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1228.227814][T27310]  </TASK>
[ 1228.436336][T27321] netlink: 'syz.5.7184': attribute type 5 has an invalid length.
[ 1228.810175][T27333] netlink: 'syz.1.7186': attribute type 1 has an invalid length.
[ 1228.856234][T27333] __nla_validate_parse: 8 callbacks suppressed
[ 1228.856258][T27333] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.7186'.
[ 1228.920614][T27345] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1228.949123][T27345] netlink: 'syz.1.7186': attribute type 29 has an invalid length.
[ 1229.181062][T27353] netlink: 'syz.3.7190': attribute type 21 has an invalid length.
[ 1229.200817][T27353] netlink: 'syz.3.7190': attribute type 6 has an invalid length.
[ 1229.230003][T27353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7190'.
[ 1229.437169][T27359] netlink: 'syz.3.7192': attribute type 4 has an invalid length.
[ 1229.709821][T27364] netlink: 'syz.5.7193': attribute type 10 has an invalid length.
[ 1229.738946][T27364] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7193'.
[ 1229.794697][T27364] device dummy0 entered promiscuous mode
[ 1229.815212][T27364] bridge0: port 3(dummy0) entered blocking state
[ 1229.941846][T27364] bridge0: port 3(dummy0) entered disabled state
[ 1229.952404][T27364] bridge0: port 3(dummy0) entered blocking state
[ 1229.958986][T27364] bridge0: port 3(dummy0) entered forwarding state
[ 1230.572792][T27391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7202'.
[ 1231.306219][T27400] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1231.461571][T27400] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1231.635728][T27400] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1231.742136][T27400] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1233.246220][T27421] validate_nla: 3 callbacks suppressed
[ 1233.246238][T27421] netlink: 'syz.1.7211': attribute type 5 has an invalid length.
[ 1233.783244][T27430] netlink: 'syz.3.7214': attribute type 21 has an invalid length.
[ 1233.809982][T27422] delete_channel: no stack
[ 1233.838026][T27430] netlink: 'syz.3.7214': attribute type 6 has an invalid length.
[ 1233.883075][T27430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7214'.
[ 1235.243384][T27453] netlink: 'syz.1.7220': attribute type 21 has an invalid length.
[ 1235.344160][T27453] netlink: 'syz.1.7220': attribute type 6 has an invalid length.
[ 1235.413866][T27453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7220'.
[ 1236.145409][T27471] netlink: 'syz.5.7227': attribute type 21 has an invalid length.
[ 1236.243564][T27471] netlink: 'syz.5.7227': attribute type 6 has an invalid length.
[ 1236.525961][T27471] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7227'.
[ 1237.442810][T27481] netlink: 'syz.5.7228': attribute type 21 has an invalid length.
[ 1237.518094][T27481] netlink: 'syz.5.7228': attribute type 6 has an invalid length.
[ 1237.562322][T27481] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7228'.
[ 1237.634739][T27487] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1237.642218][T27487] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.944234][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.950610][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.108526][T27511] netlink: 'syz.3.7236': attribute type 21 has an invalid length.
[ 1239.117052][T27511] netlink: 'syz.3.7236': attribute type 6 has an invalid length.
[ 1239.130259][T27511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7236'.
[ 1239.143071][T27510] netlink: 'syz.5.7238': attribute type 21 has an invalid length.
[ 1239.185200][T27510] netlink: 'syz.5.7238': attribute type 6 has an invalid length.
[ 1239.224324][T27510] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7238'.
[ 1239.266575][T27517] netlink: 'syz.1.7241': attribute type 21 has an invalid length.
[ 1239.279949][T27517] netlink: 'syz.1.7241': attribute type 6 has an invalid length.
[ 1239.324980][T27517] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7241'.
[ 1239.525356][T27528] netlink: 'syz.0.7240': attribute type 1 has an invalid length.
[ 1239.533138][T27528] netlink: 'syz.0.7240': attribute type 4 has an invalid length.
[ 1239.550939][T27528] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.7240'.
[ 1240.023482][T27540] delete_channel: no stack
[ 1240.460877][T27556] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7252'.
[ 1240.907825][T27569] netlink: 'syz.0.7256': attribute type 21 has an invalid length.
[ 1240.952131][T27569] netlink: 'syz.0.7256': attribute type 6 has an invalid length.
[ 1241.005608][T27569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7256'.
[ 1241.067271][T27572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7257'.
[ 1242.296929][T27587] delete_channel: no stack
[ 1242.512693][T27603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7270'.
[ 1242.604427][T27605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7271'.
[ 1242.775391][T27611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7274'.
[ 1243.522784][T27623] device 0 entered promiscuous mode
[ 1243.995949][T27638] delete_channel: no stack
[ 1244.575764][T27657] validate_nla: 13 callbacks suppressed
[ 1244.575781][T27657] netlink: 'syz.1.7297': attribute type 21 has an invalid length.
[ 1244.624113][T27657] netlink: 'syz.1.7297': attribute type 6 has an invalid length.
[ 1244.631902][T27657] __nla_validate_parse: 1 callbacks suppressed
[ 1244.631914][T27657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7297'.
[ 1246.258008][T27666] netlink: 'syz.4.7289': attribute type 21 has an invalid length.
[ 1246.278852][T27666] netlink: 'syz.4.7289': attribute type 6 has an invalid length.
[ 1246.287151][T27666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7289'.
[ 1246.303124][T27662] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.7288'.
[ 1246.331222][T27662] netlink: zone id is out of range
[ 1246.370511][T27662] netlink: zone id is out of range
[ 1246.380591][T27662] netlink: zone id is out of range
[ 1246.399358][T27662] netlink: zone id is out of range
[ 1246.421926][T27662] netlink: zone id is out of range
[ 1246.452404][T27662] netlink: zone id is out of range
[ 1246.472314][T27662] netlink: zone id is out of range
[ 1246.488915][T27662] netlink: zone id is out of range
[ 1246.499062][T27662] netlink: zone id is out of range
[ 1246.518446][T27662] netlink: zone id is out of range
[ 1246.702500][T27679] FAULT_INJECTION: forcing a failure.
[ 1246.702500][T27679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1246.778482][T27679] CPU: 0 PID: 27679 Comm: syz.5.7294 Not tainted syzkaller #0
[ 1246.786003][T27679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1246.796077][T27679] Call Trace:
[ 1246.799370][T27679]  <TASK>
[ 1246.802309][T27679]  dump_stack_lvl+0x188/0x24e
[ 1246.807005][T27679]  ? show_regs_print_info+0x12/0x12
[ 1246.812224][T27679]  ? load_image+0x400/0x400
[ 1246.816751][T27679]  ? __lock_acquire+0x7d10/0x7d10
[ 1246.821796][T27679]  ? __lock_acquire+0x7d10/0x7d10
[ 1246.826839][T27679]  should_fail_ex+0x399/0x4d0
[ 1246.831549][T27679]  _copy_from_user+0x2c/0x170
[ 1246.836251][T27679]  ___sys_sendmsg+0x1c3/0x360
[ 1246.840951][T27679]  ? __sys_sendmsg+0x290/0x290
[ 1246.845748][T27679]  ? ktime_get_real_ts64+0x440/0x440
[ 1246.851070][T27679]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1246.855937][T27679]  ? __x64_sys_sendmsg+0x80/0x80
[ 1246.860905][T27679]  ? lockdep_hardirqs_on+0x94/0x140
[ 1246.866134][T27679]  do_syscall_64+0x4c/0xa0
[ 1246.870561][T27679]  ? clear_bhb_loop+0x60/0xb0
[ 1246.875258][T27679]  ? clear_bhb_loop+0x60/0xb0
[ 1246.879958][T27679]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1246.885870][T27679] RIP: 0033:0x7fde4a19ce59
[ 1246.890294][T27679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1246.909918][T27679] RSP: 002b:00007fde4afcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1246.918446][T27679] RAX: ffffffffffffffda RBX: 00007fde4a415fa0 RCX: 00007fde4a19ce59
[ 1246.926440][T27679] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[ 1246.934457][T27679] RBP: 00007fde4afcb090 R08: 0000000000000000 R09: 0000000000000000
[ 1246.942452][T27679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1246.950437][T27679] R13: 00007fde4a416038 R14: 00007fde4a415fa0 R15: 00007ffe66f43ed8
[ 1246.958441][T27679]  </TASK>
[ 1247.017788][T27682] netlink: 'syz.0.7295': attribute type 27 has an invalid length.
[ 1247.316761][T27683] delete_channel: no stack
[ 1247.402209][T27693] netlink: 'syz.3.7301': attribute type 21 has an invalid length.
