last executing test programs:

4.552130136s ago: executing program 3 (id=2233):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000002b0000009500000000000000179dd9ab63c491ad82896a770f38774a3848a0b65a90839abd236b75321415ae705a533de20054"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)

4.205390301s ago: executing program 3 (id=2237):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x2}, {0x2}]}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33)
recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x12)
r4 = socket$kcm(0x1e, 0x4, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x11, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2ea1f8480d0000005e140602000001000e000a000f0000000280ea", 0x1b}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
r11 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000580081d34e81f782db44b904e417434509000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1, 0x0, 0xffffffd7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095001000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c)
socket$kcm(0x10, 0x2, 0x0)

3.071184649s ago: executing program 3 (id=2244):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x827, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x3ff, [{0x5, 0x4, 0x15}, {0xa, 0x4, 0x76805b51}]}]}}, &(0x7f0000000140)=""/143, 0x3e, 0x8f, 0x1}, 0x28)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x1, 0x106)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.068758529s ago: executing program 0 (id=2246):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000001195"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

2.752468293s ago: executing program 0 (id=2248):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x10, 0x2, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010)

2.611167449s ago: executing program 1 (id=2249):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a) (async)
socket$kcm(0xa, 0x2, 0x3a)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x50}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62fb7e4fe02ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5)
syz_clone(0x41333280, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) (async)
syz_clone(0x41333280, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/ipc\x00')

2.12070209s ago: executing program 1 (id=2251):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xd0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c)

2.1203404s ago: executing program 2 (id=2252):
r0 = socket$kcm(0x23, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x3, 0x2, 0x0, 0x1, 0x1, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8e4, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x2, 0x7}, 0x10, 0x10cec, r1, 0x6, &(0x7f00000001c0)=[r1, r1, 0xffffffffffffffff, r1, r1, r1, r1], &(0x7f0000000240)=[{0x2, 0x5, 0x5, 0xc}, {0x0, 0x4, 0xb, 0xa}, {0x3, 0x5, 0x10, 0x6}, {0x1, 0x3, 0x2, 0x7}, {0x2, 0x5, 0x4, 0xb}, {0x5, 0x3, 0x0, 0x5}], 0x10, 0x91c}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r4, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1})

1.988164325s ago: executing program 0 (id=2253):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000001000000000000100085000000d40000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x0, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000001d40)}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000740)=[{0x0}], 0x1}, 0x200000fd)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x2, 0x0) (async)
r6 = socket$kcm(0x1e, 0x2, 0x0)
recvmsg(r6, 0x0, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)

1.981675266s ago: executing program 2 (id=2254):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a001800050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x29, 0xc61b81e780987cf3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)

1.899929179s ago: executing program 1 (id=2255):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x10000, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8912, &(0x7f0000000080))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x200000010}, 0x0, 0xffffdffffffffffc, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)

1.88139153s ago: executing program 3 (id=2256):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x3, &(0x7f0000000580)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xd9, [@empty]}, @noop, @timestamp_addr={0x44, 0xc, 0xc2, 0x1, 0xa, [{@local, 0x4}]}, @timestamp={0x44, 0x8, 0xd9, 0x0, 0x1, [0x1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x6, [{@rand_addr=0x64010101, 0x100}, {@empty, 0x938}]}, @timestamp_addr={0x44, 0x24, 0xc1, 0x1, 0x6, [{@broadcast, 0x100}, {@multicast2, 0x80000001}, {@empty, 0x1428}, {@local, 0x60}]}, @rr={0x7, 0x17, 0xc7, [@multicast2, @broadcast, @multicast2, @rand_addr=0x64010101, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xc0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000092e900000000000000000040000000000000000000"], 0x48)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91724fc60100005000a000200053582c137153e37000c0680040002000300", 0x33fe0}], 0x1}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x8010743f, 0xf0ff1f00000000)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x8}, 0x8)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080))
close(r0)

1.555690973s ago: executing program 2 (id=2257):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085002b000500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

1.555107933s ago: executing program 2 (id=2258):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="27031c00000014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd8", 0x28}], 0x1}, 0x0)

1.518343395s ago: executing program 0 (id=2259):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000002095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)

1.429987819s ago: executing program 2 (id=2260):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0xa, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x4}, @datasec={0x1, 0x9, 0x0, 0xf, 0x2, [{0x2, 0x7ff, 0x400}, {0x5, 0x100, 0x1}, {0x4, 0x0, 0xb}, {0x2, 0x10000, 0x100}, {0x2, 0x6, 0x7}, {0x3, 0x80000000, 0x80000001}, {0x5, 0x6, 0x3}, {0x5, 0x0, 0x4}, {0x5, 0x8, 0x9}], "08ca"}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x5f, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000180)=""/227, 0xaa, 0xe3, 0x1, 0x2, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], <r2=>0x0, 0x58, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x33, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000640)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x43, &(0x7f0000000700)=""/67, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x9, 0x7fffffff, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x1, 0x4, 0x10, 0x3}], 0x10, 0x3bfc}, 0x94)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x10}, 0x18)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0x31, &(0x7f0000000080)=""/49, 0x40f00, 0x14, '\x00', 0x0, @fallback=0xd, r0, 0x8, &(0x7f00000002c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x7, 0x80}, 0x10, r2, r3, 0x1, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, r4, r5], &(0x7f0000000a80)=[{0x5, 0x4, 0x8, 0x3}], 0x10, 0x200}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x2a2240, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000bc0)={'nr0\x00', @broadcast})
socket$kcm(0x29, 0x7, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', r6}, 0x18)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000cc0)=0x794f)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x8}, 0x18)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00'}, 0x18)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xd, 0x1, 0x8cc, 0x0, 0x2084, r8, 0x9, '\x00', r1, r0, 0x5, 0x5, 0x3}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map=<r10=>r5, 0xd, 0x0, 0x0, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], &(0x7f0000000f40)=[0x0]}, 0x40)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000fc0)={r10, <r11=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x0, 0x2d, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r11}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x0, 0x0, 0x6, 0x0, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0xd, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='GPL\x00', 0x8d61, 0x1000, &(0x7f00000011c0)=""/4096, 0x60780, 0x52, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000021c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002200)={0x5, 0xa, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002240)=[r5, r5, r4, r4, r8, r4], &(0x7f0000002280)=[{0x0, 0x2, 0x4}, {0x4, 0x4, 0x4, 0xb}, {0x1, 0x4, 0x1, 0x7}], 0x10, 0x5960}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x15, &(0x7f0000002380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @alu={0x0, 0x1, 0xc, 0x1, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000002440)='GPL\x00', 0x3, 0xe6, &(0x7f0000002480)=""/230, 0x41000, 0x40, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002580)={0x3, 0x5, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
mkdir(&(0x7f0000002680)='./file0/file0\x00', 0x20)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000026c0), 0x200441, 0x0)
ioctl$TUNGETFEATURES(r12, 0x800454cf, &(0x7f0000002700))
syz_clone(0xc480, &(0x7f0000002740)="5f3744b5e2434dfa2a8c285c9b120a8f855af3b179a037b97e671a22ed5507f06dd0d9ae333788d4e07a666d75", 0x2d, &(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002800)="62da6111d23514d1f8b4870771708e40025c984013f1af68c88e21a3db589dbd467f30761d89470f3123f086ee66e938365624551ce161d6e38b36b3f85091f7ac5c2caa30c4854b099bb05dc8bca3be2d939de445b1e60b689d7c1758aa0ffa2ab1bf87f1cf4e070eec88390980a5188c3ee6ec5cb97e1196b5e6019f45314266e84f6b363208c71fcde8c25e2a3ab3")
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000028c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r13, &(0x7f0000002900)='syz0\x00', 0x200002, 0x0)
r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000002980)='GPL\x00', 0x7, 0x64, &(0x7f00000029c0)=""/100, 0x41000, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000002a40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002a80)={0x2, 0x7, 0x3, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002ac0)=[r4], &(0x7f0000002b00)=[{0x3, 0x2, 0xf, 0xa}, {0x3, 0x5, 0xe, 0x4}, {0x2, 0x5, 0x10, 0x9}, {0x3, 0x4, 0x10}, {0x4, 0x5, 0x0, 0xc}, {0x1, 0x1, 0xa, 0xa}, {0x4, 0x3, 0xe}, {0x0, 0x1, 0x10, 0x6}], 0x10, 0x101}, 0x94)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)={0x1b, 0x0, 0x0, 0x400, 0x0, r5, 0x8, '\x00', 0x0, r0, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e40)={{r4, <r16=>0xffffffffffffffff}, &(0x7f0000002dc0), &(0x7f0000002e00)=r14}, 0x20)
r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x746, '\x00', r1, r0, 0x100, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003000)={0x11, 0x3, &(0x7f0000002c40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xa545, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000002c80)='GPL\x00', 0x48, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002cc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000002d00)={0x1, 0x10, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000002f00)=[r15, r8, r11, 0x1, r16, r17], &(0x7f0000002f40)=[{0x4, 0x5, 0x10}, {0x2, 0x4, 0x4}, {0x101, 0x2, 0x3, 0x3}, {0x0, 0x5, 0xa, 0xc}, {0x1, 0x1, 0x10, 0xa}, {0x0, 0x1, 0x5, 0x9}, {0x4, 0x2, 0x3, 0x9}, {0x0, 0x5, 0x8, 0xb}, {0x0, 0x5, 0xb, 0x2}]}, 0x94)

1.243955907s ago: executing program 0 (id=2261):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x800000000c000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x98, 0x0, 0x7, 0xffeffffffffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xbf4a0e5c3cb3be3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x7ffffffffffffffe, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)

1.106199213s ago: executing program 2 (id=2262):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x10, 0x2, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010)

920.867791ms ago: executing program 3 (id=2263):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005e9a9ed347ce167c04cefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5282db0bdc0774c5b60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313acf5d4c380ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8237841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f554cc7595fe843d36f3d064ff5f63dfa2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e3795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b55891f170849c8cd5e942c0652127e7f6baa0d3277f1c33d1a55953dda6b3ef332adb49e3537829be258ddee56c8ab709d7c3f9107ba11bf7f608bcfec730eb13c9104851e6e859cc0528ff072192c49b42f1a4156372d0ed5caad2be9cc1d7f47faaca0890f196025cfd3a2ecf86106bb069a75f5c730caf55c473039d26925bc82e0e578cc2a2ba6f8be4fea86a9bb18a5164ce8321f585d537cf10cdcc440dd2347b5e93be7686938fb8ba244600cab5fd101000000921fa9cda62f554bbaa9738716ac61d45e4e149664595d1b3b1d11e3da0dad3a8edee41def72d5b64d3abb404ff04e0a476680f126aeb1d67063f18344e9a4b3b5084a9aa93b331efcc1403c5208b8c25caa0fcb1b5b104831d5d9844dde355598a35621a95da6b46aac8dbcf432f830cb697b619ee11ffadf672d1da56bc1f0997d3945eef9e2eea17eadf81921a45d9a782c58c1634bfa4ff9765e27d52d5798d8333ed5902aa695ad81f9354ec658a899b960727dfb4c8e59ca66c0d54394cb7fb9367ab49fd2957bd7b75a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x300}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c)

895.033942ms ago: executing program 1 (id=2264):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480), 0xa00}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x13, &(0x7f0000000a00)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0xb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x5a}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x10}, @ldst={0x1, 0x2, 0x3, 0x9, 0x6, 0xfffffffffffffff0, 0x1d}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0xd, 0xb, 0x8, 0xffffffffffffffde, 0x10}], &(0x7f0000000200)='GPL\x00', 0x5642b1af, 0x4b, &(0x7f0000000680)=""/75, 0x41000, 0x65, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x2, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000d00)=[r0, r0, r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000d40)=[{0x1, 0x5, 0xb, 0x1}, {0x5, 0x1, 0xa, 0x9}, {0x61, 0x1, 0xb}, {0x5, 0x5, 0x9, 0x2}, {0x5, 0x3, 0xc, 0x4}, {0x2, 0x1, 0xd, 0x1}, {0x0, 0x5, 0x10, 0x5}, {0x0, 0x2, 0x10, 0xc}, {0x1, 0x2, 0x4, 0x3}, {0x5, 0x3, 0x4, 0x1}], 0x10, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x4, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = socket$kcm(0x1e, 0x1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r9, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f00000005c0), 0x0, 0x10, &(0x7f00000007c0), &(0x7f0000000840), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
sendmsg$inet(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="94091861eaf7b5c8b04844b3c94ef26bb31397cafc428d77787b5f29d2d06e184a19d3526876c347ded3db5741acf454a8dd048e38ffd8bd784bb85b858d28198a1dd7a5e82f244a7703ae5eaeb0268deb8136860c1d2f1f02c22b7dbded5b638780e4ac5a0251009463d1c3c891c00bfb1ba86341c74284ae014f437129f99de4c53d818d42e351ca8c779462cb3ed55ae9eaa79092aec1b8c547d710cfcac9fda76ba4d45637636565f6908d7d338d2cdcdd39739d", 0xb6}, {&(0x7f00000000c0)="9f0da3278a6dd8b6f0536fc6638b0f3324ac93119f947fd7be3a3ad26b2d4cccd2e11f99d9ed91a7a2861e758037caa0396cb0db22390d0bb17233429fa446f965b3c49dfaa47f133d07f96f6393382cc947cd43a3cc53e6f2b13fea6ca4ca98fb82388bd365759f", 0x68}, {&(0x7f0000000040)="5d6dc92981c6ffaa24c4ab9614f555ea7d0367a4fc5d02874d0632bbcbd398e477bf73aa69068bc43cdaac932ff3563161a8299bf92772149766f12b38", 0x3d}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1400000000000000000000000200000002000000000000001c000000000000000000000008000000", @ANYRES32=r11, @ANYBLOB="0a010102e000000200000000b40000000000000000000000070000009411a51af4d91c7693b1633f5170998c474444ed13e000000100000048e000000100008831de9ad052518421b7f03684231b850f7ba045ae1a2c4bac5a24c9a1000a010100ffffff29ffffffff00000002ac14141d000000006401010100000002fffffffffffffff8ac1e010100000006890f95ffffffffac141444e00000014408de7000000000441c6353e000000200000006ac1414bb00000006e000000100000000441c1b43e0000002fffffffa7f00000100009e19640101020000021f000000002c0000000000000000000000070000000713edac141415ac1e0101ac141427ac1414bb8906434d54ca00000000000000140000000000000000b9a491ac0a03da5c1a9c1f2c66c082f0b0b7"], 0x138}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60)