[ 1247.415637][T27693] netlink: 'syz.3.7301': attribute type 6 has an invalid length.
[ 1247.423426][T27693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7301'.
[ 1247.517204][T27691] netlink: 'syz.4.7300': attribute type 1 has an invalid length.
[ 1247.899559][T27705] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7306'.
[ 1248.048981][T27710] FAULT_INJECTION: forcing a failure.
[ 1248.048981][T27710] name failslab, interval 1, probability 0, space 0, times 0
[ 1248.095133][T27710] CPU: 1 PID: 27710 Comm: syz.4.7308 Not tainted syzkaller #0
[ 1248.102662][T27710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1248.112738][T27710] Call Trace:
[ 1248.116040][T27710]  <TASK>
[ 1248.118982][T27710]  dump_stack_lvl+0x188/0x24e
[ 1248.123680][T27710]  ? show_regs_print_info+0x12/0x12
[ 1248.128884][T27710]  ? load_image+0x400/0x400
[ 1248.133405][T27710]  ? __might_sleep+0xd0/0xd0
[ 1248.138013][T27710]  ? __lock_acquire+0x7d10/0x7d10
[ 1248.143055][T27710]  should_fail_ex+0x399/0x4d0
[ 1248.147745][T27710]  should_failslab+0x5/0x20
[ 1248.152260][T27710]  slab_pre_alloc_hook+0x59/0x310
[ 1248.157304][T27710]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1248.163044][T27710]  __kmem_cache_alloc_node+0x4f/0x260
[ 1248.168433][T27710]  ? tomoyo_realpath_from_path+0xdf/0x5d0
[ 1248.174169][T27710]  __kmalloc+0xa0/0x240
[ 1248.178348][T27710]  tomoyo_realpath_from_path+0xdf/0x5d0
[ 1248.183921][T27710]  ? tomoyo_path_number_perm+0x205/0x650
[ 1248.189567][T27710]  tomoyo_path_number_perm+0x22f/0x650
[ 1248.195048][T27710]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1248.200516][T27710]  ? ksys_write+0x1c0/0x250
[ 1248.205033][T27710]  ? common_file_perm+0x171/0x1c0
[ 1248.210102][T27710]  ? __fget_files+0x28/0x4b0
[ 1248.214705][T27710]  ? __fget_files+0x28/0x4b0
[ 1248.219321][T27710]  security_file_ioctl+0x6c/0xa0
[ 1248.224275][T27710]  __se_sys_ioctl+0x48/0x170
[ 1248.228880][T27710]  do_syscall_64+0x4c/0xa0
[ 1248.233303][T27710]  ? clear_bhb_loop+0x60/0xb0
[ 1248.237993][T27710]  ? clear_bhb_loop+0x60/0xb0
[ 1248.242726][T27710]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1248.248642][T27710] RIP: 0033:0x7f14bf59ce59
[ 1248.253068][T27710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1248.272681][T27710] RSP: 002b:00007f14c039f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1248.281116][T27710] RAX: ffffffffffffffda RBX: 00007f14bf815fa0 RCX: 00007f14bf59ce59
[ 1248.289096][T27710] RDX: 00002000000002c0 RSI: 00000000401054d5 RDI: 0000000000000004
[ 1248.297079][T27710] RBP: 00007f14c039f090 R08: 0000000000000000 R09: 0000000000000000
[ 1248.305055][T27710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1248.313033][T27710] R13: 00007f14bf816038 R14: 00007f14bf815fa0 R15: 00007ffd5e068728
[ 1248.321036][T27710]  </TASK>
[ 1248.391752][T27717] netlink: 'syz.1.7310': attribute type 21 has an invalid length.
[ 1248.392026][T27710] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1248.400142][T27717] netlink: 'syz.1.7310': attribute type 6 has an invalid length.
[ 1248.414574][T27717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7310'.
[ 1249.171351][T27727] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7314'.
[ 1249.244127][T27725] delete_channel: no stack
[ 1249.431471][T27741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7317'.
[ 1249.490827][T27737] delete_channel: no stack
[ 1249.790684][T27754] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.7320'.
[ 1250.118742][T27761] validate_nla: 4 callbacks suppressed
[ 1250.118786][T27761] netlink: 'syz.1.7321': attribute type 10 has an invalid length.
[ 1250.133227][T27761] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7321'.
[ 1250.143004][T27761] device bond0 entered promiscuous mode
[ 1250.181919][T27761] device bond_slave_0 entered promiscuous mode
[ 1250.190534][T27761] device bond_slave_1 entered promiscuous mode
[ 1250.202804][T27761] device bridge0 entered promiscuous mode
[ 1250.212224][T27761] bridge0: port 4(bond0) entered blocking state
[ 1250.222202][T27761] bridge0: port 4(bond0) entered disabled state
[ 1250.338411][T27767] netlink: 'syz.4.7324': attribute type 25 has an invalid length.
[ 1250.374036][T27767] netlink: 'syz.4.7324': attribute type 9 has an invalid length.
[ 1250.528303][T27781] FAULT_INJECTION: forcing a failure.
[ 1250.528303][T27781] name failslab, interval 1, probability 0, space 0, times 0
[ 1250.541461][T27781] CPU: 1 PID: 27781 Comm: syz.3.7329 Not tainted syzkaller #0
[ 1250.548951][T27781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1250.559036][T27781] Call Trace:
[ 1250.562335][T27781]  <TASK>
[ 1250.565287][T27781]  dump_stack_lvl+0x188/0x24e
[ 1250.569997][T27781]  ? show_regs_print_info+0x12/0x12
[ 1250.575233][T27781]  ? load_image+0x400/0x400
[ 1250.579761][T27781]  ? __lock_acquire+0x7d10/0x7d10
[ 1250.584847][T27781]  ? get_random_u64+0x16c/0x8d0
[ 1250.589727][T27781]  ? get_random_u64+0x53a/0x8d0
[ 1250.594604][T27781]  should_fail_ex+0x399/0x4d0
[ 1250.599301][T27781]  should_failslab+0x5/0x20
[ 1250.603824][T27781]  slab_pre_alloc_hook+0x59/0x310
[ 1250.608870][T27781]  ? memset+0x1e/0x40
[ 1250.612877][T27781]  kmem_cache_alloc+0x56/0x2f0
[ 1250.617661][T27781]  ? prepare_creds+0x3c/0x610
[ 1250.622367][T27781]  prepare_creds+0x3c/0x610
[ 1250.626892][T27781]  copy_creds+0x146/0xd50
[ 1250.631224][T27781]  copy_process+0x932/0x4080
[ 1250.635841][T27781]  ? perf_trace_lock+0xf8/0x390
[ 1250.640715][T27781]  ? idle_dummy+0x10/0x10
[ 1250.645077][T27781]  kernel_clone+0x24b/0x900
[ 1250.649590][T27781]  ? ksys_write+0x1c0/0x250
[ 1250.654101][T27781]  ? create_io_thread+0x170/0x170
[ 1250.659145][T27781]  __x64_sys_clone+0x1a7/0x220
[ 1250.663911][T27781]  ? __fget_files+0x43d/0x4b0
[ 1250.668606][T27781]  ? __ia32_sys_vfork+0x140/0x140
[ 1250.673665][T27781]  ? lock_chain_count+0x20/0x20
[ 1250.678552][T27781]  ? lockdep_hardirqs_on+0x94/0x140
[ 1250.683777][T27781]  do_syscall_64+0x4c/0xa0
[ 1250.688233][T27781]  ? clear_bhb_loop+0x60/0xb0
[ 1250.692935][T27781]  ? clear_bhb_loop+0x60/0xb0
[ 1250.697641][T27781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1250.703556][T27781] RIP: 0033:0x7f9c4d99ce59
[ 1250.707988][T27781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1250.727609][T27781] RSP: 002b:00007f9c4e918fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[ 1250.736048][T27781] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1250.744030][T27781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000126400
[ 1250.751990][T27781] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1250.759968][T27781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[ 1250.767955][T27781] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1250.775955][T27781]  </TASK>
[ 1250.787242][T27787] netlink: 'syz.1.7328': attribute type 10 has an invalid length.
[ 1250.850109][T27782] delete_channel: no stack
[ 1250.942642][T27787] team0: Device wg1 is of different type
[ 1251.030989][T27790] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7332'.
[ 1251.076072][T27790] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7332'.
[ 1251.199289][T27797] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.7335'.
[ 1251.285653][T27801] netlink: 'syz.0.7345': attribute type 10 has an invalid length.
[ 1251.293522][T27801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7345'.
[ 1252.320160][T27823] netlink: 'syz.4.7340': attribute type 10 has an invalid length.
[ 1252.350836][T27823] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7340'.
[ 1252.383416][T27823] device bond0 entered promiscuous mode
[ 1252.423498][T27823] device bond_slave_0 entered promiscuous mode
[ 1252.447914][T27823] device bond_slave_1 entered promiscuous mode
[ 1252.466013][T27823] device batadv_slave_0 entered promiscuous mode
[ 1252.503510][T27823] bridge0: port 3(bond0) entered blocking state
[ 1252.519984][T27823] bridge0: port 3(bond0) entered disabled state
[ 1252.579745][T27823] bridge0: port 3(bond0) entered blocking state
[ 1252.586521][T27823] bridge0: port 3(bond0) entered forwarding state
[ 1252.717881][T27829] FAULT_INJECTION: forcing a failure.
[ 1252.717881][T27829] name failslab, interval 1, probability 0, space 0, times 0
[ 1252.737409][T27829] CPU: 1 PID: 27829 Comm: syz.0.7343 Not tainted syzkaller #0
[ 1252.744922][T27829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1252.754997][T27829] Call Trace:
[ 1252.758297][T27829]  <TASK>
[ 1252.761243][T27829]  dump_stack_lvl+0x188/0x24e
[ 1252.765951][T27829]  ? sctp_sendmsg+0x165d/0x2a40
[ 1252.770827][T27829]  ? ___sys_sendmsg+0x2a2/0x360
[ 1252.775710][T27829]  ? show_regs_print_info+0x12/0x12
[ 1252.780935][T27829]  ? load_image+0x400/0x400
[ 1252.785481][T27829]  should_fail_ex+0x399/0x4d0
[ 1252.790182][T27829]  should_failslab+0x5/0x20
[ 1252.794699][T27829]  slab_pre_alloc_hook+0x59/0x310
[ 1252.799741][T27829]  ? sctp_add_bind_addr+0x89/0x350
[ 1252.804869][T27829]  __kmem_cache_alloc_node+0x4f/0x260
[ 1252.810266][T27829]  ? sctp_add_bind_addr+0x89/0x350
[ 1252.815421][T27829]  kmalloc_trace+0x26/0xe0
[ 1252.819867][T27829]  sctp_add_bind_addr+0x89/0x350
[ 1252.824821][T27829]  sctp_copy_local_addr_list+0x311/0x4e0
[ 1252.830484][T27829]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[ 1252.836221][T27829]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[ 1252.842324][T27829]  ? sctp_v4_is_any+0x31/0x50
[ 1252.847019][T27829]  ? sctp_copy_one_addr+0x93/0x660
[ 1252.852162][T27829]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1252.857208][T27829]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1252.863559][T27829]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1252.868868][T27829]  ? __sctp_connect+0xd80/0xd80
[ 1252.873731][T27829]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1252.879131][T27829]  ? _local_bh_enable+0xa0/0xa0
[ 1252.884010][T27829]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1252.889851][T27829]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[ 1252.895682][T27829]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1252.901248][T27829]  ? security_sctp_bind_connect+0x85/0xb0
[ 1252.906994][T27829]  sctp_sendmsg+0x165d/0x2a40
[ 1252.911711][T27829]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1252.916670][T27829]  ? __might_fault+0xa6/0x120
[ 1252.921364][T27829]  ? aa_af_perm+0x340/0x340
[ 1252.925890][T27829]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1252.932343][T27829]  ? inet_sendmsg+0x78/0x2f0
[ 1252.936951][T27829]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1252.942257][T27829]  ? security_socket_sendmsg+0x7c/0xa0
[ 1252.947734][T27829]  ? inet_send_prepare+0x260/0x260
[ 1252.952864][T27829]  ____sys_sendmsg+0x5be/0x970
[ 1252.957657][T27829]  ? __sys_sendmsg_sock+0x30/0x30
[ 1252.962695][T27829]  ? __import_iovec+0x315/0x500
[ 1252.967572][T27829]  ? import_iovec+0x6f/0xa0
[ 1252.972098][T27829]  ___sys_sendmsg+0x2a2/0x360
[ 1252.976806][T27829]  ? __sys_sendmsg+0x290/0x290
[ 1252.981613][T27829]  ? __lock_acquire+0x7d10/0x7d10
[ 1252.986688][T27829]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1252.991598][T27829]  ? __x64_sys_sendmsg+0x80/0x80
[ 1252.996539][T27829]  ? lockdep_hardirqs_on+0x94/0x140
[ 1253.001751][T27829]  do_syscall_64+0x4c/0xa0
[ 1253.006166][T27829]  ? clear_bhb_loop+0x60/0xb0
[ 1253.010856][T27829]  ? clear_bhb_loop+0x60/0xb0
[ 1253.015528][T27829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1253.021409][T27829] RIP: 0033:0x7f77c799ce59
[ 1253.025810][T27829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1253.045414][T27829] RSP: 002b:00007f77c8802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1253.053826][T27829] RAX: ffffffffffffffda RBX: 00007f77c7c15fa0 RCX: 00007f77c799ce59
[ 1253.061807][T27829] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006
[ 1253.069799][T27829] RBP: 00007f77c8802090 R08: 0000000000000000 R09: 0000000000000000
[ 1253.077763][T27829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1253.085755][T27829] R13: 00007f77c7c16038 R14: 00007f77c7c15fa0 R15: 00007ffed3fc77c8
[ 1253.093741][T27829]  </TASK>
[ 1253.344608][T27837] netlink: 'syz.3.7348': attribute type 21 has an invalid length.
[ 1253.352524][T27837] netlink: 'syz.3.7348': attribute type 6 has an invalid length.
[ 1253.396874][T27837] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7348'.
[ 1253.411716][T27835] netlink: 'syz.1.7347': attribute type 21 has an invalid length.
[ 1253.420192][T27835] netlink: 'syz.1.7347': attribute type 6 has an invalid length.
[ 1253.456856][T27835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7347'.
[ 1254.767234][T27871] delete_channel: no stack
[ 1254.786784][T27850] team0: Device wg1 is of different type
[ 1255.405146][T27881] validate_nla: 1 callbacks suppressed
[ 1255.405162][T27881] netlink: 'syz.1.7363': attribute type 21 has an invalid length.
[ 1255.454066][T27881] netlink: 'syz.1.7363': attribute type 6 has an invalid length.
[ 1255.467577][T27881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7363'.
[ 1255.500277][T27883] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.7362'.
[ 1255.578816][T27891] netlink: 'syz.5.7364': attribute type 21 has an invalid length.
[ 1255.597416][T27891] netlink: 'syz.5.7364': attribute type 6 has an invalid length.
[ 1255.613921][T27891] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7364'.
[ 1255.760791][T27889] netlink: 'syz.3.7361': attribute type 10 has an invalid length.
[ 1255.807048][T27889] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7361'.
[ 1255.832633][T27889] device bond0 entered promiscuous mode
[ 1255.842677][T27889] device bond_slave_0 entered promiscuous mode
[ 1255.851482][T27889] device bond_slave_1 entered promiscuous mode
[ 1255.865305][T27898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7365'.
[ 1255.875192][T27889] device batadv_slave_0 entered promiscuous mode
[ 1255.886512][T27898] net_ratelimit: 186 callbacks suppressed
[ 1255.886528][T27898] wlan1: mtu greater than device maximum
[ 1256.028501][ T9467] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1256.166511][T27911] netlink: 'syz.3.7370': attribute type 29 has an invalid length.
[ 1256.269081][T27911] netlink: 'syz.3.7370': attribute type 29 has an invalid length.
[ 1256.723335][T27913] netlink: 'syz.5.7371': attribute type 10 has an invalid length.
[ 1256.969390][T27913] team0: Device wg1 is of different type
[ 1257.119163][T27910] netlink: 'syz.3.7370': attribute type 29 has an invalid length.
[ 1257.137602][T27917] netlink: 'syz.0.7372': attribute type 6 has an invalid length.
[ 1257.160867][T27917] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7372'.
[ 1257.513360][T27936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7377'.
[ 1257.712821][T27944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7378'.
[ 1257.903893][T27955] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7382'.
[ 1257.956706][T27955] device bond0 entered promiscuous mode
[ 1257.962320][T27955] device bond_slave_0 entered promiscuous mode
[ 1258.029388][T27955] device bond_slave_1 entered promiscuous mode
[ 1258.122388][T27955] bridge0: port 4(bond0) entered blocking state
[ 1258.171893][T27955] bridge0: port 4(bond0) entered disabled state
[ 1258.211109][T27955] bridge0: port 4(bond0) entered blocking state
[ 1258.217571][T27955] bridge0: port 4(bond0) entered forwarding state
[ 1259.557312][T27984] netlink: 55 bytes leftover after parsing attributes in process `syz.5.7389'.