800.187636ms ago: executing program 0 (id=2265):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x827, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x3)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x3, 0x2, 0x0, 0x4, 0x0, 0x3ff, [{0x5, 0x4, 0x15}, {0xa, 0x4, 0x76805b51}]}]}}, &(0x7f0000000140)=""/143, 0x3e, 0x8f, 0x1}, 0x28)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x1, 0x106)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)

721.988249ms ago: executing program 3 (id=2267):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mem_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000280)=0x9, 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x22137, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

551.866637ms ago: executing program 1 (id=2268):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="27031c00000014000000002f1eafacf706e1050000", 0x15}], 0x1}, 0x0)

0s ago: executing program 1 (id=2269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000080000000b708000000000080f8ff00000000bfa20000000000000702ffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r4, @ANYBLOB="0000000080000000b708000000000080f8ff00000000bfa20000000000000702ffb703000008000000b704000000000000850000001e0000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x10000}, 0x28) (async)

kernel console output (not intermixed with test programs):

48
[  146.193586][ T6674] RSP: 002b:00007f5507bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  146.202049][ T6674] RAX: ffffffffffffffda RBX: 00007f5509be6090 RCX: 00007f550998f749
[  146.210065][ T6674] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006
[  146.218078][ T6674] RBP: 00007f5507bf6090 R08: 0000000000000000 R09: 0000000000000000
[  146.226107][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.234127][ T6674] R13: 00007f5509be6128 R14: 00007f5509be6090 R15: 00007fffe83b67d8
[  146.242193][ T6674]  </TASK>
[  151.102489][ T6713] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[  151.159103][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.173721][ T6713] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  151.212643][ T6707] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[  151.231000][ T6707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'.
[  151.242421][ T6707] team0: entered promiscuous mode
[  151.248037][ T6707] team_slave_0: entered promiscuous mode
[  151.268335][ T6707] team_slave_1: entered promiscuous mode
[  151.291019][ T6707] team0: entered allmulticast mode
[  151.311557][ T6707] team_slave_0: entered allmulticast mode
[  151.334723][ T6707] team_slave_1: entered allmulticast mode
[  151.350793][ T6707] bridge0: port 3(team0) entered blocking state
[  151.359350][ T6707] bridge0: port 3(team0) entered disabled state
[  151.378468][ T6707] bridge0: port 3(team0) entered blocking state
[  151.385033][ T6707] bridge0: port 3(team0) entered forwarding state
[  152.322545][ T6732] syz.0.287[6732] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  152.648061][ T6739] FAULT_INJECTION: forcing a failure.
[  152.648061][ T6739] name failslab, interval 1, probability 0, space 0, times 0
[  152.698786][ T6739] CPU: 1 PID: 6739 Comm: syz.0.291 Not tainted syzkaller #0
[  152.706165][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  152.716250][ T6739] Call Trace:
[  152.719545][ T6739]  <TASK>
[  152.722495][ T6739]  dump_stack_lvl+0x16c/0x230
[  152.727307][ T6739]  ? show_regs_print_info+0x20/0x20
[  152.732529][ T6739]  ? load_image+0x3b0/0x3b0
[  152.737059][ T6739]  ? verify_lock_unused+0x140/0x140
[  152.742294][ T6739]  should_fail_ex+0x39d/0x4d0
[  152.747006][ T6739]  should_failslab+0x9/0x20
[  152.751532][ T6739]  slab_pre_alloc_hook+0x59/0x310
[  152.756604][ T6739]  kmem_cache_alloc+0x5a/0x2e0
[  152.761395][ T6739]  ? skb_clone+0x1eb/0x370
[  152.765850][ T6739]  skb_clone+0x1eb/0x370
[  152.770124][ T6739]  __netlink_deliver_tap+0x41c/0x830
[  152.775452][ T6739]  ? netlink_deliver_tap+0x2e/0x1b0
[  152.780681][ T6739]  netlink_deliver_tap+0x19c/0x1b0
[  152.785818][ T6739]  netlink_sendskb+0x68/0x130
[  152.790522][ T6739]  netlink_ack+0xc7e/0x1110
[  152.795124][ T6739]  ? netlink_dump+0xde0/0xde0
[  152.799830][ T6739]  ? sock_diag_lock_handler+0x19/0x280
[  152.805314][ T6739]  ? __unix_recvmsg+0xb0/0xb0
[  152.810028][ T6739]  ? sock_diag_rcv_msg+0x402/0x600
[  152.815179][ T6739]  netlink_rcv_skb+0x29a/0x480
[  152.819976][ T6739]  ? sock_diag_bind+0xb0/0xb0
[  152.824676][ T6739]  ? netlink_ack+0x1110/0x1110
[  152.829497][ T6739]  ? __lock_acquire+0x7c80/0x7c80
[  152.834583][ T6739]  ? netlink_deliver_tap+0x2e/0x1b0
[  152.839810][ T6739]  sock_diag_rcv+0x2a/0x40
[  152.844276][ T6739]  netlink_unicast+0x751/0x8d0
[  152.849208][ T6739]  netlink_sendmsg+0x8c1/0xbe0
[  152.854030][ T6739]  ? netlink_getsockopt+0x580/0x580
[  152.859265][ T6739]  ? aa_sock_msg_perm+0x94/0x150
[  152.864403][ T6739]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  152.869708][ T6739]  ? security_socket_sendmsg+0x80/0xa0
[  152.875214][ T6739]  ? netlink_getsockopt+0x580/0x580
[  152.880456][ T6739]  ____sys_sendmsg+0x5bf/0x950
[  152.885264][ T6739]  ? __asan_memset+0x22/0x40
[  152.889954][ T6739]  ? __sys_sendmsg_sock+0x30/0x30
[  152.895025][ T6739]  ? __import_iovec+0x3fa/0x860
[  152.899934][ T6739]  ? import_iovec+0x73/0xa0
[  152.904470][ T6739]  ___sys_sendmsg+0x220/0x290
[  152.909183][ T6739]  ? __sys_sendmsg+0x270/0x270
[  152.914016][ T6739]  ? __lock_acquire+0x7c80/0x7c80
[  152.919136][ T6739]  __se_sys_sendmsg+0x1a5/0x270
[  152.924041][ T6739]  ? __x64_sys_sendmsg+0x80/0x80
[  152.929036][ T6739]  ? lockdep_hardirqs_on+0x98/0x150
[  152.934262][ T6739]  do_syscall_64+0x55/0xb0
[  152.938703][ T6739]  ? clear_bhb_loop+0x40/0x90
[  152.943396][ T6739]  ? clear_bhb_loop+0x40/0x90
[  152.948096][ T6739]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.954007][ T6739] RIP: 0033:0x7fdf6638f749
[  152.958444][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.978181][ T6739] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.986626][ T6739] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  152.994614][ T6739] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006
[  153.002599][ T6739] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  153.010594][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  153.018846][ T6739] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  153.026879][ T6739]  </TASK>
[  153.987013][ T6777] IPv6: Can't replace route, no match found
[  153.995459][ T6777] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  154.010992][ T6777] netlink: 'syz.2.302': attribute type 10 has an invalid length.
[  154.160637][ T6777] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  154.583219][ T6781] netlink: 'syz.2.305': attribute type 10 has an invalid length.
[  154.627365][ T6781] netlink: 55 bytes leftover after parsing attributes in process `syz.2.305'.
[  155.507449][ T6808] IPv6: Can't replace route, no match found
[  155.636995][ T6810] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  155.933148][ T6808] netlink: 'syz.3.314': attribute type 10 has an invalid length.
[  156.243958][ T6808] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  156.465251][ T6843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.321'.
[  157.806178][ T6863] bridge0: port 3(hsr_slave_1) entered blocking state
[  157.836019][ T6863] bridge0: port 3(hsr_slave_1) entered disabled state
[  157.843217][ T6863] hsr_slave_1: entered allmulticast mode
[  157.906510][ T6863] hsr_slave_1: left allmulticast mode
[  158.087205][ T6875] IPv6: Can't replace route, no match found
[  158.109724][ T6876] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  158.181594][ T6875] netlink: 'syz.1.328': attribute type 10 has an invalid length.
[  159.105147][ T6886] tap0: tun_chr_ioctl cmd 1074025675
[  159.110978][ T6886] tap0: persist enabled
[  160.657245][ T6909] netlink: 'syz.0.339': attribute type 15 has an invalid length.
[  160.723104][ T6909] netlink: 'syz.0.339': attribute type 5 has an invalid length.
[  160.776762][ T6909] netlink: 144 bytes leftover after parsing attributes in process `syz.0.339'.
[  161.590136][ T6918] netlink: 'syz.3.342': attribute type 39 has an invalid length.
[  161.767412][ T6919] netlink: 'syz.3.342': attribute type 39 has an invalid length.
[  162.444757][ T6948] syz.0.352[6948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.444913][ T6948] syz.0.352[6948] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.600206][ T6960] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.356'.
[  164.974196][ T6998] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.369'.
[  165.143800][ T6998] sctp: [Deprecated]: syz.0.369 (pid 6998) Use of int in maxseg socket option.
[  165.143800][ T6998] Use struct sctp_assoc_value instead
[  165.992862][ T7022] netlink: 'syz.0.376': attribute type 4 has an invalid length.
[  166.036931][ T7022] netlink: 152 bytes leftover after parsing attributes in process `syz.0.376'.
[  166.136577][ T7022] .`: renamed from bond0 (while UP)
[  168.804529][ T7066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.862989][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.871442][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.896058][ T7081] bridge0: entered allmulticast mode
[  171.902389][ T7110] veth0_vlan: entered allmulticast mode
[  172.165183][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.193770][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.240035][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.254524][ T7130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.413564][ T7130] .`: (slave batadv0): Releasing backup interface
[  172.831228][ T7139] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.409'.
[  173.110169][ T7139] sctp: [Deprecated]: syz.1.409 (pid 7139) Use of int in maxseg socket option.
[  173.110169][ T7139] Use struct sctp_assoc_value instead
[  173.205833][    C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  174.077979][ T7152] -1: renamed from syzkaller0
[  175.109069][ T7177] netlink: 'syz.2.418': attribute type 1 has an invalid length.
[  175.117158][ T7177] netlink: 'syz.2.418': attribute type 3 has an invalid length.
[  175.125948][ T7177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.418'.
[  176.913769][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[  176.955785][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[  177.000596][ T7231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[  177.079126][ T7222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.431'.
[  178.871220][ T7269] -1: renamed from syzkaller0
[  180.029493][ T5788] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  180.449376][ T7323] netlink: 'syz.0.448': attribute type 10 has an invalid length.
[  180.485789][ T7323] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'.
[  180.655999][ T7323] bridge0: port 4(ipvlan1) entered blocking state
[  180.667846][ T7323] bridge0: port 4(ipvlan1) entered disabled state
[  180.689109][ T7323] ipvlan1: entered allmulticast mode
[  180.694932][ T7323] veth0_vlan: entered allmulticast mode
[  180.757843][ T7323] ipvlan1: left allmulticast mode
[  180.776064][ T7323] veth0_vlan: left allmulticast mode
[  180.800434][ T7323] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  180.923947][ T7323] syz.0.448 (7323) used greatest stack depth: 19560 bytes left
[  181.449962][ T7337] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  182.357177][ T7337] hsr_slave_0 (unregistering): left promiscuous mode
[  182.403914][ T7346] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[  182.418080][ T7346] netlink: 144 bytes leftover after parsing attributes in process `syz.1.450'.
[  182.442842][ T7349] netlink: 'syz.2.455': attribute type 6 has an invalid length.
[  182.698917][ T7356] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.458'.
[  182.775414][ T7364] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.460'.
[  184.421765][ T7392] netlink: 'syz.3.469': attribute type 6 has an invalid length.
[  184.835570][ T7401] netlink: 'syz.2.471': attribute type 13 has an invalid length.
[  184.893588][ T7401] netlink: 168 bytes leftover after parsing attributes in process `syz.2.471'.
[  186.773345][ T7427] netlink: 'syz.1.481': attribute type 3 has an invalid length.
[  186.784227][ T7427] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.481'.
[  192.153668][ T7489] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.504'.
[  192.208226][ T7489] openvswitch: netlink: Tunnel attr 13157 out of range max 16
[  192.603515][ T7494] netlink: 'syz.2.506': attribute type 21 has an invalid length.
[  192.790631][ T7500] netlink: 176 bytes leftover after parsing attributes in process `syz.2.509'.
[  193.346373][ T7506] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.507'.
[  193.501043][ T7503] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.507'.
[  194.810322][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  194.817989][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  194.946857][ T7529] netlink: 'syz.2.519': attribute type 39 has an invalid length.
[  195.081099][ T7531] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.520'.
[  196.897247][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  196.903630][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  196.910046][ T5788] Bluetooth: hci2: command 0x0406 tx timeout