[ 1259.702171][T27988] FAULT_INJECTION: forcing a failure.
[ 1259.702171][T27988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.734637][T27988] CPU: 1 PID: 27988 Comm: syz.3.7390 Not tainted syzkaller #0
[ 1259.742160][T27988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1259.752241][T27988] Call Trace:
[ 1259.755539][T27988]  <TASK>
[ 1259.758481][T27988]  dump_stack_lvl+0x188/0x24e
[ 1259.763182][T27988]  ? show_regs_print_info+0x12/0x12
[ 1259.768407][T27988]  ? load_image+0x400/0x400
[ 1259.772943][T27988]  ? __might_fault+0xa6/0x120
[ 1259.777651][T27988]  should_fail_ex+0x399/0x4d0
[ 1259.782361][T27988]  copyout+0x1b/0x120
[ 1259.786442][T27988]  _copy_to_iter+0x48b/0x1040
[ 1259.791159][T27988]  ? iov_iter_init+0x1f0/0x1f0
[ 1259.795946][T27988]  ? __virt_addr_valid+0x188/0x540
[ 1259.801062][T27988]  ? __virt_addr_valid+0x465/0x540
[ 1259.806174][T27988]  ? __phys_addr_symbol+0x2b/0x70
[ 1259.811198][T27988]  ? __check_object_size+0x500/0xa40
[ 1259.816490][T27988]  __skb_datagram_iter+0xde/0x740
[ 1259.821515][T27988]  ? tipc_sk_anc_data_recv+0x500/0x6a0
[ 1259.827038][T27988]  ? skb_copy_datagram_iter+0x290/0x290
[ 1259.832589][T27988]  skb_copy_datagram_iter+0xd7/0x290
[ 1259.837881][T27988]  tipc_recvstream+0x727/0xe70
[ 1259.842659][T27988]  ? tipc_sendstream+0x70/0x70
[ 1259.847418][T27988]  ____sys_recvmsg+0x2cb/0x5e0
[ 1259.852185][T27988]  ? __sys_recvmsg_sock+0x40/0x40
[ 1259.857213][T27988]  ? import_iovec+0x6f/0xa0
[ 1259.861716][T27988]  ___sys_recvmsg+0x212/0x590
[ 1259.866395][T27988]  ? __sys_recvmsg+0x290/0x290
[ 1259.871153][T27988]  ? common_file_perm+0x171/0x1c0
[ 1259.876183][T27988]  ? __fget_files+0x43d/0x4b0
[ 1259.880868][T27988]  __x64_sys_recvmsg+0x205/0x2e0
[ 1259.885804][T27988]  ? ___sys_recvmsg+0x590/0x590
[ 1259.890660][T27988]  ? lockdep_hardirqs_on+0x94/0x140
[ 1259.895860][T27988]  do_syscall_64+0x4c/0xa0
[ 1259.900268][T27988]  ? clear_bhb_loop+0x60/0xb0
[ 1259.904944][T27988]  ? clear_bhb_loop+0x60/0xb0
[ 1259.909628][T27988]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1259.915519][T27988] RIP: 0033:0x7f9c4d99ce59
[ 1259.919931][T27988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1259.939535][T27988] RSP: 002b:00007f9c4e8f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1259.947944][T27988] RAX: ffffffffffffffda RBX: 00007f9c4dc16090 RCX: 00007f9c4d99ce59
[ 1259.955916][T27988] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000007
[ 1259.964000][T27988] RBP: 00007f9c4e8f8090 R08: 0000000000000000 R09: 0000000000000000
[ 1259.972175][T27988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1259.980144][T27988] R13: 00007f9c4dc16128 R14: 00007f9c4dc16090 R15: 00007ffef38a7558
[ 1259.988130][T27988]  </TASK>
[ 1260.521854][T28007] __nla_validate_parse: 1 callbacks suppressed
[ 1260.521890][T28007] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.7398'.
[ 1260.635762][T28007] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1260.661749][T28010] delete_channel: no stack
[ 1262.666847][T28022] validate_nla: 8 callbacks suppressed
[ 1262.666862][T28022] netlink: 'syz.1.7405': attribute type 21 has an invalid length.
[ 1262.682353][T28023] netlink: 'syz.4.7404': attribute type 29 has an invalid length.
[ 1262.698488][T28022] netlink: 'syz.1.7405': attribute type 6 has an invalid length.
[ 1262.708591][T28022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7405'.
[ 1262.723365][T28023] netlink: 'syz.4.7404': attribute type 29 has an invalid length.
[ 1262.742830][T28020] netlink: 'syz.4.7404': attribute type 29 has an invalid length.
[ 1262.752942][T28028] netlink: 'syz.4.7404': attribute type 29 has an invalid length.
[ 1263.185546][T28041] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.7413'.
[ 1263.271296][T28041] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1263.839295][T28065] netlink: 'syz.0.7420': attribute type 21 has an invalid length.
[ 1263.884421][T28065] netlink: 'syz.0.7420': attribute type 6 has an invalid length.
[ 1263.906566][T28065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7420'.
[ 1264.124667][T28074] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.7424'.
[ 1264.542288][T28085] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7425'.
[ 1265.018493][T28097] netlink: 'syz.1.7430': attribute type 25 has an invalid length.
[ 1267.253345][T28105] netlink: 'syz.4.7433': attribute type 21 has an invalid length.
[ 1267.296868][T28105] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7433'.
[ 1267.761242][T28119] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7440'.
[ 1267.866330][T28122] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1267.884609][T28122] netlink: 1 bytes leftover after parsing attributes in process `syz.5.7441'.
[ 1268.088174][T28128] FAULT_INJECTION: forcing a failure.
[ 1268.088174][T28128] name failslab, interval 1, probability 0, space 0, times 0
[ 1268.129836][T28128] CPU: 1 PID: 28128 Comm: syz.5.7442 Not tainted syzkaller #0
[ 1268.137358][T28128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1268.147437][T28128] Call Trace:
[ 1268.150738][T28128]  <TASK>
[ 1268.153682][T28128]  dump_stack_lvl+0x188/0x24e
[ 1268.158380][T28128]  ? show_regs_print_info+0x12/0x12
[ 1268.159355][T28130] FAULT_INJECTION: forcing a failure.