[  196.916216][ T5788] Bluetooth: hci0: command 0x0406 tx timeout
[  197.127582][ T7585] netlink: 'syz.2.538': attribute type 11 has an invalid length.
[  197.135415][ T7585] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.538'.
[  197.391911][ T7594] netlink: 'syz.2.541': attribute type 7 has an invalid length.
[  197.618126][ T7600] syzkaller0: entered promiscuous mode
[  197.642191][ T7600] syzkaller0: entered allmulticast mode
[  197.781499][ T7611] netlink: 'syz.2.546': attribute type 3 has an invalid length.
[  197.793137][ T7611] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[  201.907179][ T7645] netlink: 'syz.0.560': attribute type 11 has an invalid length.
[  201.915245][ T7645] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.560'.
[  201.939253][ T7646] netlink: 'syz.2.561': attribute type 21 has an invalid length.
[  201.951770][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.561'.
[  203.859457][ T7694] netlink: 'syz.3.575': attribute type 11 has an invalid length.
[  203.893371][ T7694] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.575'.
[  204.263036][ T7707] netlink: 'syz.1.580': attribute type 21 has an invalid length.
[  204.272766][ T7707] netlink: 164 bytes leftover after parsing attributes in process `syz.1.580'.
[  207.515947][ T7740] dvmrp1: tun_chr_ioctl cmd 99999999
[  208.411272][ T7764] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  208.491666][ T7764] batman_adv: batadv0: Adding interface: team0
[  208.519313][ T7764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.552648][ T7764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  208.571089][ T7770] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  208.579292][ T7770] netlink: 2 bytes leftover after parsing attributes in process `syz.1.603'.
[  208.593482][ T7770] team0: entered promiscuous mode
[  208.607837][ T7770] team_slave_0: entered promiscuous mode
[  208.617429][ T7770] team_slave_1: entered promiscuous mode
[  208.628147][ T7770] 8021q: adding VLAN 0 to HW filter on device team0
[  208.642766][ T7770] batman_adv: batadv0: Interface activated: team0
[  208.649707][ T7770] batman_adv: batadv0: Interface deactivated: team0
[  208.663123][ T7770] batman_adv: batadv0: Removing interface: team0
[  209.865184][ T7806] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.621'.
[  210.996128][ T7824] syzkaller0: entered promiscuous mode
[  211.001751][ T7824] syzkaller0: entered allmulticast mode
[  211.415901][ T7840] netlink: 'syz.3.635': attribute type 29 has an invalid length.
[  211.424112][ T7840] netlink: 'syz.3.635': attribute type 29 has an invalid length.
[  211.964831][ T7858] netlink: 'syz.2.643': attribute type 6 has an invalid length.
[  212.000778][ T7858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.643'.
[  213.233159][ T7881] delete_channel: no stack
[  213.261582][ T7880] netlink: 176 bytes leftover after parsing attributes in process `syz.3.652'.
[  213.275835][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.295843][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.320196][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.356433][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.406443][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.424971][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.480371][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.524225][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.604962][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.636673][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.677416][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.707313][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.745733][ T7887] netlink: 'syz.0.655': attribute type 2 has an invalid length.
[  213.769602][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.846342][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.882560][ T7898] netlink: 51 bytes leftover after parsing attributes in process `syz.1.658'.
[  213.894875][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.938198][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  213.980142][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  214.024335][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  214.079543][ T7887] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.655'.
[  216.546577][ T7922] delete_channel: no stack
[  216.830065][ T7940] validate_nla: 7 callbacks suppressed
[  216.830084][ T7940] netlink: 'syz.0.675': attribute type 17 has an invalid length.
[  218.565402][ T7971] syz.3.686[7971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  218.572284][ T7971] syz.3.686[7971] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.345852][ T7979] dvmrp1: tun_chr_ioctl cmd 99999999
[  230.317044][ T8025] mac80211_hwsim hwsim8 O3ãc¤±: renamed from wlan1 (while UP)
[  230.326315][ T8029] netlink: 'syz.3.707': attribute type 29 has an invalid length.
[  230.492771][ T8029] netlink: 'syz.3.707': attribute type 29 has an invalid length.
[  230.515923][ T8032] __nla_validate_parse: 4 callbacks suppressed
[  230.515940][ T8032] netlink: 52 bytes leftover after parsing attributes in process `syz.0.710'.
[  230.973648][ T8047] netlink: 'syz.1.716': attribute type 10 has an invalid length.
[  231.005705][ T8047] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.716'.
[  231.014995][ T8047] openvswitch: netlink: Flow key attr not present in new flow.
[  232.350726][ T8067] netlink: 11135 bytes leftover after parsing attributes in process `syz.2.722'.
[  232.937690][ T8078] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.727'.
[  232.990169][ T8078] netlink: zone id is out of range
[  233.026459][ T8086] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.727'.
[  233.035944][ T8078] netlink: zone id is out of range
[  233.041508][ T8078] netlink: zone id is out of range
[  233.057915][ T8078] netlink: zone id is out of range
[  233.074243][ T8078] netlink: zone id is out of range
[  233.096247][ T8078] netlink: zone id is out of range
[  233.108338][ T8078] netlink: zone id is out of range
[  233.135819][ T8078] netlink: zone id is out of range
[  233.147833][ T8078] netlink: zone id is out of range
[  233.285300][ T8087] netlink: 'syz.2.730': attribute type 46 has an invalid length.
[  234.063539][ T8108] netlink: 'syz.0.737': attribute type 10 has an invalid length.
[  234.169888][ T8102] IPv6: pim6reg1: Disabled Multicast RS
[  234.215454][ T8106] IPv6: pim6reg1: Disabled Multicast RS
[  234.229226][ T8114] FAULT_INJECTION: forcing a failure.
[  234.229226][ T8114] name failslab, interval 1, probability 0, space 0, times 0
[  234.249278][ T8114] CPU: 0 PID: 8114 Comm: syz.1.736 Not tainted syzkaller #0
[  234.256652][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  234.266833][ T8114] Call Trace:
[  234.270146][ T8114]  <TASK>
[  234.273122][ T8114]  dump_stack_lvl+0x16c/0x230
[  234.277853][ T8114]  ? show_regs_print_info+0x20/0x20
[  234.283116][ T8114]  ? load_image+0x3b0/0x3b0
[  234.287683][ T8114]  ? __might_sleep+0xe0/0xe0
[  234.292345][ T8114]  ? __lock_acquire+0x7c80/0x7c80
[  234.297458][ T8114]  should_fail_ex+0x39d/0x4d0
[  234.302209][ T8114]  should_failslab+0x9/0x20
[  234.306767][ T8114]  slab_pre_alloc_hook+0x59/0x310
[  234.311850][ T8114]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  234.317622][ T8114]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  234.323387][ T8114]  __kmem_cache_alloc_node+0x53/0x260
[  234.328821][ T8114]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  234.334594][ T8114]  __kmalloc+0xa4/0x240
[  234.338810][ T8114]  tomoyo_realpath_from_path+0xe3/0x5d0
[  234.344430][ T8114]  tomoyo_path_number_perm+0x1ea/0x590
[  234.349947][ T8114]  ? tomoyo_path_number_perm+0x1ba/0x590
[  234.355635][ T8114]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  234.361156][ T8114]  ? ksys_write+0x1c1/0x250
[  234.365782][ T8114]  ? __fget_files+0x28/0x4d0
[  234.370442][ T8114]  security_file_ioctl+0x70/0xa0
[  234.375445][ T8114]  __se_sys_ioctl+0x48/0x170
[  234.380117][ T8114]  do_syscall_64+0x55/0xb0
[  234.384575][ T8114]  ? clear_bhb_loop+0x40/0x90
[  234.389438][ T8114]  ? clear_bhb_loop+0x40/0x90
[  234.394186][ T8114]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.400126][ T8114] RIP: 0033:0x7f8653f8f749
[  234.404583][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.424244][ T8114] RSP: 002b:00007f8654e29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  234.432709][ T8114] RAX: ffffffffffffffda RBX: 00007f86541e6090 RCX: 00007f8653f8f749
[  234.440762][ T8114] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a
[  234.448779][ T8114] RBP: 00007f8654e29090 R08: 0000000000000000 R09: 0000000000000000
[  234.456796][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.464824][ T8114] R13: 00007f86541e6128 R14: 00007f86541e6090 R15: 00007ffc4028a328
[  234.472864][ T8114]  </TASK>
[  234.519592][ T8114] ERROR: Out of memory at tomoyo_realpath_from_path.
[  235.749969][ T8150] wg2: entered promiscuous mode
[  235.765803][ T8150] wg2: entered allmulticast mode
[  237.457455][ T8190] IPv6: pim6reg1: Disabled Multicast RS
[  237.654336][ T8196] netlink: 'syz.1.768': attribute type 10 has an invalid length.
[  237.675895][ T8196] netlink: 40 bytes leftover after parsing attributes in process `syz.1.768'.
[  237.735305][ T8196] dummy0: entered promiscuous mode
[  237.753883][ T8196] dummy0: entered allmulticast mode
[  237.854249][ T8196] net_ratelimit: 332 callbacks suppressed
[  237.854337][ T8196] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  238.703172][ T8212] IPv6: pim6reg1: Disabled Multicast RS
[  238.729501][ T8213] FAULT_INJECTION: forcing a failure.
[  238.729501][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.773230][ T8213] CPU: 1 PID: 8213 Comm: syz.3.774 Not tainted syzkaller #0
[  238.780608][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  238.790717][ T8213] Call Trace:
[  238.794049][ T8213]  <TASK>
[  238.797018][ T8213]  dump_stack_lvl+0x16c/0x230
[  238.801756][ T8213]  ? show_regs_print_info+0x20/0x20
[  238.807003][ T8213]  ? load_image+0x3b0/0x3b0
[  238.811573][ T8213]  ? __might_fault+0xaa/0x120
[  238.816312][ T8213]  ? __lock_acquire+0x7c80/0x7c80
[  238.821383][ T8213]  ? unix_ioctl+0x254/0x660
[  238.825968][ T8213]  should_fail_ex+0x39d/0x4d0
[  238.830718][ T8213]  _copy_from_user+0x2f/0xe0
[  238.835362][ T8213]  sock_do_ioctl+0x17c/0x2f0
[  238.840021][ T8213]  ? sock_show_fdinfo+0xb0/0xb0
[  238.844938][ T8213]  sock_ioctl+0x623/0x7a0
[  238.849310][ T8213]  ? sock_poll+0x3d0/0x3d0
[  238.853784][ T8213]  ? bpf_lsm_file_ioctl+0x9/0x10
[  238.858763][ T8213]  ? security_file_ioctl+0x80/0xa0
[  238.863921][ T8213]  ? sock_poll+0x3d0/0x3d0
[  238.868376][ T8213]  __se_sys_ioctl+0xfd/0x170
[  238.873096][ T8213]  do_syscall_64+0x55/0xb0
[  238.877549][ T8213]  ? clear_bhb_loop+0x40/0x90
[  238.882250][ T8213]  ? clear_bhb_loop+0x40/0x90
[  238.886942][ T8213]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  238.892845][ T8213] RIP: 0033:0x7f550998f749
[  238.897273][ T8213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.916980][ T8213] RSP: 002b:00007f5507bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  238.925503][ T8213] RAX: ffffffffffffffda RBX: 00007f5509be6090 RCX: 00007f550998f749
[  238.933489][ T8213] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000a
[  238.941469][ T8213] RBP: 00007f5507bf6090 R08: 0000000000000000 R09: 0000000000000000
[  238.949453][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.957439][ T8213] R13: 00007f5509be6128 R14: 00007f5509be6090 R15: 00007fffe83b67d8
[  238.965460][ T8213]  </TASK>
[  240.011518][ T8236] wg2: entered promiscuous mode
[  240.047606][ T8236] wg2: entered allmulticast mode
[  240.785467][ T8272] syz.1.793[8272] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  240.785835][ T8272] syz.1.793[8272] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  241.125836][ T8283] sctp: [Deprecated]: syz.2.797 (pid 8283) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.125836][ T8283] Use struct sctp_sack_info instead
[  241.310943][ T8285] netlink: 'syz.2.800': attribute type 10 has an invalid length.
[  241.324711][ T8285] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.800'.
[  242.047481][ T8287] wg2: entered promiscuous mode
[  242.073901][ T8287] wg2: entered allmulticast mode
[  243.588518][ T8332] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.812'.
[  244.270225][ T8344] wg2: entered promiscuous mode
[  244.277888][ T8344] wg2: entered allmulticast mode
[  244.776796][ T8370] netlink: zone id is out of range
[  244.806029][ T8370] netlink: set zone limit has 8 unknown bytes
[  244.948311][ T8370] netlink: 'syz.2.827': attribute type 10 has an invalid length.
[  245.228071][ T8377] netlink: 'syz.3.829': attribute type 10 has an invalid length.
[  245.247872][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.829'.
[  245.282233][ T8377] dummy0: entered promiscuous mode
[  245.322680][ T8377] dummy0: entered allmulticast mode
[  245.385342][ T8377] bridge0: port 3(dummy0) entered blocking state
[  245.508372][ T8377] bridge0: port 3(dummy0) entered disabled state
[  245.581977][ T8387] netlink: 'syz.0.833': attribute type 9 has an invalid length.
[  245.590093][ T8387] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.833'.
[  245.846413][ T8391] wg2: left promiscuous mode
[  245.852158][ T8391] wg2: left allmulticast mode
[  245.991449][ T8398] wg2: entered promiscuous mode
[  246.002211][ T8398] wg2: entered allmulticast mode
[  246.710917][ T8421] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  246.719629][ T8421] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  246.729686][ T8422] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  246.738236][ T8421] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  246.767603][ T8422] netlink: 'syz.2.846': attribute type 29 has an invalid length.
[  247.905415][ T8446] netlink: 'syz.2.853': attribute type 4 has an invalid length.
[  247.925630][ T8446] netlink: 152 bytes leftover after parsing attributes in process `syz.2.853'.
[  247.988323][ T8446] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  248.090482][ T8441] netlink: 'syz.2.853': attribute type 7 has an invalid length.
[  248.292530][ T8455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.859'.
[  248.504195][ T8463] FAULT_INJECTION: forcing a failure.
[  248.504195][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  248.540691][ T8463] CPU: 1 PID: 8463 Comm: syz.2.863 Not tainted syzkaller #0
[  248.548153][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  248.558250][ T8463] Call Trace:
[  248.561571][ T8463]  <TASK>
[  248.564551][ T8463]  dump_stack_lvl+0x16c/0x230
[  248.569288][ T8463]  ? show_regs_print_info+0x20/0x20
[  248.574629][ T8463]  ? load_image+0x3b0/0x3b0
[  248.579279][ T8463]  ? __might_fault+0xaa/0x120
[  248.584019][ T8463]  ? __lock_acquire+0x7c80/0x7c80
[  248.589104][ T8463]  should_fail_ex+0x39d/0x4d0
[  248.593848][ T8463]  _copy_from_user+0x2f/0xe0
[  248.598489][ T8463]  __sys_bpf+0x1e9/0x800
[  248.602787][ T8463]  ? bpf_link_show_fdinfo+0x350/0x350
[  248.608223][ T8463]  ? lock_chain_count+0x20/0x20
[  248.613132][ T8463]  __x64_sys_bpf+0x7c/0x90
[  248.617593][ T8463]  do_syscall_64+0x55/0xb0
[  248.622052][ T8463]  ? clear_bhb_loop+0x40/0x90
[  248.626768][ T8463]  ? clear_bhb_loop+0x40/0x90
[  248.631482][ T8463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  248.637413][ T8463] RIP: 0033:0x7fe8d638f749
[  248.641873][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.661531][ T8463] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  248.670011][ T8463] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  248.678033][ T8463] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  248.686056][ T8463] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  248.694084][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.702155][ T8463] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  248.710203][ T8463]  </TASK>
[  248.718451][ T8465] wg2: left promiscuous mode
[  248.732227][ T8465] wg2: left allmulticast mode
[  248.786719][ T8470] wg2: entered promiscuous mode
[  248.791683][ T8470] wg2: entered allmulticast mode
[  248.993834][ T8475] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  249.123695][ T8475] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.865'.
[  249.261760][ T8472] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  249.505742][ T8485] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.872'.
[  249.515074][ T8485] netlink: 8454 bytes leftover after parsing attributes in process `syz.3.872'.
[  249.577225][ T8486] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.872'.
[  249.645784][ T8486] netlink: 8454 bytes leftover after parsing attributes in process `syz.3.872'.
[  249.892859][ T8494] FAULT_INJECTION: forcing a failure.
[  249.892859][ T8494] name failslab, interval 1, probability 0, space 0, times 0
[  249.906675][ T8494] CPU: 1 PID: 8494 Comm: syz.2.875 Not tainted syzkaller #0
[  249.914021][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  249.924123][ T8494] Call Trace:
[  249.927451][ T8494]  <TASK>
[  249.930413][ T8494]  dump_stack_lvl+0x16c/0x230
[  249.935144][ T8494]  ? show_regs_print_info+0x20/0x20
[  249.940414][ T8494]  ? load_image+0x3b0/0x3b0
[  249.945067][ T8494]  ? __might_sleep+0xe0/0xe0
[  249.949710][ T8494]  ? __lock_acquire+0x7c80/0x7c80
[  249.954778][ T8494]  ? mark_lock+0x94/0x320
[  249.959248][ T8494]  should_fail_ex+0x39d/0x4d0
[  249.963983][ T8494]  should_failslab+0x9/0x20
[  249.968541][ T8494]  slab_pre_alloc_hook+0x59/0x310
[  249.973623][ T8494]  ? __get_vm_area_node+0x125/0x370
[  249.978888][ T8494]  __kmem_cache_alloc_node+0x53/0x260
[  249.984319][ T8494]  ? __get_vm_area_node+0x125/0x370
[  249.989574][ T8494]  kmalloc_node_trace+0x26/0xe0
[  249.994487][ T8494]  __get_vm_area_node+0x125/0x370
[  249.999563][ T8494]  __vmalloc_node_range+0x36e/0x1320
[  250.004914][ T8494]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  250.010507][ T8494]  ? mark_lock+0x94/0x320
[  250.014902][ T8494]  ? __lock_acquire+0x1334/0x7c80
[  250.019983][ T8494]  ? verify_lock_unused+0x140/0x140
[  250.025230][ T8494]  ? get_pid_task+0x20/0x1e0
[  250.029868][ T8494]  ? free_vm_area+0x50/0x50
[  250.034414][ T8494]  ? end_current_label_crit_section+0x170/0x170
[  250.040710][ T8494]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  250.046299][ T8494]  __vmalloc+0x7a/0x90
[  250.050420][ T8494]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  250.056012][ T8494]  bpf_prog_alloc_no_stats+0x47/0x440
[  250.061418][ T8494]  ? bpf_prog_alloc+0x2b/0x1b0
[  250.066227][ T8494]  bpf_prog_alloc+0x3d/0x1b0
[  250.070858][ T8494]  bpf_prog_load+0x6b8/0x16d0
[  250.075587][ T8494]  ? map_freeze+0x420/0x420
[  250.080139][ T8494]  ? __might_fault+0xaa/0x120
[  250.084870][ T8494]  ? __lock_acquire+0x7c80/0x7c80
[  250.089929][ T8494]  ? file_end_write+0x159/0x250
[  250.094820][ T8494]  ? __might_fault+0xaa/0x120
[  250.099901][ T8494]  ? __might_fault+0xc6/0x120
[  250.104608][ T8494]  ? __might_fault+0xaa/0x120
[  250.109300][ T8494]  ? bpf_lsm_bpf+0x9/0x10
[  250.113643][ T8494]  ? security_bpf+0x7e/0xa0
[  250.118164][ T8494]  __sys_bpf+0x55a/0x800
[  250.122434][ T8494]  ? bpf_link_show_fdinfo+0x350/0x350
[  250.127831][ T8494]  ? lock_chain_count+0x20/0x20
[  250.132727][ T8494]  __x64_sys_bpf+0x7c/0x90
[  250.137243][ T8494]  do_syscall_64+0x55/0xb0
[  250.141673][ T8494]  ? clear_bhb_loop+0x40/0x90
[  250.146363][ T8494]  ? clear_bhb_loop+0x40/0x90
[  250.151053][ T8494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.156962][ T8494] RIP: 0033:0x7fe8d638f749
[  250.161398][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.181101][ T8494] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  250.189532][ T8494] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  250.197515][ T8494] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  250.205586][ T8494] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  250.213563][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.221540][ T8494] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  250.229537][ T8494]  </TASK>
[  250.239732][ T8494] syz.2.875: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  250.261546][ T8494] CPU: 0 PID: 8494 Comm: syz.2.875 Not tainted syzkaller #0
[  250.268905][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.279015][ T8494] Call Trace:
[  250.282326][ T8494]  <TASK>
[  250.285282][ T8494]  dump_stack_lvl+0x16c/0x230
[  250.290012][ T8494]  ? show_regs_print_info+0x20/0x20
[  250.295365][ T8494]  ? load_image+0x3b0/0x3b0
[  250.299958][ T8494]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  250.306432][ T8494]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  250.313070][ T8494]  warn_alloc+0x210/0x300
[  250.317448][ T8494]  ? __get_vm_area_node+0x125/0x370
[  250.322703][ T8494]  ? zone_watermark_ok_safe+0x230/0x230
[  250.328299][ T8494]  ? rcu_is_watching+0x15/0xb0
[  250.333217][ T8494]  ? __get_vm_area_node+0x356/0x370
[  250.338474][ T8494]  __vmalloc_node_range+0x393/0x1320
[  250.343818][ T8494]  ? mark_lock+0x94/0x320
[  250.348195][ T8494]  ? __lock_acquire+0x1334/0x7c80
[  250.353274][ T8494]  ? verify_lock_unused+0x140/0x140
[  250.358501][ T8494]  ? get_pid_task+0x20/0x1e0
[  250.363120][ T8494]  ? free_vm_area+0x50/0x50
[  250.367640][ T8494]  ? end_current_label_crit_section+0x170/0x170
[  250.374094][ T8494]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  250.379649][ T8494]  __vmalloc+0x7a/0x90
[  250.383738][ T8494]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  250.389303][ T8494]  bpf_prog_alloc_no_stats+0x47/0x440
[  250.394777][ T8494]  ? bpf_prog_alloc+0x2b/0x1b0
[  250.399913][ T8494]  bpf_prog_alloc+0x3d/0x1b0
[  250.404528][ T8494]  bpf_prog_load+0x6b8/0x16d0
[  250.409228][ T8494]  ? map_freeze+0x420/0x420
[  250.413755][ T8494]  ? __might_fault+0xaa/0x120
[  250.418449][ T8494]  ? __lock_acquire+0x7c80/0x7c80
[  250.423482][ T8494]  ? file_end_write+0x159/0x250
[  250.428534][ T8494]  ? __might_fault+0xaa/0x120
[  250.433224][ T8494]  ? __might_fault+0xc6/0x120
[  250.437918][ T8494]  ? __might_fault+0xaa/0x120
[  250.442602][ T8494]  ? bpf_lsm_bpf+0x9/0x10
[  250.446947][ T8494]  ? security_bpf+0x7e/0xa0
[  250.451467][ T8494]  __sys_bpf+0x55a/0x800
[  250.455725][ T8494]  ? bpf_link_show_fdinfo+0x350/0x350
[  250.461122][ T8494]  ? lock_chain_count+0x20/0x20
[  250.465999][ T8494]  __x64_sys_bpf+0x7c/0x90
[  250.470512][ T8494]  do_syscall_64+0x55/0xb0
[  250.474937][ T8494]  ? clear_bhb_loop+0x40/0x90
[  250.479626][ T8494]  ? clear_bhb_loop+0x40/0x90
[  250.484313][ T8494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  250.490224][ T8494] RIP: 0033:0x7fe8d638f749
[  250.494713][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.514420][ T8494] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  250.522847][ T8494] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  250.530830][ T8494] RDX: 0000000000000023 RSI: 0000200000000400 RDI: 0000000000000005
[  250.538811][ T8494] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  250.546798][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.554782][ T8494] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  250.562777][ T8494]  </TASK>
[  250.573289][ T8494] Mem-Info:
[  250.578370][ T8494] active_anon:6152 inactive_anon:0 isolated_anon:0
[  250.578370][ T8494]  active_file:16087 inactive_file:39942 isolated_file:0
[  250.578370][ T8494]  unevictable:768 dirty:132 writeback:0
[  250.578370][ T8494]  slab_reclaimable:10280 slab_unreclaimable:91612
[  250.578370][ T8494]  mapped:24281 shmem:1361 pagetables:541
[  250.578370][ T8494]  sec_pagetables:0 bounce:0
[  250.578370][ T8494]  kernel_misc_reclaimable:0
[  250.578370][ T8494]  free:1349784 free_pcp:12763 free_cma:0
[  250.638476][ T8494] Node 0 active_anon:24608kB inactive_anon:0kB active_file:64348kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97124kB dirty:528kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12220kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no
[  250.671379][ T8494] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  250.704767][ T8494] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.733121][ T8509] wg2: left promiscuous mode
[  250.743738][ T8509] wg2: left allmulticast mode
[  250.755400][ T8494] lowmem_reserve[]: 0 2525 2526 2526 2526
[  250.763379][ T8494] Node 0 DMA32 free:1489904kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24560kB inactive_anon:0kB active_file:64348kB inactive_file:158252kB unevictable:1536kB writepending:528kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:31220kB local_pcp:17640kB free_cma:0kB
[  250.794520][ T8494] lowmem_reserve[]: 0 0 1 1 1
[  250.799456][ T8494] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.875853][ T8494] lowmem_reserve[]: 0 0 0 0 0
[  250.890000][ T8494] Node 1 Normal free:3893852kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20704kB local_pcp:9088kB free_cma:0kB
[  250.925355][ T8501] wg2: entered promiscuous mode
[  250.935857][ T8501] wg2: entered allmulticast mode
[  250.955669][ T8494] lowmem_reserve[]: 0 0 0 0 0
[  250.960569][ T8494] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  250.974804][ T8494] Node 0 DMA32: 470*4kB (UME) 979*8kB (UM) 816*16kB (UM) 1124*32kB (UM) 392*64kB (UM) 163*128kB (UME) 101*256kB (UME) 47*512kB (UM) 20*1024kB (UME) 8*2048kB (UM) 317*4096kB (M) = 1489904kB
[  251.007069][ T8494] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  251.049889][ T8494] Node 1 Normal: 275*4kB (UME) 52*8kB (UME) 37*16kB (UME) 55*32kB (UME) 23*64kB (UME) 3*128kB (UE) 2*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3893852kB
[  251.068189][ T8517] syzkaller1: tun_chr_ioctl cmd 1074025673
[  251.096029][ T8494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  251.114860][ T8494] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  251.145731][ T8494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  251.165684][ T8494] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  251.189528][ T8494] 57417 total pagecache pages
[  251.194365][ T8494] 0 pages in swap cache
[  251.203702][ T8494] Free swap  = 124996kB
[  251.207056][ T8521] FAULT_INJECTION: forcing a failure.
[  251.207056][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.210603][ T8494] Total swap = 124996kB
[  251.230088][ T8494] 2097051 pages RAM
[  251.233940][ T8494] 0 pages HighMem/MovableOnly
[  251.237017][ T8521] CPU: 1 PID: 8521 Comm: syz.1.884 Not tainted syzkaller #0
[  251.239949][ T8494] 416137 pages reserved
[  251.245907][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  251.245919][ T8521] Call Trace:
[  251.245927][ T8521]  <TASK>
[  251.245936][ T8521]  dump_stack_lvl+0x16c/0x230