[ 1268.159355][T28130] name failslab, interval 1, probability 0, space 0, times 0
[ 1268.163577][T28128]  ? load_image+0x400/0x400
[ 1268.163604][T28128]  ? __might_sleep+0xd0/0xd0
[ 1268.163620][T28128]  ? __lock_acquire+0x7d10/0x7d10
[ 1268.163644][T28128]  should_fail_ex+0x399/0x4d0
[ 1268.163662][T28128]  should_failslab+0x5/0x20
[ 1268.163678][T28128]  slab_pre_alloc_hook+0x59/0x310
[ 1268.163698][T28128]  kmem_cache_alloc_node+0x5a/0x320
[ 1268.163715][T28128]  ? __alloc_skb+0xfc/0x7e0
[ 1268.163733][T28128]  __alloc_skb+0xfc/0x7e0
[ 1268.163746][T28128]  ? netlink_autobind+0xda/0x300
[ 1268.163766][T28128]  netlink_sendmsg+0x654/0xbd0
[ 1268.163789][T28128]  ? netlink_getsockopt+0x550/0x550
[ 1268.163807][T28128]  ? aa_sock_msg_perm+0x94/0x150
[ 1268.238511][T28128]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1268.243812][T28128]  ? security_socket_sendmsg+0x7c/0xa0
[ 1268.249273][T28128]  ? netlink_getsockopt+0x550/0x550
[ 1268.254481][T28128]  ____sys_sendmsg+0x5be/0x970
[ 1268.259275][T28128]  ? __sys_sendmsg_sock+0x30/0x30
[ 1268.264305][T28128]  ? __import_iovec+0x315/0x500
[ 1268.269171][T28128]  ? import_iovec+0x6f/0xa0
[ 1268.273682][T28128]  ___sys_sendmsg+0x2a2/0x360
[ 1268.278378][T28128]  ? __sys_sendmsg+0x290/0x290
[ 1268.283158][T28128]  ? __lock_acquire+0x7d10/0x7d10
[ 1268.288208][T28128]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1268.293064][T28128]  ? __x64_sys_sendmsg+0x80/0x80
[ 1268.298024][T28128]  ? lockdep_hardirqs_on+0x94/0x140
[ 1268.303238][T28128]  do_syscall_64+0x4c/0xa0
[ 1268.307658][T28128]  ? clear_bhb_loop+0x60/0xb0
[ 1268.312342][T28128]  ? clear_bhb_loop+0x60/0xb0
[ 1268.317034][T28128]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.322949][T28128] RIP: 0033:0x7fde4a19ce59
[ 1268.327364][T28128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.346981][T28128] RSP: 002b:00007fde4afcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1268.355405][T28128] RAX: ffffffffffffffda RBX: 00007fde4a415fa0 RCX: 00007fde4a19ce59
[ 1268.363384][T28128] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[ 1268.371367][T28128] RBP: 00007fde4afcb090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.379340][T28128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1268.387318][T28128] R13: 00007fde4a416038 R14: 00007fde4a415fa0 R15: 00007ffe66f43ed8
[ 1268.395314][T28128]  </TASK>
[ 1268.398341][T28130] CPU: 0 PID: 28130 Comm: syz.1.7444 Not tainted syzkaller #0
[ 1268.405824][T28130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1268.415885][T28130] Call Trace:
[ 1268.419160][T28130]  <TASK>
[ 1268.422086][T28130]  dump_stack_lvl+0x188/0x24e
[ 1268.426764][T28130]  ? show_regs_print_info+0x12/0x12
[ 1268.431957][T28130]  ? load_image+0x400/0x400
[ 1268.436460][T28130]  ? __might_sleep+0xd0/0xd0
[ 1268.441043][T28130]  ? __lock_acquire+0x7d10/0x7d10
[ 1268.446070][T28130]  should_fail_ex+0x399/0x4d0
[ 1268.450753][T28130]  should_failslab+0x5/0x20
[ 1268.455256][T28130]  slab_pre_alloc_hook+0x59/0x310
[ 1268.460280][T28130]  kmem_cache_alloc_node+0x5a/0x320
[ 1268.465472][T28130]  ? __dev_queue_xmit+0x26b/0x37c0
[ 1268.470580][T28130]  ? __alloc_skb+0xfc/0x7e0
[ 1268.475079][T28130]  __alloc_skb+0xfc/0x7e0
[ 1268.479408][T28130]  netlink_ack+0x372/0x1170
[ 1268.483910][T28130]  ? __inet_diag_dump+0x380/0x380
[ 1268.488942][T28130]  ? __lock_acquire+0x7d10/0x7d10
[ 1268.493967][T28130]  ? netlink_dump+0xd00/0xd00
[ 1268.498641][T28130]  ? __inet_diag_dump+0x380/0x380
[ 1268.503667][T28130]  ? sock_diag_rcv_msg+0x3f6/0x5f0
[ 1268.508786][T28130]  netlink_rcv_skb+0x280/0x450
[ 1268.513548][T28130]  ? sock_diag_bind+0xa0/0xa0
[ 1268.518228][T28130]  ? netlink_ack+0x1170/0x1170
[ 1268.523007][T28130]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1268.528215][T28130]  sock_diag_rcv+0x26/0x40
[ 1268.532628][T28130]  netlink_unicast+0x74d/0x8d0
[ 1268.537397][T28130]  netlink_sendmsg+0x8ad/0xbd0
[ 1268.542165][T28130]  ? netlink_getsockopt+0x550/0x550
[ 1268.547359][T28130]  ? aa_sock_msg_perm+0x94/0x150
[ 1268.552300][T28130]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1268.557585][T28130]  ? security_socket_sendmsg+0x7c/0xa0
[ 1268.563050][T28130]  ? netlink_getsockopt+0x550/0x550
[ 1268.568248][T28130]  ____sys_sendmsg+0x5be/0x970
[ 1268.573019][T28130]  ? __sys_sendmsg_sock+0x30/0x30
[ 1268.578038][T28130]  ? __import_iovec+0x315/0x500
[ 1268.582890][T28130]  ? import_iovec+0x6f/0xa0
[ 1268.587393][T28130]  ___sys_sendmsg+0x2a2/0x360
[ 1268.592073][T28130]  ? __sys_sendmsg+0x290/0x290
[ 1268.596844][T28130]  ? __lock_acquire+0x7d10/0x7d10
[ 1268.601885][T28130]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1268.606736][T28130]  ? __x64_sys_sendmsg+0x80/0x80
[ 1268.611681][T28130]  ? lockdep_hardirqs_on+0x94/0x140
[ 1268.616879][T28130]  do_syscall_64+0x4c/0xa0
[ 1268.621291][T28130]  ? clear_bhb_loop+0x60/0xb0
[ 1268.625967][T28130]  ? clear_bhb_loop+0x60/0xb0
[ 1268.630649][T28130]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1268.636543][T28130] RIP: 0033:0x7fa3a239ce59
[ 1268.640957][T28130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1268.660566][T28130] RSP: 002b:00007fa3a32cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1268.668980][T28130] RAX: ffffffffffffffda RBX: 00007fa3a2615fa0 RCX: 00007fa3a239ce59
[ 1268.676946][T28130] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1268.684914][T28130] RBP: 00007fa3a32cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1268.692881][T28130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1268.700852][T28130] R13: 00007fa3a2616038 R14: 00007fa3a2615fa0 R15: 00007ffc3c6c5d48
[ 1268.708835][T28130]  </TASK>
[ 1268.882667][T28135] validate_nla: 1 callbacks suppressed
[ 1268.882686][T28135] netlink: 'syz.5.7446': attribute type 21 has an invalid length.
[ 1268.902619][T28137] netlink: 'syz.3.7445': attribute type 2 has an invalid length.
[ 1268.910898][T28137] netlink: 'syz.3.7445': attribute type 1 has an invalid length.
[ 1268.919606][T28135] netlink: 'syz.5.7446': attribute type 6 has an invalid length.
[ 1268.934026][T28137] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.7445'.
[ 1268.950878][T28135] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7446'.
[ 1269.070552][T28139] netlink: 'syz.0.7447': attribute type 10 has an invalid length.
[ 1269.094023][T28139] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7447'.
[ 1269.164946][T28139] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1269.243894][T28143] netlink: 'syz.4.7449': attribute type 39 has an invalid length.
[ 1269.597895][T28159] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7455'.
[ 1273.543145][T28186] netlink: 'syz.0.7468': attribute type 1 has an invalid length.
[ 1273.591226][T28186] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.7468'.
[ 1273.753198][T28193] netlink: 'syz.1.7470': attribute type 5 has an invalid length.
[ 1273.773897][T28193] netlink: 'syz.1.7470': attribute type 21 has an invalid length.
[ 1274.177109][T28206] netlink: 'syz.5.7474': attribute type 2 has an invalid length.
[ 1274.234854][T28206] netlink: 'syz.5.7474': attribute type 10 has an invalid length.
[ 1274.243221][T28206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1275.006263][T28206] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1275.039203][T28206] device batadv_slave_0 entered promiscuous mode
[ 1275.047671][T28206] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[ 1275.072398][T28218] netlink: 'syz.3.7482': attribute type 1 has an invalid length.
[ 1275.098789][T28218] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.7482'.
[ 1275.280398][T28227] netlink: 'syz.4.7485': attribute type 39 has an invalid length.
[ 1277.260958][T28249] delete_channel: no stack
[ 1278.537708][T28261] FAULT_INJECTION: forcing a failure.