[  251.245969][ T8521]  ? show_regs_print_info+0x20/0x20
[  251.245992][ T8521]  ? load_image+0x3b0/0x3b0
[  251.246015][ T8521]  ? __might_fault+0xaa/0x120
[  251.246036][ T8521]  ? __lock_acquire+0x7c80/0x7c80
[  251.246063][ T8521]  should_fail_ex+0x39d/0x4d0
[  251.246093][ T8521]  _copy_from_user+0x2f/0xe0
[  251.246117][ T8521]  __sys_bpf+0x1e9/0x800
[  251.246141][ T8521]  ? bpf_link_show_fdinfo+0x350/0x350
[  251.252879][ T8494] 0 pages cma reserved
[  251.260382][ T8521]  ? lock_chain_count+0x20/0x20
[  251.260426][ T8521]  __x64_sys_bpf+0x7c/0x90
[  251.260448][ T8521]  do_syscall_64+0x55/0xb0
[  251.260470][ T8521]  ? clear_bhb_loop+0x40/0x90
[  251.332531][ T8521]  ? clear_bhb_loop+0x40/0x90
[  251.337254][ T8521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  251.343174][ T8521] RIP: 0033:0x7f8653f8f749
[  251.347601][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  251.367226][ T8521] RSP: 002b:00007f8654e4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  251.375670][ T8521] RAX: ffffffffffffffda RBX: 00007f86541e5fa0 RCX: 00007f8653f8f749
[  251.383652][ T8521] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  251.391634][ T8521] RBP: 00007f8654e4a090 R08: 0000000000000000 R09: 0000000000000000
[  251.399611][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.407677][ T8521] R13: 00007f86541e6038 R14: 00007f86541e5fa0 R15: 00007ffc4028a328
[  251.415677][ T8521]  </TASK>
[  252.215992][ T8548] validate_nla: 1 callbacks suppressed
[  252.216012][ T8548] netlink: 'syz.3.895': attribute type 10 has an invalid length.
[  252.249762][ T8548] netlink: 40 bytes leftover after parsing attributes in process `syz.3.895'.
[  252.267074][ T8548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.310342][ T8551] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.895'.
[  252.333841][ T8551] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.895'.
[  252.444308][ T8546] wg2: left promiscuous mode
[  252.472700][ T8546] wg2: left allmulticast mode
[  252.503710][ T8557] FAULT_INJECTION: forcing a failure.
[  252.503710][ T8557] name failslab, interval 1, probability 0, space 0, times 0
[  252.533249][ T8557] CPU: 0 PID: 8557 Comm: syz.1.898 Not tainted syzkaller #0
[  252.540637][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  252.550749][ T8557] Call Trace:
[  252.554103][ T8557]  <TASK>
[  252.557090][ T8557]  dump_stack_lvl+0x16c/0x230
[  252.561825][ T8557]  ? show_regs_print_info+0x20/0x20
[  252.567150][ T8557]  ? load_image+0x3b0/0x3b0
[  252.571787][ T8557]  ? __lock_acquire+0x7c80/0x7c80
[  252.576874][ T8557]  should_fail_ex+0x39d/0x4d0
[  252.581598][ T8557]  should_failslab+0x9/0x20
[  252.586125][ T8557]  slab_pre_alloc_hook+0x59/0x310
[  252.591174][ T8557]  ? bpf_test_init+0xc0/0x150
[  252.595896][ T8557]  ? bpf_test_init+0xc0/0x150
[  252.600579][ T8557]  __kmem_cache_alloc_node+0x53/0x260
[  252.605972][ T8557]  ? bpf_test_init+0xc0/0x150
[  252.610659][ T8557]  __kmalloc+0xa4/0x240
[  252.614836][ T8557]  bpf_test_init+0xc0/0x150
[  252.619359][ T8557]  bpf_prog_test_run_xdp+0x382/0xfa0
[  252.624685][ T8557]  ? dev_put+0x80/0x80
[  252.628775][ T8557]  ? dev_put+0x80/0x80
[  252.632870][ T8557]  bpf_prog_test_run+0x321/0x390
[  252.637911][ T8557]  __sys_bpf+0x440/0x800
[  252.642169][ T8557]  ? bpf_link_show_fdinfo+0x350/0x350
[  252.647567][ T8557]  ? lock_chain_count+0x20/0x20
[  252.652440][ T8557]  __x64_sys_bpf+0x7c/0x90
[  252.656880][ T8557]  do_syscall_64+0x55/0xb0
[  252.661317][ T8557]  ? clear_bhb_loop+0x40/0x90
[  252.666031][ T8557]  ? clear_bhb_loop+0x40/0x90
[  252.670756][ T8557]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  252.676688][ T8557] RIP: 0033:0x7f8653f8f749
[  252.681139][ T8557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  252.700774][ T8557] RSP: 002b:00007f8654e4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.709208][ T8557] RAX: ffffffffffffffda RBX: 00007f86541e5fa0 RCX: 00007f8653f8f749
[  252.717194][ T8557] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  252.725176][ T8557] RBP: 00007f8654e4a090 R08: 0000000000000000 R09: 0000000000000000
[  252.733246][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  252.741405][ T8557] R13: 00007f86541e6038 R14: 00007f86541e5fa0 R15: 00007ffc4028a328
[  252.749492][ T8557]  </TASK>
[  253.326194][ T8573] netlink: 'syz.1.903': attribute type 11 has an invalid length.
[  255.955021][ T8621] wg2: left promiscuous mode
[  255.965839][ T8621] wg2: left allmulticast mode
[  256.108320][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  256.114705][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  257.052317][ T8641] FAULT_INJECTION: forcing a failure.
[  257.052317][ T8641] name failslab, interval 1, probability 0, space 0, times 0
[  257.091341][ T8641] CPU: 1 PID: 8641 Comm: syz.3.929 Not tainted syzkaller #0
[  257.098700][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  257.108962][ T8641] Call Trace:
[  257.112273][ T8641]  <TASK>
[  257.115232][ T8641]  dump_stack_lvl+0x16c/0x230
[  257.119951][ T8641]  ? show_regs_print_info+0x20/0x20
[  257.125192][ T8641]  ? load_image+0x3b0/0x3b0
[  257.129726][ T8641]  ? __might_sleep+0xe0/0xe0
[  257.134345][ T8641]  ? __lock_acquire+0x7c80/0x7c80
[  257.139404][ T8641]  should_fail_ex+0x39d/0x4d0
[  257.144213][ T8641]  should_failslab+0x9/0x20
[  257.148751][ T8641]  slab_pre_alloc_hook+0x59/0x310
[  257.153907][ T8641]  ? kvmalloc_node+0x70/0x180
[  257.158618][ T8641]  ? kvmalloc_node+0x70/0x180
[  257.163330][ T8641]  __kmem_cache_alloc_node+0x53/0x260
[  257.168740][ T8641]  ? kvmalloc_node+0x70/0x180
[  257.173451][ T8641]  __kmalloc_node+0xa4/0x230
[  257.178083][ T8641]  kvmalloc_node+0x70/0x180
[  257.182622][ T8641]  bpf_test_run_xdp_live+0x180/0x1a20
[  257.188032][ T8641]  ? 0xffffffffa0004500
[  257.192417][ T8641]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  257.198350][ T8641]  ? __sys_bpf+0x440/0x800
[  257.202794][ T8641]  ? __x64_sys_bpf+0x7c/0x90
[  257.207407][ T8641]  ? do_syscall_64+0x55/0xb0
[  257.212048][ T8641]  ? xdp_convert_md_to_buff+0x330/0x330
[  257.217668][ T8641]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  257.224002][ T8641]  ? _copy_from_user+0xa5/0xe0
[  257.228805][ T8641]  ? bpf_test_init+0x134/0x150
[  257.233594][ T8641]  ? xdp_convert_md_to_buff+0x5b/0x330
[  257.239093][ T8641]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  257.244513][ T8641]  ? dev_put+0x80/0x80
[  257.248627][ T8641]  ? dev_put+0x80/0x80
[  257.252728][ T8641]  bpf_prog_test_run+0x321/0x390
[  257.257700][ T8641]  __sys_bpf+0x440/0x800
[  257.261988][ T8641]  ? bpf_link_show_fdinfo+0x350/0x350
[  257.267415][ T8641]  ? lock_chain_count+0x20/0x20
[  257.272315][ T8641]  __x64_sys_bpf+0x7c/0x90
[  257.276845][ T8641]  do_syscall_64+0x55/0xb0
[  257.281296][ T8641]  ? clear_bhb_loop+0x40/0x90
[  257.285992][ T8641]  ? clear_bhb_loop+0x40/0x90
[  257.290688][ T8641]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.296597][ T8641] RIP: 0033:0x7f550998f749
[  257.301040][ T8641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.320743][ T8641] RSP: 002b:00007f550a74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  257.329170][ T8641] RAX: ffffffffffffffda RBX: 00007f5509be5fa0 RCX: 00007f550998f749
[  257.337152][ T8641] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  257.345132][ T8641] RBP: 00007f550a74e090 R08: 0000000000000000 R09: 0000000000000000
[  257.353109][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.361527][ T8641] R13: 00007f5509be6038 R14: 00007f5509be5fa0 R15: 00007fffe83b67d8
[  257.369521][ T8641]  </TASK>
[  257.603894][ T8645] wg2: entered promiscuous mode
[  257.609861][ T8645] wg2: entered allmulticast mode
[  257.757043][ T8651] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  257.865454][ T8651] netlink: 'syz.3.931': attribute type 9 has an invalid length.
[  257.903182][ T8647] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  257.905743][ T8651] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.931'.
[  261.233167][ T8702] syzkaller0: entered promiscuous mode
[  261.351033][ T8702] syzkaller0: entered allmulticast mode
[  262.200241][ T8710] wg2: entered promiscuous mode
[  262.205288][ T8710] wg2: entered allmulticast mode
[  263.430612][ T8735] FAULT_INJECTION: forcing a failure.
[  263.430612][ T8735] name failslab, interval 1, probability 0, space 0, times 0
[  263.475119][ T8735] CPU: 0 PID: 8735 Comm: syz.2.959 Not tainted syzkaller #0
[  263.482506][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  263.492604][ T8735] Call Trace:
[  263.495924][ T8735]  <TASK>
[  263.498907][ T8735]  dump_stack_lvl+0x16c/0x230
[  263.503638][ T8735]  ? show_regs_print_info+0x20/0x20
[  263.508887][ T8735]  ? load_image+0x3b0/0x3b0
[  263.513436][ T8735]  ? __might_sleep+0xe0/0xe0
[  263.518071][ T8735]  ? __lock_acquire+0x7c80/0x7c80
[  263.523147][ T8735]  should_fail_ex+0x39d/0x4d0
[  263.527881][ T8735]  should_failslab+0x9/0x20
[  263.532439][ T8735]  slab_pre_alloc_hook+0x59/0x310
[  263.537528][ T8735]  ? page_pool_create+0x71/0x5e0
[  263.542530][ T8735]  __kmem_cache_alloc_node+0x53/0x260
[  263.547973][ T8735]  ? page_pool_create+0x71/0x5e0
[  263.552965][ T8735]  kmalloc_node_trace+0x26/0xe0
[  263.557875][ T8735]  page_pool_create+0x71/0x5e0
[  263.562697][ T8735]  bpf_test_run_xdp_live+0x1c1/0x1a20
[  263.568129][ T8735]  ? 0xffffffffa0004500
[  263.572334][ T8735]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  263.578288][ T8735]  ? __might_fault+0xaa/0x120
[  263.583032][ T8735]  ? xdp_convert_md_to_buff+0x330/0x330
[  263.588674][ T8735]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  263.594960][ T8735]  ? _copy_from_user+0xa5/0xe0
[  263.599803][ T8735]  ? bpf_test_init+0x134/0x150
[  263.604607][ T8735]  ? xdp_convert_md_to_buff+0x5b/0x330
[  263.610112][ T8735]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  263.615468][ T8735]  ? dev_put+0x80/0x80
[  263.619607][ T8735]  ? dev_put+0x80/0x80
[  263.623716][ T8735]  bpf_prog_test_run+0x321/0x390
[  263.628695][ T8735]  __sys_bpf+0x440/0x800
[  263.632977][ T8735]  ? bpf_link_show_fdinfo+0x350/0x350
[  263.638422][ T8735]  ? lock_chain_count+0x20/0x20
[  263.643329][ T8735]  __x64_sys_bpf+0x7c/0x90
[  263.647784][ T8735]  do_syscall_64+0x55/0xb0
[  263.652248][ T8735]  ? clear_bhb_loop+0x40/0x90
[  263.656980][ T8735]  ? clear_bhb_loop+0x40/0x90
[  263.661783][ T8735]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  263.667728][ T8735] RIP: 0033:0x7fe8d638f749
[  263.672168][ T8735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.691811][ T8735] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  263.700246][ T8735] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  263.708331][ T8735] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  263.716317][ T8735] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  263.724302][ T8735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  263.732286][ T8735] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  263.740290][ T8735]  </TASK>
[  263.761111][ T8740] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.962'.
[  263.808049][ T8740] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.962'.
[  263.921665][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.963'.
[  266.253111][ T8778] netlink: 'syz.2.973': attribute type 21 has an invalid length.
[  266.317846][ T8778] netlink: 156 bytes leftover after parsing attributes in process `syz.2.973'.
[  267.917769][ T8805] netlink: 'syz.2.982': attribute type 10 has an invalid length.
[  270.668269][ T8830] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  270.675085][ T8830] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  271.437696][ T8862] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.998'.
[  271.495793][ T8862] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.998'.
[  271.536311][ T8865] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.998'.
[  271.555297][ T8861] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.998'.
[  271.623424][ T8862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.352739][ T8915] netlink: 'syz.3.1020': attribute type 4 has an invalid length.
[  274.380500][ T8915] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1020'.
[  274.396874][ T8915] wlan1: mtu less than device minimum
[  274.406688][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.437858][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.458038][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.465522][ T8919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.561724][ T8909] netlink: 'syz.0.1016': attribute type 10 has an invalid length.
[  274.877442][ T8909] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  274.953435][ T8935] FAULT_INJECTION: forcing a failure.
[  274.953435][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.977870][ T8935] CPU: 1 PID: 8935 Comm: syz.3.1025 Not tainted syzkaller #0
[  274.985344][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  274.995445][ T8935] Call Trace:
[  274.998762][ T8935]  <TASK>
[  275.001729][ T8935]  dump_stack_lvl+0x16c/0x230
[  275.006456][ T8935]  ? show_regs_print_info+0x20/0x20
[  275.011700][ T8935]  ? load_image+0x3b0/0x3b0
[  275.016260][ T8935]  ? __lock_acquire+0x7c80/0x7c80
[  275.021333][ T8935]  ? snprintf+0xdb/0x120
[  275.025625][ T8935]  should_fail_ex+0x39d/0x4d0
[  275.030526][ T8935]  _copy_to_user+0x2f/0xa0
[  275.034991][ T8935]  simple_read_from_buffer+0xe7/0x150
[  275.040507][ T8935]  proc_fail_nth_read+0x1e3/0x250
[  275.045576][ T8935]  ? proc_fault_inject_write+0x340/0x340
[  275.051255][ T8935]  ? fsnotify_perm+0x271/0x5e0
[  275.056067][ T8935]  ? proc_fault_inject_write+0x340/0x340
[  275.061768][ T8935]  vfs_read+0x27e/0x920
[  275.066005][ T8935]  ? kernel_read+0x1e0/0x1e0
[  275.070643][ T8935]  ? __fget_files+0x28/0x4d0
[  275.075287][ T8935]  ? __fget_files+0x44a/0x4d0
[  275.080021][ T8935]  ? __fdget_pos+0x2a3/0x330
[  275.084666][ T8935]  ? ksys_read+0x75/0x250
[  275.089043][ T8935]  ksys_read+0x147/0x250
[  275.093331][ T8935]  ? vfs_write+0x940/0x940
[  275.097800][ T8935]  ? lockdep_hardirqs_on+0x98/0x150
[  275.103045][ T8935]  do_syscall_64+0x55/0xb0
[  275.107501][ T8935]  ? clear_bhb_loop+0x40/0x90
[  275.112307][ T8935]  ? clear_bhb_loop+0x40/0x90
[  275.117025][ T8935]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  275.123078][ T8935] RIP: 0033:0x7f550998e15c
[  275.127535][ T8935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  275.147272][ T8935] RSP: 002b:00007f550a74e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  275.155826][ T8935] RAX: ffffffffffffffda RBX: 00007f5509be5fa0 RCX: 00007f550998e15c
[  275.163934][ T8935] RDX: 000000000000000f RSI: 00007f550a74e0a0 RDI: 0000000000000004
[  275.171948][ T8935] RBP: 00007f550a74e090 R08: 0000000000000000 R09: 0000000000000000
[  275.179962][ T8935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  275.188079][ T8935] R13: 00007f5509be6038 R14: 00007f5509be5fa0 R15: 00007fffe83b67d8
[  275.196115][ T8935]  </TASK>
[  275.430020][ T8952] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1033'.
[  276.516937][ T8987] pim6reg1: entered promiscuous mode
[  276.522321][ T8987] pim6reg1: entered allmulticast mode
[  277.333787][ T9020] netlink: 'syz.0.1059': attribute type 64 has an invalid length.
[  278.061206][ T9028] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1060'.
[  278.647583][ T9053] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1068'.
[  278.658238][ T9060] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1070'.
[  278.672811][ T9060] netlink: 'syz.0.1070': attribute type 27 has an invalid length.
[  278.683737][ T9060] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1070'.
[  283.287190][ T9160] IPv6: NLM_F_REPLACE set, but no existing node found!
[  285.907571][ T9200] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1121'.
[  285.973389][ T9204] syzkaller1: tun_chr_ioctl cmd 1074025675
[  285.995357][ T9204] syzkaller1: persist disabled
[  287.432623][ T9227] netlink: 'syz.0.1123': attribute type 10 has an invalid length.
[  287.514024][ T9227] .`: (slave dummy0): Enslaving as an active interface with an up link
[  289.144699][ T9240] syzkaller0: entered promiscuous mode
[  289.153182][ T9240] syzkaller0: entered allmulticast mode
[  289.269216][ T9240] syzkaller0: tun_net_xmit 1280
[  289.286008][ T9240] syzkaller0: create flow: hash 1772931796 index 2
[  289.379970][ T9247] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1133'.
[  289.635421][ T9239] syzkaller0: delete flow: hash 1772931796 index 2
[  291.917598][ T9271] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1143'.
[  291.937286][ T9271] netlink: 'syz.3.1143': attribute type 2 has an invalid length.
[  291.950020][ T9272] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1143'.
[  291.964077][ T9272] netlink: 'syz.3.1143': attribute type 2 has an invalid length.
[  292.007281][ T9270] netlink: 'syz.3.1143': attribute type 10 has an invalid length.
[  292.015182][ T9270] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1143'.
[  294.013658][ T9305] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1152'.
[  295.525109][ T9286] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1148'.
[  295.556555][ T9291] netlink: 'syz.0.1151': attribute type 21 has an invalid length.
[  295.573218][ T9291] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1151'.
[  296.433429][ T9325] pim6reg1: left promiscuous mode
[  296.447184][ T9325] pim6reg1: left allmulticast mode
[  296.473071][ T9331] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1162'.
[  297.469231][ T9338] netlink: 'syz.3.1166': attribute type 10 has an invalid length.
[  297.486726][ T9338] bridge0: left allmulticast mode
[  297.502039][ T9338] bridge0: port 3(dummy0) entered blocking state
[  297.510403][ T9338] bridge0: port 3(dummy0) entered forwarding state
[  297.520270][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.528084][ T9338] bridge0: port 2(bridge_slave_1) entered forwarding state
[  297.536270][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.544022][ T9338] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.647259][ T9338] team0: Port device bridge0 added
[  297.739810][ T9350] netlink: 'syz.3.1166': attribute type 29 has an invalid length.
[  297.825753][ T9350] netlink: 'syz.3.1166': attribute type 3 has an invalid length.
[  297.840811][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1166'.
[  298.378507][ T9338] syz.3.1166 (9338) used greatest stack depth: 19304 bytes left
[  300.287858][ T9403] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1186'.
[  300.614894][ T9414] netlink: 'syz.3.1192': attribute type 12 has an invalid length.
[  300.705768][ T9414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1192'.
[  302.039408][ T9431] netlink: 'syz.3.1199': attribute type 2 has an invalid length.
[  302.069111][ T9431] netlink: 'syz.3.1199': attribute type 2 has an invalid length.
[  302.196658][ T9442] syz.2.1204[9442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  302.196906][ T9442] syz.2.1204[9442] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  302.498156][ T9450] netlink: 'syz.1.1207': attribute type 12 has an invalid length.
[  302.550233][ T9450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1207'.
[  303.697786][ T9469] syzkaller0: entered promiscuous mode
[  303.703625][ T9469] syzkaller0: entered allmulticast mode
[  303.724992][ T9474] netlink: 'syz.0.1217': attribute type 12 has an invalid length.
[  303.743435][ T9474] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1217'.
[  305.198376][ T9520] FAULT_INJECTION: forcing a failure.
[  305.198376][ T9520] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  305.212330][ T9520] CPU: 1 PID: 9520 Comm: syz.0.1233 Not tainted syzkaller #0
[  305.219750][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  305.229927][ T9520] Call Trace:
[  305.233233][ T9520]  <TASK>
[  305.236197][ T9520]  dump_stack_lvl+0x16c/0x230
[  305.240926][ T9520]  ? show_regs_print_info+0x20/0x20
[  305.246165][ T9520]  ? load_image+0x3b0/0x3b0
[  305.250710][ T9520]  ? __lock_acquire+0x7c80/0x7c80
[  305.255788][ T9520]  should_fail_ex+0x39d/0x4d0
[  305.260511][ T9520]  prepare_alloc_pages+0x1e2/0x5f0
[  305.265671][ T9520]  __alloc_pages+0x127/0x460
[  305.270332][ T9520]  ? zone_statistics+0x170/0x170
[  305.275356][ T9520]  ? __dquot_alloc_space+0x27d/0xe80
[  305.280709][ T9520]  __folio_alloc+0x10/0x20
[  305.285173][ T9520]  vma_alloc_folio+0x47a/0x8f0
[  305.289983][ T9520]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  305.295838][ T9520]  shmem_alloc_folio+0x179/0x230
[  305.300821][ T9520]  ? folio_put+0xd0/0xd0
[  305.305133][ T9520]  ? __vm_enough_memory+0x11b/0x370
[  305.310428][ T9520]  ? shmem_inode_acct_block+0x35e/0x460
[  305.316014][ T9520]  shmem_alloc_and_acct_folio+0x189/0x630
[  305.321789][ T9520]  ? put_swap_device+0x230/0x230
[  305.326862][ T9520]  ? filemap_get_entry+0xb1/0x3c0
[  305.331921][ T9520]  ? xas_load+0x11d/0x140
[  305.336284][ T9520]  ? filemap_get_entry+0xb1/0x3c0
[  305.341354][ T9520]  ? filemap_get_entry+0xb1/0x3c0
[  305.346411][ T9520]  ? filemap_get_entry+0x35c/0x3c0
[  305.351558][ T9520]  ? trace_event_raw_event_lock+0x230/0x230
[  305.357499][ T9520]  ? page_cache_prev_miss+0x360/0x360
[  305.362938][ T9520]  shmem_get_folio_gfp+0xcde/0x2ac0
[  305.368213][ T9520]  shmem_write_begin+0xf2/0x420
[  305.373111][ T9520]  generic_perform_write+0x2fb/0x5b0
[  305.378631][ T9520]  ? generic_file_direct_write+0x3e0/0x3e0
[  305.384467][ T9520]  ? down_write+0x162/0x1f0
[  305.389030][ T9520]  ? file_update_time+0x98/0x1b0
[  305.394020][ T9520]  shmem_file_write_iter+0xfb/0x120
[  305.399403][ T9520]  vfs_write+0x43b/0x940
[  305.403705][ T9520]  ? file_end_write+0x250/0x250
[  305.408607][ T9520]  ? __fget_files+0x44a/0x4d0
[  305.413340][ T9520]  ? __fdget_pos+0x2a3/0x330
[  305.417979][ T9520]  ? ksys_write+0x75/0x250
[  305.422443][ T9520]  ksys_write+0x147/0x250
[  305.426820][ T9520]  ? __ia32_sys_read+0x90/0x90
[  305.431657][ T9520]  ? lockdep_hardirqs_on+0x98/0x150
[  305.436905][ T9520]  do_syscall_64+0x55/0xb0
[  305.441362][ T9520]  ? clear_bhb_loop+0x40/0x90
[  305.446124][ T9520]  ? clear_bhb_loop+0x40/0x90
[  305.450839][ T9520]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  305.456750][ T9520] RIP: 0033:0x7fdf6638f749
[  305.461179][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.480887][ T9520] RSP: 002b:00007fdf67218038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  305.489323][ T9520] RAX: ffffffffffffffda RBX: 00007fdf665e6090 RCX: 00007fdf6638f749
[  305.497316][ T9520] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000009
[  305.505402][ T9520] RBP: 00007fdf67218090 R08: 0000000000000000 R09: 0000000000000000
[  305.513402][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.521386][ T9520] R13: 00007fdf665e6128 R14: 00007fdf665e6090 R15: 00007ffe8d3b3418
[  305.529392][ T9520]  </TASK>
[  307.141771][ T9548] FAULT_INJECTION: forcing a failure.
[  307.141771][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  307.155944][ T9548] CPU: 0 PID: 9548 Comm: syz.0.1243 Not tainted syzkaller #0
[  307.163360][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  307.173620][ T9548] Call Trace:
[  307.176938][ T9548]  <TASK>
[  307.179897][ T9548]  dump_stack_lvl+0x16c/0x230
[  307.184621][ T9548]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.190819][ T9548]  ? show_regs_print_info+0x20/0x20
[  307.196058][ T9548]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  307.202275][ T9548]  should_fail_ex+0x39d/0x4d0
[  307.207001][ T9548]  copy_page_from_iter_atomic+0x2a2/0x1530
[  307.212868][ T9548]  ? shmem_get_folio_gfp+0x2705/0x2ac0
[  307.218398][ T9548]  ? iov_iter_zero+0x1120/0x1120
[  307.223483][ T9548]  ? shmem_write_begin+0x1cf/0x420
[  307.228652][ T9548]  generic_perform_write+0x350/0x5b0
[  307.234000][ T9548]  ? generic_file_direct_write+0x3e0/0x3e0
[  307.239855][ T9548]  ? file_update_time+0x1a2/0x1b0
[  307.245190][ T9548]  shmem_file_write_iter+0xfb/0x120
[  307.250435][ T9548]  vfs_write+0x43b/0x940
[  307.254743][ T9548]  ? file_end_write+0x250/0x250
[  307.259658][ T9548]  ? __fget_files+0x44a/0x4d0
[  307.264395][ T9548]  ? __fdget_pos+0x2a3/0x330
[  307.269049][ T9548]  ? ksys_write+0x75/0x250
[  307.273579][ T9548]  ksys_write+0x147/0x250
[  307.277963][ T9548]  ? __ia32_sys_read+0x90/0x90
[  307.282777][ T9548]  ? syscall_enter_from_user_mode+0x2e/0x80
[  307.288888][ T9548]  do_syscall_64+0x55/0xb0
[  307.293338][ T9548]  ? clear_bhb_loop+0x40/0x90
[  307.298056][ T9548]  ? clear_bhb_loop+0x40/0x90
[  307.302870][ T9548]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.308802][ T9548] RIP: 0033:0x7fdf6638f749
[  307.313251][ T9548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.333005][ T9548] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  307.341477][ T9548] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  307.349552][ T9548] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000009
[  307.357592][ T9548] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  307.365608][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.373623][ T9548] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  307.381740][ T9548]  </TASK>
[  311.074325][ T9603] netlink: 'syz.1.1259': attribute type 21 has an invalid length.
[  311.082453][ T9603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1259'.
[  313.462526][ T9664] netlink: 'syz.0.1282': attribute type 10 has an invalid length.
[  313.485691][ T9664] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1282'.
[  313.494804][ T9664] .`: entered promiscuous mode
[  313.503500][ T9664] bond_slave_0: entered promiscuous mode
[  313.509594][ T9664] bond_slave_1: entered promiscuous mode
[  313.535781][ T9664] batadv_slave_0: entered promiscuous mode
[  313.541801][ T9664] dummy0: entered promiscuous mode
[  313.568848][ T9664] 8021q: adding VLAN 0 to HW filter on device .`
[  313.584167][ T9664] bridge0: port 4(.`) entered blocking state
[  313.590841][ T9664] bridge0: port 4(.`) entered disabled state
[  313.599600][ T9664] .`: entered allmulticast mode
[  313.604602][ T9664] bond_slave_0: entered allmulticast mode
[  313.630063][ T9664] bond_slave_1: entered allmulticast mode
[  313.637934][ T9664] batadv_slave_0: entered allmulticast mode
[  313.644071][ T9664] dummy0: entered allmulticast mode
[  313.656258][ T9664] bridge0: port 4(.`) entered blocking state
[  313.662473][ T9664] bridge0: port 4(.`) entered forwarding state
[  313.710468][ T9672] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1283'.
[  314.481189][ T9698] FAULT_INJECTION: forcing a failure.
[  314.481189][ T9698] name failslab, interval 1, probability 0, space 0, times 0