[ 1278.537708][T28261] name failslab, interval 1, probability 0, space 0, times 0
[ 1278.573850][T28261] CPU: 1 PID: 28261 Comm: syz.3.7496 Not tainted syzkaller #0
[ 1278.581372][T28261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1278.591450][T28261] Call Trace:
[ 1278.594746][T28261]  <TASK>
[ 1278.597685][T28261]  dump_stack_lvl+0x188/0x24e
[ 1278.602369][T28261]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1278.608575][T28261]  ? show_regs_print_info+0x12/0x12
[ 1278.613785][T28261]  ? load_image+0x400/0x400
[ 1278.618301][T28261]  ? should_fail_ex+0x346/0x4d0
[ 1278.623154][T28261]  should_fail_ex+0x399/0x4d0
[ 1278.627836][T28261]  should_failslab+0x5/0x20
[ 1278.632333][T28261]  slab_pre_alloc_hook+0x59/0x310
[ 1278.637367][T28261]  kmem_cache_alloc+0x56/0x2f0
[ 1278.642129][T28261]  ? skb_clone+0x1e7/0x370
[ 1278.646553][T28261]  skb_clone+0x1e7/0x370
[ 1278.650797][T28261]  __netlink_deliver_tap+0x3ed/0x800
[ 1278.656111][T28261]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1278.661324][T28261]  netlink_deliver_tap+0x19c/0x1b0
[ 1278.666447][T28261]  netlink_sendskb+0x64/0x130
[ 1278.671141][T28261]  tipc_nl_compat_recv+0x8fc/0xaf0
[ 1278.676262][T28261]  ? tipc_netlink_compat_stop+0x20/0x20
[ 1278.681800][T28261]  ? __mutex_trylock_common+0x155/0x260
[ 1278.687386][T28261]  ? tipc_nl_bearer_disable+0x30/0x30
[ 1278.692757][T28261]  ? tipc_nl_compat_dumpit+0x780/0x780
[ 1278.698220][T28261]  ? rcu_is_watching+0x11/0xa0
[ 1278.702986][T28261]  ? trace_contention_end+0x5f/0x170
[ 1278.708277][T28261]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1278.713831][T28261]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1278.719735][T28261]  ? memset+0x1e/0x40
[ 1278.723715][T28261]  ? genl_get_cmd+0x55f/0x8b0
[ 1278.728398][T28261]  genl_rcv_msg+0x604/0x790
[ 1278.732912][T28261]  ? genl_bind+0x360/0x360
[ 1278.737335][T28261]  ? tipc_netlink_compat_stop+0x20/0x20
[ 1278.742898][T28261]  netlink_rcv_skb+0x1fb/0x450
[ 1278.747661][T28261]  ? genl_bind+0x360/0x360
[ 1278.752109][T28261]  ? netlink_ack+0x1170/0x1170
[ 1278.757067][T28261]  ? down_read+0x1a8/0x2d0
[ 1278.761484][T28261]  genl_rcv+0x24/0x40
[ 1278.765464][T28261]  netlink_unicast+0x74d/0x8d0
[ 1278.770236][T28261]  netlink_sendmsg+0x8ad/0xbd0
[ 1278.775021][T28261]  ? netlink_getsockopt+0x550/0x550
[ 1278.780221][T28261]  ? aa_sock_msg_perm+0x94/0x150
[ 1278.785167][T28261]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1278.790445][T28261]  ? security_socket_sendmsg+0x7c/0xa0
[ 1278.795903][T28261]  ? netlink_getsockopt+0x550/0x550
[ 1278.801098][T28261]  ____sys_sendmsg+0x5be/0x970
[ 1278.805875][T28261]  ? __sys_sendmsg_sock+0x30/0x30
[ 1278.810895][T28261]  ? __import_iovec+0x315/0x500
[ 1278.815757][T28261]  ? import_iovec+0x6f/0xa0
[ 1278.820289][T28261]  ___sys_sendmsg+0x2a2/0x360
[ 1278.824964][T28261]  ? migrate_enable+0x148/0x220
[ 1278.829820][T28261]  ? __sys_sendmsg+0x290/0x290
[ 1278.834640][T28261]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1278.839492][T28261]  ? __x64_sys_sendmsg+0x80/0x80
[ 1278.844464][T28261]  ? syscall_enter_from_user_mode+0x2a/0x80
[ 1278.850364][T28261]  do_syscall_64+0x4c/0xa0
[ 1278.854782][T28261]  ? clear_bhb_loop+0x60/0xb0
[ 1278.859488][T28261]  ? clear_bhb_loop+0x60/0xb0
[ 1278.864174][T28261]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1278.870068][T28261] RIP: 0033:0x7f9c4d99ce59
[ 1278.874488][T28261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1278.894093][T28261] RSP: 002b:00007f9c4e919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1278.902533][T28261] RAX: ffffffffffffffda RBX: 00007f9c4dc15fa0 RCX: 00007f9c4d99ce59
[ 1278.910512][T28261] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[ 1278.918484][T28261] RBP: 00007f9c4e919090 R08: 0000000000000000 R09: 0000000000000000
[ 1278.926451][T28261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1278.934419][T28261] R13: 00007f9c4dc16038 R14: 00007f9c4dc15fa0 R15: 00007ffef38a7558
[ 1278.942414][T28261]  </TASK>
[ 1279.188304][T28274] netlink: 'syz.0.7500': attribute type 27 has an invalid length.
[ 1279.860396][T28293] delete_channel: no stack
[ 1280.137256][T28303] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7511'.
[ 1280.296109][T28317] netlink: 'syz.3.7516': attribute type 1 has an invalid length.
[ 1280.315941][T28317] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.7516'.
[ 1281.693851][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[ 1281.892966][T28338] delete_channel: no stack
[ 1282.285570][T28351] netlink: 'syz.5.7528': attribute type 1 has an invalid length.
[ 1282.310463][T28351] netlink: 16134 bytes leftover after parsing attributes in process `syz.5.7528'.
[ 1282.699762][T28365] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.7535'.
[ 1283.074659][T28371] FAULT_INJECTION: forcing a failure.
[ 1283.074659][T28371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1283.092009][T28371] CPU: 0 PID: 28371 Comm: syz.0.7537 Not tainted syzkaller #0
[ 1283.099522][T28371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1283.109683][T28371] Call Trace:
[ 1283.112974][T28371]  <TASK>
[ 1283.115939][T28371]  dump_stack_lvl+0x188/0x24e
[ 1283.120642][T28371]  ? show_regs_print_info+0x12/0x12
[ 1283.125862][T28371]  ? load_image+0x400/0x400
[ 1283.130400][T28371]  ? __might_fault+0xa6/0x120
[ 1283.135107][T28371]  should_fail_ex+0x399/0x4d0
[ 1283.139815][T28371]  copyout+0x1b/0x120
[ 1283.143825][T28371]  _copy_to_iter+0x48b/0x1040
[ 1283.148529][T28371]  ? iov_iter_init+0x1f0/0x1f0
[ 1283.153302][T28371]  ? __virt_addr_valid+0x465/0x540
[ 1283.158445][T28371]  ? __phys_addr_symbol+0x2b/0x70
[ 1283.163469][T28371]  ? __check_object_size+0x500/0xa40
[ 1283.168758][T28371]  __skb_datagram_iter+0xde/0x740
[ 1283.173783][T28371]  ? __skb_try_recv_datagram+0x3d6/0x4d0
[ 1283.179415][T28371]  ? skb_copy_datagram_iter+0x290/0x290
[ 1283.184962][T28371]  skb_copy_datagram_iter+0xd7/0x290
[ 1283.190248][T28371]  __unix_dgram_recvmsg+0x6ac/0xdc0
[ 1283.195455][T28371]  ? unix_unhash+0x10/0x10
[ 1283.199868][T28371]  ? aa_af_perm+0x340/0x340
[ 1283.204372][T28371]  ? __might_fault+0xa6/0x120
[ 1283.209048][T28371]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[ 1283.214328][T28371]  ? security_socket_recvmsg+0x85/0xb0
[ 1283.219786][T28371]  ? unix_dgram_recvmsg+0xa9/0xd0
[ 1283.224832][T28371]  ? unix_dgram_sendmsg+0x16e0/0x16e0
[ 1283.230208][T28371]  ____sys_recvmsg+0x2cb/0x5e0
[ 1283.234982][T28371]  ? __sys_recvmsg_sock+0x40/0x40
[ 1283.240012][T28371]  ? import_iovec+0x6f/0xa0
[ 1283.244530][T28371]  ___sys_recvmsg+0x212/0x590
[ 1283.249214][T28371]  ? __sys_recvmsg+0x290/0x290
[ 1283.253976][T28371]  ? common_file_perm+0x171/0x1c0
[ 1283.259006][T28371]  ? __fget_files+0x43d/0x4b0
[ 1283.263719][T28371]  __x64_sys_recvmsg+0x205/0x2e0
[ 1283.268660][T28371]  ? ___sys_recvmsg+0x590/0x590
[ 1283.273521][T28371]  ? lockdep_hardirqs_on+0x94/0x140
[ 1283.278724][T28371]  do_syscall_64+0x4c/0xa0
[ 1283.283137][T28371]  ? clear_bhb_loop+0x60/0xb0
[ 1283.287810][T28371]  ? clear_bhb_loop+0x60/0xb0
[ 1283.292493][T28371]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1283.298392][T28371] RIP: 0033:0x7f77c799ce59
[ 1283.302810][T28371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1283.322410][T28371] RSP: 002b:00007f77c8802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1283.330821][T28371] RAX: ffffffffffffffda RBX: 00007f77c7c15fa0 RCX: 00007f77c799ce59
[ 1283.338801][T28371] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006
[ 1283.346766][T28371] RBP: 00007f77c8802090 R08: 0000000000000000 R09: 0000000000000000
[ 1283.354728][T28371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1283.362691][T28371] R13: 00007f77c7c16038 R14: 00007f77c7c15fa0 R15: 00007ffed3fc77c8
[ 1283.370675][T28371]  </TASK>
[ 1284.460912][T28377] delete_channel: no stack
[ 1285.043194][T28387] FAULT_INJECTION: forcing a failure.
[ 1285.043194][T28387] name failslab, interval 1, probability 0, space 0, times 0
[ 1285.059961][T28386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7542'.