[  314.527740][ T9698] CPU: 0 PID: 9698 Comm: syz.0.1293 Not tainted syzkaller #0
[  314.535196][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  314.545290][ T9698] Call Trace:
[  314.548599][ T9698]  <TASK>
[  314.551571][ T9698]  dump_stack_lvl+0x16c/0x230
[  314.556313][ T9698]  ? show_regs_print_info+0x20/0x20
[  314.561600][ T9698]  ? load_image+0x3b0/0x3b0
[  314.566150][ T9698]  ? __lock_acquire+0x7c80/0x7c80
[  314.571215][ T9698]  should_fail_ex+0x39d/0x4d0
[  314.575941][ T9698]  should_failslab+0x9/0x20
[  314.580480][ T9698]  slab_pre_alloc_hook+0x59/0x310
[  314.585548][ T9698]  ? bpf_test_init+0xc0/0x150
[  314.590342][ T9698]  ? bpf_test_init+0xc0/0x150
[  314.595044][ T9698]  __kmem_cache_alloc_node+0x53/0x260
[  314.600461][ T9698]  ? bpf_test_init+0xc0/0x150
[  314.605180][ T9698]  __kmalloc+0xa4/0x240
[  314.609379][ T9698]  bpf_test_init+0xc0/0x150
[  314.613899][ T9698]  bpf_prog_test_run_xdp+0x382/0xfa0
[  314.619211][ T9698]  ? dev_put+0x80/0x80
[  314.623328][ T9698]  ? dev_put+0x80/0x80
[  314.627418][ T9698]  bpf_prog_test_run+0x321/0x390
[  314.632371][ T9698]  __sys_bpf+0x440/0x800
[  314.636628][ T9698]  ? bpf_link_show_fdinfo+0x350/0x350
[  314.642113][ T9698]  ? lock_chain_count+0x20/0x20
[  314.646988][ T9698]  __x64_sys_bpf+0x7c/0x90
[  314.651415][ T9698]  do_syscall_64+0x55/0xb0
[  314.655848][ T9698]  ? clear_bhb_loop+0x40/0x90
[  314.660536][ T9698]  ? clear_bhb_loop+0x40/0x90
[  314.665224][ T9698]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.671130][ T9698] RIP: 0033:0x7fdf6638f749
[  314.675649][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.695272][ T9698] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  314.703700][ T9698] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  314.711691][ T9698] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  314.719675][ T9698] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  314.727655][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.735633][ T9698] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  314.743716][ T9698]  </TASK>
[  315.694634][ T9727] FAULT_INJECTION: forcing a failure.
[  315.694634][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.729863][ T9727] CPU: 1 PID: 9727 Comm: syz.0.1304 Not tainted syzkaller #0
[  315.737305][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  315.747381][ T9727] Call Trace:
[  315.750677][ T9727]  <TASK>
[  315.753616][ T9727]  dump_stack_lvl+0x16c/0x230
[  315.758666][ T9727]  ? show_regs_print_info+0x20/0x20
[  315.763878][ T9727]  ? load_image+0x3b0/0x3b0
[  315.768394][ T9727]  ? __lock_acquire+0x7c80/0x7c80
[  315.773465][ T9727]  ? __virt_addr_valid+0x18c/0x540
[  315.778596][ T9727]  should_fail_ex+0x39d/0x4d0
[  315.783292][ T9727]  _copy_from_user+0x2f/0xe0
[  315.787906][ T9727]  bpf_test_init+0xf9/0x150
[  315.792433][ T9727]  bpf_prog_test_run_xdp+0x382/0xfa0
[  315.797758][ T9727]  ? dev_put+0x80/0x80
[  315.801886][ T9727]  ? dev_put+0x80/0x80
[  315.805964][ T9727]  bpf_prog_test_run+0x321/0x390
[  315.810915][ T9727]  __sys_bpf+0x440/0x800
[  315.815171][ T9727]  ? bpf_link_show_fdinfo+0x350/0x350
[  315.820566][ T9727]  ? lock_chain_count+0x20/0x20
[  315.825532][ T9727]  __x64_sys_bpf+0x7c/0x90
[  315.829968][ T9727]  do_syscall_64+0x55/0xb0
[  315.834395][ T9727]  ? clear_bhb_loop+0x40/0x90
[  315.839083][ T9727]  ? clear_bhb_loop+0x40/0x90
[  315.843860][ T9727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.849761][ T9727] RIP: 0033:0x7fdf6638f749
[  315.854208][ T9727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.873820][ T9727] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  315.882244][ T9727] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  315.890223][ T9727] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  315.898205][ T9727] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  315.906186][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.914161][ T9727] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  315.922169][ T9727]  </TASK>
[  316.833041][ T9744] C: renamed from team_slave_0 (while UP)
[  316.900105][ T9744] netlink: 'syz.3.1311': attribute type 3 has an invalid length.
[  316.936862][ T9744] netlink: 'syz.3.1311': attribute type 1 has an invalid length.
[  316.979300][ T9744] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1311'.
[  317.440459][ T9756] FAULT_INJECTION: forcing a failure.
[  317.440459][ T9756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  317.459805][ T9756] CPU: 1 PID: 9756 Comm: syz.1.1316 Not tainted syzkaller #0
[  317.467246][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  317.477411][ T9756] Call Trace:
[  317.480712][ T9756]  <TASK>
[  317.483663][ T9756]  dump_stack_lvl+0x16c/0x230
[  317.488376][ T9756]  ? show_regs_print_info+0x20/0x20
[  317.493607][ T9756]  ? load_image+0x3b0/0x3b0
[  317.498154][ T9756]  ? __might_fault+0xaa/0x120
[  317.502877][ T9756]  ? __lock_acquire+0x7c80/0x7c80
[  317.508032][ T9756]  should_fail_ex+0x39d/0x4d0
[  317.512748][ T9756]  _copy_to_user+0x2f/0xa0
[  317.517190][ T9756]  bpf_test_finish+0x19a/0x620
[  317.522070][ T9756]  ? convert___skb_to_skb+0x590/0x590
[  317.527465][ T9756]  ? convert_skb_to___skb+0x420/0x420
[  317.532864][ T9756]  ? bpf_test_init+0x134/0x150
[  317.537656][ T9756]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  317.542978][ T9756]  ? dev_put+0x80/0x80
[  317.547085][ T9756]  ? dev_put+0x80/0x80
[  317.551182][ T9756]  bpf_prog_test_run+0x321/0x390
[  317.556150][ T9756]  __sys_bpf+0x440/0x800
[  317.560419][ T9756]  ? bpf_link_show_fdinfo+0x350/0x350
[  317.565930][ T9756]  ? lock_chain_count+0x20/0x20
[  317.570817][ T9756]  __x64_sys_bpf+0x7c/0x90
[  317.575257][ T9756]  do_syscall_64+0x55/0xb0
[  317.579714][ T9756]  ? clear_bhb_loop+0x40/0x90
[  317.584425][ T9756]  ? clear_bhb_loop+0x40/0x90
[  317.589132][ T9756]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  317.595048][ T9756] RIP: 0033:0x7f8653f8f749
[  317.599492][ T9756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  317.619123][ T9756] RSP: 002b:00007f8654e4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  317.627566][ T9756] RAX: ffffffffffffffda RBX: 00007f86541e5fa0 RCX: 00007f8653f8f749
[  317.635567][ T9756] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  317.643563][ T9756] RBP: 00007f8654e4a090 R08: 0000000000000000 R09: 0000000000000000
[  317.651557][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.659550][ T9756] R13: 00007f86541e6038 R14: 00007f86541e5fa0 R15: 00007ffc4028a328
[  317.667663][ T9756]  </TASK>
[  317.675954][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  317.682300][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  318.927110][ T9772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1322'.
[  319.709157][ T9780] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1324'.
[  319.782173][ T9780] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1324'.
[  319.817812][ T9780] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.1324'.
[  320.189398][ T9788] FAULT_INJECTION: forcing a failure.
[  320.189398][ T9788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  320.219490][ T9788] CPU: 1 PID: 9788 Comm: syz.2.1328 Not tainted syzkaller #0
[  320.226931][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  320.237017][ T9788] Call Trace:
[  320.240334][ T9788]  <TASK>
[  320.243294][ T9788]  dump_stack_lvl+0x16c/0x230
[  320.248011][ T9788]  ? show_regs_print_info+0x20/0x20
[  320.253237][ T9788]  ? load_image+0x3b0/0x3b0
[  320.257767][ T9788]  ? __might_fault+0xaa/0x120
[  320.262477][ T9788]  ? __lock_acquire+0x7c80/0x7c80
[  320.267530][ T9788]  should_fail_ex+0x39d/0x4d0
[  320.272257][ T9788]  _copy_to_user+0x2f/0xa0
[  320.276702][ T9788]  bpf_test_finish+0x19a/0x620
[  320.281502][ T9788]  ? convert___skb_to_skb+0x590/0x590
[  320.286896][ T9788]  ? convert_skb_to___skb+0x420/0x420
[  320.292297][ T9788]  ? bpf_test_init+0x134/0x150
[  320.297086][ T9788]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  320.302414][ T9788]  ? dev_put+0x80/0x80
[  320.306527][ T9788]  ? dev_put+0x80/0x80
[  320.310641][ T9788]  bpf_prog_test_run+0x321/0x390
[  320.315642][ T9788]  __sys_bpf+0x440/0x800
[  320.320013][ T9788]  ? bpf_link_show_fdinfo+0x350/0x350
[  320.325436][ T9788]  ? lock_chain_count+0x20/0x20
[  320.330345][ T9788]  __x64_sys_bpf+0x7c/0x90
[  320.334793][ T9788]  do_syscall_64+0x55/0xb0
[  320.339242][ T9788]  ? clear_bhb_loop+0x40/0x90
[  320.343960][ T9788]  ? clear_bhb_loop+0x40/0x90
[  320.348671][ T9788]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.354587][ T9788] RIP: 0033:0x7fe8d638f749
[  320.359028][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.378747][ T9788] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  320.387195][ T9788] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  320.395189][ T9788] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  320.403461][ T9788] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  320.411467][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.419465][ T9788] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  320.427484][ T9788]  </TASK>
[  320.486898][ T9790] netlink: 'syz.3.1329': attribute type 10 has an invalid length.
[  320.605020][ T9790] team0: Port device netdevsim0 added
[  322.483499][ T9822] FAULT_INJECTION: forcing a failure.
[  322.483499][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.515348][ T9822] CPU: 0 PID: 9822 Comm: syz.3.1338 Not tainted syzkaller #0
[  322.522789][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  322.532879][ T9822] Call Trace:
[  322.536196][ T9822]  <TASK>
[  322.539180][ T9822]  dump_stack_lvl+0x16c/0x230
[  322.543900][ T9822]  ? show_regs_print_info+0x20/0x20
[  322.549134][ T9822]  ? load_image+0x3b0/0x3b0
[  322.553668][ T9822]  ? __might_fault+0xaa/0x120
[  322.558375][ T9822]  ? __lock_acquire+0x7c80/0x7c80
[  322.563438][ T9822]  should_fail_ex+0x39d/0x4d0
[  322.568159][ T9822]  _copy_to_user+0x2f/0xa0
[  322.572609][ T9822]  bpf_test_finish+0x24b/0x620
[  322.577420][ T9822]  ? convert___skb_to_skb+0x590/0x590
[  322.582842][ T9822]  ? convert_skb_to___skb+0x420/0x420
[  322.588284][ T9822]  ? bpf_test_init+0x134/0x150
[  322.593102][ T9822]  bpf_prog_test_run_xdp+0x7fa/0xfa0
[  322.598450][ T9822]  ? dev_put+0x80/0x80
[  322.602580][ T9822]  ? dev_put+0x80/0x80
[  322.606681][ T9822]  bpf_prog_test_run+0x321/0x390
[  322.611667][ T9822]  __sys_bpf+0x440/0x800
[  322.615960][ T9822]  ? bpf_link_show_fdinfo+0x350/0x350
[  322.621488][ T9822]  ? lock_chain_count+0x20/0x20
[  322.626409][ T9822]  __x64_sys_bpf+0x7c/0x90
[  322.631139][ T9822]  do_syscall_64+0x55/0xb0
[  322.635608][ T9822]  ? clear_bhb_loop+0x40/0x90
[  322.640329][ T9822]  ? clear_bhb_loop+0x40/0x90
[  322.645048][ T9822]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  322.650986][ T9822] RIP: 0033:0x7f550998f749
[  322.655445][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.675183][ T9822] RSP: 002b:00007f550a74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  322.683663][ T9822] RAX: ffffffffffffffda RBX: 00007f5509be5fa0 RCX: 00007f550998f749
[  322.691678][ T9822] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  322.699682][ T9822] RBP: 00007f550a74e090 R08: 0000000000000000 R09: 0000000000000000
[  322.707669][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.715656][ T9822] R13: 00007f5509be6038 R14: 00007f5509be5fa0 R15: 00007fffe83b67d8
[  322.723747][ T9822]  </TASK>
[  322.731347][ T9810] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1333'.
[  322.917921][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.995770][ T9829] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.009773][ T9829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.045726][ T9829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.223660][ T9829] bond0: (slave batadv0): Releasing backup interface
[  323.275780][ T9835] netlink: 'syz.0.1342': attribute type 2 has an invalid length.
[  324.613158][ T9857] FAULT_INJECTION: forcing a failure.
[  324.613158][ T9857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  324.648095][ T9857] CPU: 0 PID: 9857 Comm: syz.2.1349 Not tainted syzkaller #0
[  324.655559][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  324.665647][ T9857] Call Trace:
[  324.668953][ T9857]  <TASK>
[  324.671916][ T9857]  dump_stack_lvl+0x16c/0x230
[  324.676641][ T9857]  ? show_regs_print_info+0x20/0x20
[  324.681902][ T9857]  ? load_image+0x3b0/0x3b0
[  324.686546][ T9857]  ? __lock_acquire+0x7c80/0x7c80
[  324.691615][ T9857]  ? snprintf+0xdb/0x120
[  324.695904][ T9857]  should_fail_ex+0x39d/0x4d0
[  324.700631][ T9857]  _copy_to_user+0x2f/0xa0
[  324.705080][ T9857]  simple_read_from_buffer+0xe7/0x150
[  324.710500][ T9857]  proc_fail_nth_read+0x1e3/0x250
[  324.715572][ T9857]  ? proc_fault_inject_write+0x340/0x340
[  324.721253][ T9857]  ? fsnotify_perm+0x271/0x5e0
[  324.726065][ T9857]  ? proc_fault_inject_write+0x340/0x340
[  324.731742][ T9857]  vfs_read+0x27e/0x920
[  324.735952][ T9857]  ? kernel_read+0x1e0/0x1e0
[  324.740680][ T9857]  ? __fget_files+0x28/0x4d0
[  324.745314][ T9857]  ? __fget_files+0x44a/0x4d0
[  324.750054][ T9857]  ? __fdget_pos+0x2a3/0x330
[  324.754783][ T9857]  ? ksys_read+0x75/0x250
[  324.759191][ T9857]  ksys_read+0x147/0x250
[  324.763483][ T9857]  ? vfs_write+0x940/0x940
[  324.767956][ T9857]  ? lockdep_hardirqs_on+0x98/0x150
[  324.773197][ T9857]  do_syscall_64+0x55/0xb0