[ 1285.084300][T28387] CPU: 0 PID: 28387 Comm: syz.4.7541 Not tainted syzkaller #0
[ 1285.091819][T28387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1285.101895][T28387] Call Trace:
[ 1285.105182][T28387]  <TASK>
[ 1285.108119][T28387]  dump_stack_lvl+0x188/0x24e
[ 1285.112821][T28387]  ? show_regs_print_info+0x12/0x12
[ 1285.118043][T28387]  ? load_image+0x400/0x400
[ 1285.122569][T28387]  ? __might_sleep+0xd0/0xd0
[ 1285.127170][T28387]  ? __lock_acquire+0x7d10/0x7d10
[ 1285.132213][T28387]  should_fail_ex+0x399/0x4d0
[ 1285.136905][T28387]  should_failslab+0x5/0x20
[ 1285.141423][T28387]  slab_pre_alloc_hook+0x59/0x310
[ 1285.146467][T28387]  kmem_cache_alloc_node+0x5a/0x320
[ 1285.151663][T28387]  ? __alloc_skb+0xfc/0x7e0
[ 1285.156164][T28387]  __alloc_skb+0xfc/0x7e0
[ 1285.160486][T28387]  ? netlink_autobind+0xda/0x300
[ 1285.165422][T28387]  netlink_sendmsg+0x654/0xbd0
[ 1285.170194][T28387]  ? netlink_getsockopt+0x550/0x550
[ 1285.175396][T28387]  ? aa_sock_msg_perm+0x94/0x150
[ 1285.180352][T28387]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1285.185659][T28387]  ? security_socket_sendmsg+0x7c/0xa0
[ 1285.191119][T28387]  ? netlink_getsockopt+0x550/0x550
[ 1285.196338][T28387]  ____sys_sendmsg+0x5be/0x970
[ 1285.201123][T28387]  ? __sys_sendmsg_sock+0x30/0x30
[ 1285.206154][T28387]  ? __import_iovec+0x315/0x500
[ 1285.211011][T28387]  ? import_iovec+0x6f/0xa0
[ 1285.215517][T28387]  ___sys_sendmsg+0x2a2/0x360
[ 1285.220198][T28387]  ? __sys_sendmsg+0x290/0x290
[ 1285.224980][T28387]  ? trace_call_bpf+0xbf/0x6b0
[ 1285.229770][T28387]  __se_sys_sendmsg+0x1bb/0x2a0
[ 1285.234618][T28387]  ? __x64_sys_sendmsg+0x80/0x80
[ 1285.239561][T28387]  ? lockdep_hardirqs_on+0x94/0x140
[ 1285.244758][T28387]  do_syscall_64+0x4c/0xa0
[ 1285.249169][T28387]  ? clear_bhb_loop+0x60/0xb0
[ 1285.253846][T28387]  ? clear_bhb_loop+0x60/0xb0
[ 1285.258528][T28387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1285.264425][T28387] RIP: 0033:0x7f14bf59ce59
[ 1285.268839][T28387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1285.288451][T28387] RSP: 002b:00007f14c039f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1285.296865][T28387] RAX: ffffffffffffffda RBX: 00007f14bf815fa0 RCX: 00007f14bf59ce59
[ 1285.304829][T28387] RDX: 0000000020004c04 RSI: 0000200000000080 RDI: 0000000000000003
[ 1285.312801][T28387] RBP: 00007f14c039f090 R08: 0000000000000000 R09: 0000000000000000
[ 1285.320803][T28387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1285.328781][T28387] R13: 00007f14bf816038 R14: 00007f14bf815fa0 R15: 00007ffd5e068728
[ 1285.336854][T28387]  </TASK>
[ 1285.517575][T28393] netlink: 'syz.5.7546': attribute type 1 has an invalid length.
[ 1285.554245][T28393] netlink: 16134 bytes leftover after parsing attributes in process `syz.5.7546'.
[ 1285.672516][T28395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7547'.
[ 1286.204278][T28405] can: request_module (can-proto-0) failed.
[ 1286.440193][T28420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7555'.
[ 1286.609711][T28417] delete_channel: no stack
[ 1287.078819][ T9467] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1289.219099][   T27] INFO: task syz.2.6604:25522 blocked for more than 143 seconds.
[ 1289.232313][   T27]       Not tainted syzkaller #0
[ 1289.251207][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1289.271639][   T27] task:syz.2.6604      state:D stack:25712 pid:25522 ppid:23047  flags:0x00004004
[ 1289.309508][   T27] Call Trace:
[ 1289.321012][   T27]  <TASK>
[ 1289.331162][   T27]  __schedule+0x11d1/0x40e0
[ 1289.348180][   T27]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1289.363537][   T27]  ? __sched_text_start+0x8/0x8
[ 1289.376414][   T27]  ? task_work_cancel+0xa1/0x220
[ 1289.392548][   T27]  ? task_work_cancel_func+0x210/0x210
[ 1289.416553][   T27]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1289.428078][   T27]  ? _free_event+0xfd/0x10a0
[ 1289.443556][   T27]  schedule+0xb9/0x180
[ 1289.451596][   T27]  _free_event+0x171/0x10a0
[ 1289.466994][   T27]  ? perf_mmap+0x13d0/0x13d0
[ 1289.487078][   T27]  ? perf_mmap+0x13d0/0x13d0
[ 1289.497473][   T27]  perf_event_release_kernel+0x83e/0x8d0
[ 1289.525109][   T27]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1289.548364][   T27]  ? perf_mmap+0x13d0/0x13d0
[ 1289.567213][   T27]  ? calc_timer_values+0x410/0x410
[ 1289.586343][   T27]  ? __fput+0x21e/0x920
[ 1289.601845][   T27]  ? perf_mmap+0x13d0/0x13d0
[ 1289.612411][   T27]  perf_release+0x37/0x40
[ 1289.639423][   T27]  __fput+0x22c/0x920
[ 1289.654838][   T27]  task_work_run+0x1d0/0x260
[ 1289.669706][   T27]  ? task_work_cancel+0x220/0x220
[ 1289.681729][   T27]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1289.705561][   T27]  exit_to_user_mode_loop+0xe6/0x110
[ 1289.720405][   T27]  exit_to_user_mode_prepare+0xee/0x180
[ 1289.739050][   T27]  syscall_exit_to_user_mode+0x16/0x40
[ 1289.758177][   T27]  do_syscall_64+0x58/0xa0
[ 1289.770639][   T27]  ? clear_bhb_loop+0x60/0xb0
[ 1289.800583][   T27]  ? clear_bhb_loop+0x60/0xb0
[ 1289.812235][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1289.830632][   T27] RIP: 0033:0x7fb05299ce59
[ 1289.844677][   T27] RSP: 002b:00007fb053839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 1289.870813][   T27] RAX: 0000000000000000 RBX: 00007fb052c15fa0 RCX: 00007fb05299ce59
[ 1289.896108][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1289.916087][   T27] RBP: 00007fb052a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 1289.937249][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1289.962905][   T27] R13: 00007fb052c16038 R14: 00007fb052c15fa0 R15: 00007ffed3feaea8
[ 1289.980663][   T27]  </TASK>
[ 1289.990571][   T27] 
[ 1289.990571][   T27] Showing all locks held in the system:
[ 1290.006774][   T27] 1 lock held by rcu_tasks_kthre/12:
[ 1290.021896][   T27]  #0: ffffffff8cb2e7f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[ 1290.042120][   T27] 1 lock held by rcu_tasks_trace/13:
[ 1290.061790][   T27]  #0: ffffffff8cb2f010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[ 1290.087330][   T27] 3 locks held by kworker/0:1/14:
[ 1290.098173][   T27]  #0: ffff88802f3b9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.132041][   T27]  #1: ffffc90000137d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.176981][   T27]  #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30
[ 1290.186902][   T27] 1 lock held by khungtaskd/27:
[ 1290.191782][   T27]  #0: ffffffff8cb2de60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1290.201846][   T27] 2 locks held by getty/4029:
[ 1290.206580][   T27]  #0: ffff88803007f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1290.216596][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390
[ 1290.226939][   T27] 2 locks held by kworker/1:6/4324:
[ 1290.232593][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.243193][   T27]  #1: ffffc90004687d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.254937][   T27] 3 locks held by kworker/1:7/12380:
[ 1290.260254][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.270791][   T27]  #1: ffffc9000cb67d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.281330][   T27]  #2: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20
[ 1290.291983][   T27] 4 locks held by kworker/u4:0/24154:
[ 1290.297442][   T27]  #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.307968][   T27]  #1: ffffc90004d27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1290.323708][   T27]  #2: ffffffff8dd3dd50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[ 1290.333494][   T27]  #3: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: vti6_exit_batch_net+0xbb/0x420
[ 1290.343270][   T27] 1 lock held by syz.4.7563/28445:
[ 1290.348502][   T27]  #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[ 1290.358196][   T27] 1 lock held by syz.4.7563/28446:
[ 1290.363335][   T27]  #0: ffffffff8dd4d108 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10
[ 1290.383161][   T27] 1 lock held by syz.5.7564/28447:
[ 1290.395035][   T27]  #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[ 1290.413398][   T27] 1 lock held by syz.5.7564/28448:
[ 1290.424303][   T27]  #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x5e7/0xe80
[ 1290.433442][   T27] 1 lock held by syz.1.7565/28449:
[ 1290.443980][   T27]  #0: ffffffff8cb82fe8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[ 1290.456331][   T27] 2 locks held by syz.3.7566/28452:
[ 1290.461559][   T27]  #0: ffffffff8dd4d108 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10
[ 1290.476401][   T27]  #1: ffffffff8cb33b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[ 1290.487491][   T27] 1 lock held by syz.0.7567/28456:
[ 1290.492624][   T27]  #0: ffffffff8dd4abe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[ 1290.502727][   T27] 
[ 1290.505180][   T27] =============================================
[ 1290.505180][   T27] 
[ 1290.517370][   T27] NMI backtrace for cpu 0
[ 1290.521749][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 1290.528960][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1290.539016][   T27] Call Trace:
[ 1290.542293][   T27]  <TASK>
[ 1290.545219][   T27]  dump_stack_lvl+0x188/0x24e
[ 1290.549899][   T27]  ? ct_irq_enter_irqson+0x170/0x170
[ 1290.555271][   T27]  ? show_regs_print_info+0x12/0x12
[ 1290.560469][   T27]  ? load_image+0x400/0x400
[ 1290.564970][   T27]  ? vprintk_emit+0x59f/0x6a0
[ 1290.569677][   T27]  ? nmi_cpu_backtrace+0x1cb/0x460
[ 1290.574792][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[ 1290.579735][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[ 1290.585886][   T27]  ? _printk+0xda/0x130
[ 1290.590040][   T27]  ? load_image+0x400/0x400
[ 1290.594545][   T27]  ? load_image+0x400/0x400
[ 1290.599052][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[ 1290.605126][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1290.611193][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[ 1290.617177][   T27]  watchdog+0xeee/0xf30
[ 1290.621334][   T27]  ? watchdog+0x1ed/0xf30
[ 1290.625664][   T27]  kthread+0x29d/0x330
[ 1290.629731][   T27]  ? hungtask_pm_notify+0x40/0x40
[ 1290.634758][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1290.639377][   T27]  ret_from_fork+0x1f/0x30
[ 1290.643888][   T27]  </TASK>
[ 1290.647698][   T27] Sending NMI from CPU 0 to CPUs 1:
[ 1290.652957][    C1] NMI backtrace for cpu 1
[ 1290.652969][    C1] CPU: 1 PID: 128 Comm: kworker/1:2 Not tainted syzkaller #0
[ 1290.652984][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1290.652994][    C1] Workqueue: events free_obj_work
[ 1290.653017][    C1] RIP: 0010:memset_erms+0xb/0x10
[ 1290.653036][    C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01
[ 1290.653048][    C1] RSP: 0018:ffffc90002d675e8 EFLAGS: 00000202
[ 1290.653061][    C1] RAX: 0000000000000000 RBX: ffffc90002d676c8 RCX: 0000000000000000
[ 1290.653071][    C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002d67728
[ 1290.653081][    C1] RBP: ffffffff8ea04ae0 R08: ffffc90002d67727 R09: ffffc90002d67718
[ 1290.653092][    C1] R10: dffffc0000000000 R11: fffff520005acee5 R12: 1ffff920005aceda
[ 1290.653103][    C1] R13: dffffc0000000000 R14: ffffc90002d67718 R15: ffffc90002d676fd
[ 1290.653115][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1290.653128][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1290.653138][    C1] CR2: 0000001b31518ff8 CR3: 000000001fa53000 CR4: 00000000003506e0
[ 1290.653152][    C1] DR0: 0000000000000000 DR1: 0000000000008d24 DR2: 0000000000000000
[ 1290.653161][    C1] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1290.653171][    C1] Call Trace:
[ 1290.653175][    C1]  <TASK>
[ 1290.653180][    C1]  unwind_next_frame+0xb8a/0x20b0
[ 1290.653204][    C1]  ? worker_thread+0xaa2/0x1270
[ 1290.653223][    C1]  ? stack_trace_save+0xf0/0xf0
[ 1290.653241][    C1]  arch_stack_walk+0x10c/0x140
[ 1290.653261][    C1]  ? kthread+0x29d/0x330
[ 1290.653275][    C1]  stack_trace_save+0xa6/0xf0
[ 1290.653293][    C1]  ? stack_trace_snprint+0xf0/0xf0
[ 1290.653315][    C1]  kasan_set_track+0x4b/0x70
[ 1290.653334][    C1]  ? kasan_set_track+0x4b/0x70
[ 1290.653351][    C1]  ? kasan_save_free_info+0x2d/0x50
[ 1290.653364][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[ 1290.653382][    C1]  ? slab_free_freelist_hook+0x131/0x1a0
[ 1290.653399][    C1]  ? kmem_cache_free+0xf7/0x290
[ 1290.653413][    C1]  ? free_obj_work+0x432/0x5a0
[ 1290.653434][    C1]  ? process_one_work+0x8a2/0x1160
[ 1290.653449][    C1]  ? worker_thread+0xaa2/0x1270
[ 1290.653485][    C1]  ? kmem_cache_free+0xf7/0x290
[ 1290.653500][    C1]  kasan_save_free_info+0x2d/0x50
[ 1290.653513][    C1]  ____kasan_slab_free+0x126/0x1e0
[ 1290.653533][    C1]  slab_free_freelist_hook+0x131/0x1a0
[ 1290.653552][    C1]  ? free_obj_work+0x432/0x5a0
[ 1290.653568][    C1]  kmem_cache_free+0xf7/0x290
[ 1290.653586][    C1]  free_obj_work+0x432/0x5a0
[ 1290.653604][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1290.653624][    C1]  ? __free_object+0xa70/0xa70
[ 1290.653640][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1290.653661][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1290.653683][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1290.653704][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1290.653723][    C1]  ? process_one_work+0x7b0/0x1160
[ 1290.653739][    C1]  process_one_work+0x8a2/0x1160
[ 1290.653763][    C1]  ? worker_detach_from_pool+0x240/0x240
[ 1290.653782][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1290.653799][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1290.653815][    C1]  ? kthread_data+0x4b/0xc0
[ 1290.653835][    C1]  worker_thread+0xaa2/0x1270
[ 1290.653859][    C1]  ? __kthread_parkme+0x162/0x1c0
[ 1290.653887][    C1]  kthread+0x29d/0x330
[ 1290.653900][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[ 1290.653916][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1290.653929][    C1]  ret_from_fork+0x1f/0x30
[ 1290.653964][    C1]  </TASK>
[ 1291.031785][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[ 1291.038700][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[ 1291.045919][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1291.055991][   T27] Call Trace:
[ 1291.059272][   T27]  <TASK>
[ 1291.062225][   T27]  dump_stack_lvl+0x188/0x24e
[ 1291.066906][   T27]  ? memcpy+0x3c/0x60
[ 1291.070929][   T27]  ? show_regs_print_info+0x12/0x12
[ 1291.076139][   T27]  ? load_image+0x400/0x400
[ 1291.080659][   T27]  panic+0x2e5/0x730
[ 1291.084584][   T27]  ? schedule_preempt_disabled+0x20/0x20
[ 1291.090216][   T27]  ? bpf_jit_dump+0xd0/0xd0
[ 1291.094722][   T27]  ? __irq_work_queue_local+0x12c/0x190
[ 1291.100272][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[ 1291.106422][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[ 1291.112615][   T27]  watchdog+0xf2d/0xf30
[ 1291.116784][   T27]  ? watchdog+0x1ed/0xf30
[ 1291.121112][   T27]  kthread+0x29d/0x330
[ 1291.125203][   T27]  ? hungtask_pm_notify+0x40/0x40
[ 1291.130223][   T27]  ? kthread_blkcg+0xd0/0xd0
[ 1291.134811][   T27]  ret_from_fork+0x1f/0x30
[ 1291.139239][   T27]  </TASK>
[ 1291.142512][   T27] Kernel Offset: disabled
[ 1291.146829][   T27] Rebooting in 86400 seconds..