[  324.777660][ T9857]  ? clear_bhb_loop+0x40/0x90
[  324.782377][ T9857]  ? clear_bhb_loop+0x40/0x90
[  324.787133][ T9857]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  324.793150][ T9857] RIP: 0033:0x7fe8d638e15c
[  324.797616][ T9857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  324.817272][ T9857] RSP: 002b:00007fe8d7279030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  324.825744][ T9857] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638e15c
[  324.833768][ T9857] RDX: 000000000000000f RSI: 00007fe8d72790a0 RDI: 0000000000000005
[  324.841787][ T9857] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  324.849813][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  324.857835][ T9857] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  324.865876][ T9857]  </TASK>
[  325.686283][ T9893] veth0_vlan: entered allmulticast mode
[  325.874120][ T9901] netlink: 'syz.3.1363': attribute type 3 has an invalid length.
[  325.892438][ T9895] veth0_vlan: left promiscuous mode
[  325.976408][ T9895] veth0_vlan: entered promiscuous mode
[  326.105664][ T9893] netlink: 'syz.0.1360': attribute type 7 has an invalid length.
[  326.113480][ T9893] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1360'.
[  326.413000][ T9912] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1369'.
[  326.437066][ T9914] pim6reg1: entered allmulticast mode
[  326.455770][ T9912] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  326.464326][ T9912] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  327.145826][ T9931] netlink: 'syz.3.1373': attribute type 29 has an invalid length.
[  327.174065][ T9931] netlink: 'syz.3.1373': attribute type 29 has an invalid length.
[  327.252427][ T9936] netlink: 'syz.1.1375': attribute type 21 has an invalid length.
[  327.276082][ T9936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1375'.
[  327.309909][ T9936] netlink: 'syz.1.1375': attribute type 4 has an invalid length.
[  327.363274][ T9936] netlink: 'syz.1.1375': attribute type 5 has an invalid length.
[  327.424113][ T9936] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1375'.
[  329.823113][ T9976] netlink: 'syz.1.1389': attribute type 5 has an invalid length.
[  330.500003][ T9983] netlink: 'syz.2.1393': attribute type 10 has an invalid length.
[  330.598019][ T9983] bond0: (slave wlan1): Releasing backup interface
[  331.264981][ T9982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  331.397343][ T9983] team0: Port device wlan1 added
[  331.427339][ T9983] syz.2.1393 (9983) used greatest stack depth: 18344 bytes left
[  334.677869][T10028] hsr0: entered promiscuous mode
[  334.683033][T10028] hsr0: entered allmulticast mode
[  334.691862][T10028] hsr_slave_0: entered allmulticast mode
[  334.701183][T10028] hsr_slave_1: entered allmulticast mode
[  334.708704][T10025] netlink: 'syz.3.1407': attribute type 39 has an invalid length.
[  337.069723][T10093] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1432'.
[  337.320506][T10093] netlink: 'syz.0.1432': attribute type 10 has an invalid length.
[  337.347706][T10093] .`: (slave dummy0): Releasing backup interface
[  337.355212][T10093] dummy0: left promiscuous mode
[  337.361007][T10093] dummy0: left allmulticast mode
[  337.376965][T10093] dummy0: entered promiscuous mode
[  337.383213][T10093] dummy0: entered allmulticast mode
[  337.389884][T10093] team0: Port device dummy0 added
[  337.404408][T10095] netlink: 'syz.0.1432': attribute type 10 has an invalid length.
[  337.555120][T10093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1432'.
[  337.666695][T10095] dummy0: left promiscuous mode
[  337.683403][T10095] dummy0: left allmulticast mode
[  337.855187][T10095] team0: Port device dummy0 removed
[  337.919912][T10095] dummy0: entered promiscuous mode
[  337.928064][T10095] dummy0: entered allmulticast mode
[  337.933961][T10095] .`: (slave dummy0): Enslaving as an active interface with an up link
[  337.943978][T10093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1432'.
[  338.108127][T10105] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1437'.
[  338.577590][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1440'.
[  340.259061][T10137] syzkaller0: entered promiscuous mode
[  340.275396][T10137] syzkaller0: entered allmulticast mode
[  342.216492][T10150] netlink: 'syz.2.1451': attribute type 21 has an invalid length.
[  342.224551][T10150] netlink: 'syz.2.1451': attribute type 4 has an invalid length.
[  342.240660][T10154] IPv6: NLM_F_CREATE should be specified when creating new route
[  342.254114][T10154] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1451'.
[  344.037163][T10192] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1464'.
[  344.867184][T10207] IPv6: Can't replace route, no match found
[  350.480834][T10298] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1499'.
[  352.006512][T10291] syzkaller0: entered promiscuous mode
[  352.012857][T10291] syzkaller0: entered allmulticast mode
[  354.667392][T10331] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1508'.
[  354.893172][T10337] IPv6: Can't replace route, no match found
[  355.611001][T10361] netlink: 'syz.2.1519': attribute type 15 has an invalid length.
[  355.622811][T10361] netlink: 'syz.2.1519': attribute type 7 has an invalid length.
[  356.446621][T10381] IPv6: Can't replace route, no match found
[  359.641504][T10460] netlink: 'syz.1.1553': attribute type 2 has an invalid length.
[  359.660911][T10460] netlink: 'syz.1.1553': attribute type 1 has an invalid length.
[  359.678575][T10460] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1553'.
[  359.729645][T10460] netlink: 'syz.1.1553': attribute type 28 has an invalid length.
[  359.763782][T10460] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1553'.
[  359.826424][T10465] netlink: 'syz.2.1555': attribute type 39 has an invalid length.
[  361.545053][T10498] netlink: 'syz.3.1567': attribute type 2 has an invalid length.
[  361.553325][T10498] netlink: 'syz.3.1567': attribute type 1 has an invalid length.
[  361.563446][T10498] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1567'.
[  361.583297][T10498] netlink: 'syz.3.1567': attribute type 28 has an invalid length.
[  361.592602][T10498] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1567'.
[  363.644899][T10544] netlink: 'syz.0.1581': attribute type 2 has an invalid length.
[  363.665938][T10544] netlink: 'syz.0.1581': attribute type 1 has an invalid length.
[  363.688039][T10544] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1581'.
[  363.757254][T10544] netlink: 'syz.0.1581': attribute type 28 has an invalid length.
[  363.769075][T10544] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1581'.
[  363.856772][T10548] netlink: 'syz.0.1584': attribute type 16 has an invalid length.
[  363.865000][T10548] netlink: 'syz.0.1584': attribute type 3 has an invalid length.
[  363.873510][T10548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1584'.
[  367.637501][T10587] FAULT_INJECTION: forcing a failure.
[  367.637501][T10587] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.677786][T10587] CPU: 1 PID: 10587 Comm: syz.1.1597 Not tainted syzkaller #0
[  367.685374][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  367.695464][T10587] Call Trace:
[  367.698781][T10587]  <TASK>
[  367.701751][T10587]  dump_stack_lvl+0x16c/0x230
[  367.706479][T10587]  ? show_regs_print_info+0x20/0x20
[  367.711719][T10587]  ? load_image+0x3b0/0x3b0
[  367.716256][T10587]  ? __lock_acquire+0x7c80/0x7c80
[  367.721327][T10587]  ? __virt_addr_valid+0x18c/0x540
[  367.726491][T10587]  should_fail_ex+0x39d/0x4d0
[  367.731219][T10587]  _copy_from_user+0x2f/0xe0
[  367.735835][T10587]  bpf_test_init+0xf9/0x150
[  367.740363][T10587]  bpf_prog_test_run_xdp+0x382/0xfa0
[  367.745681][T10587]  ? dev_put+0x80/0x80
[  367.749778][T10587]  ? dev_put+0x80/0x80
[  367.753953][T10587]  bpf_prog_test_run+0x321/0x390
[  367.758911][T10587]  __sys_bpf+0x440/0x800
[  367.763170][T10587]  ? bpf_link_show_fdinfo+0x350/0x350
[  367.768564][T10587]  ? lock_chain_count+0x20/0x20
[  367.773433][T10587]  __x64_sys_bpf+0x7c/0x90
[  367.777861][T10587]  do_syscall_64+0x55/0xb0
[  367.782289][T10587]  ? clear_bhb_loop+0x40/0x90
[  367.786985][T10587]  ? clear_bhb_loop+0x40/0x90
[  367.791677][T10587]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  367.797579][T10587] RIP: 0033:0x7f8653f8f749
[  367.802010][T10587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.821717][T10587] RSP: 002b:00007f8654e4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.830151][T10587] RAX: ffffffffffffffda RBX: 00007f86541e5fa0 RCX: 00007f8653f8f749
[  367.838134][T10587] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  367.846116][T10587] RBP: 00007f8654e4a090 R08: 0000000000000000 R09: 0000000000000000
[  367.854100][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.862086][T10587] R13: 00007f86541e6038 R14: 00007f86541e5fa0 R15: 00007ffc4028a328
[  367.870086][T10587]  </TASK>
[  369.036231][T10609] netlink: 'syz.2.1602': attribute type 10 has an invalid length.
[  369.053998][T10609] team0: Device ipvlan1 failed to register rx_handler
[  369.351699][T10618] netlink: 'syz.1.1605': attribute type 10 has an invalid length.
[  369.371618][T10618] dummy0: left promiscuous mode
[  369.378413][T10618] dummy0: left allmulticast mode
[  369.458428][T10618] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  369.563375][T10625] FAULT_INJECTION: forcing a failure.
[  369.563375][T10625] name failslab, interval 1, probability 0, space 0, times 0
[  369.580589][T10625] CPU: 1 PID: 10625 Comm: syz.2.1609 Not tainted syzkaller #0
[  369.588148][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  369.598253][T10625] Call Trace:
[  369.601569][T10625]  <TASK>
[  369.604539][T10625]  dump_stack_lvl+0x16c/0x230
[  369.609277][T10625]  ? show_regs_print_info+0x20/0x20
[  369.614534][T10625]  ? load_image+0x3b0/0x3b0
[  369.619105][T10625]  ? __might_sleep+0xe0/0xe0
[  369.623749][T10625]  ? __lock_acquire+0x7c80/0x7c80
[  369.628840][T10625]  should_fail_ex+0x39d/0x4d0
[  369.633559][T10625]  should_failslab+0x9/0x20
[  369.638093][T10625]  slab_pre_alloc_hook+0x59/0x310
[  369.643234][T10625]  ? kvmalloc_node+0x70/0x180
[  369.647942][T10625]  ? kvmalloc_node+0x70/0x180
[  369.652647][T10625]  __kmem_cache_alloc_node+0x53/0x260
[  369.658058][T10625]  ? kvmalloc_node+0x70/0x180
[  369.662853][T10625]  __kmalloc_node+0xa4/0x230
[  369.667492][T10625]  kvmalloc_node+0x70/0x180
[  369.672023][T10625]  bpf_test_run_xdp_live+0x180/0x1a20
[  369.677432][T10625]  ? 0xffffffffa0004500
[  369.681656][T10625]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  369.687607][T10625]  ? __sys_bpf+0x440/0x800
[  369.692049][T10625]  ? __x64_sys_bpf+0x7c/0x90
[  369.696658][T10625]  ? do_syscall_64+0x55/0xb0
[  369.701283][T10625]  ? xdp_convert_md_to_buff+0x330/0x330
[  369.706885][T10625]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  369.713156][T10625]  ? _copy_from_user+0xa5/0xe0
[  369.717943][T10625]  ? bpf_test_init+0x134/0x150
[  369.722789][T10625]  ? xdp_convert_md_to_buff+0x5b/0x330
[  369.728282][T10625]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  369.733691][T10625]  ? dev_put+0x80/0x80
[  369.737806][T10625]  ? dev_put+0x80/0x80
[  369.741899][T10625]  bpf_prog_test_run+0x321/0x390
[  369.746860][T10625]  __sys_bpf+0x440/0x800
[  369.751134][T10625]  ? bpf_link_show_fdinfo+0x350/0x350
[  369.756543][T10625]  ? lock_chain_count+0x20/0x20
[  369.761425][T10625]  __x64_sys_bpf+0x7c/0x90
[  369.765869][T10625]  do_syscall_64+0x55/0xb0
[  369.770311][T10625]  ? clear_bhb_loop+0x40/0x90
[  369.775015][T10625]  ? clear_bhb_loop+0x40/0x90
[  369.779809][T10625]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.785726][T10625] RIP: 0033:0x7fe8d638f749
[  369.790169][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.809813][T10625] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  369.818257][T10625] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  369.826252][T10625] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  369.834245][T10625] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  369.842244][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.850247][T10625] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  369.858346][T10625]  </TASK>
[  371.774653][T10668] FAULT_INJECTION: forcing a failure.
[  371.774653][T10668] name failslab, interval 1, probability 0, space 0, times 0
[  371.805345][T10668] CPU: 1 PID: 10668 Comm: syz.0.1621 Not tainted syzkaller #0
[  371.812892][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  371.822998][T10668] Call Trace:
[  371.826321][T10668]  <TASK>
[  371.829285][T10668]  dump_stack_lvl+0x16c/0x230
[  371.834020][T10668]  ? show_regs_print_info+0x20/0x20
[  371.839290][T10668]  ? load_image+0x3b0/0x3b0
[  371.843817][T10668]  ? __might_sleep+0xe0/0xe0
[  371.848422][T10668]  ? __lock_acquire+0x7c80/0x7c80
[  371.853465][T10668]  should_fail_ex+0x39d/0x4d0
[  371.858164][T10668]  should_failslab+0x9/0x20
[  371.862688][T10668]  slab_pre_alloc_hook+0x59/0x310
[  371.867737][T10668]  ? kvmalloc_node+0x70/0x180
[  371.872431][T10668]  ? kvmalloc_node+0x70/0x180
[  371.877119][T10668]  __kmem_cache_alloc_node+0x53/0x260
[  371.882516][T10668]  ? kvmalloc_node+0x70/0x180
[  371.887208][T10668]  __kmalloc_node+0xa4/0x230
[  371.891816][T10668]  kvmalloc_node+0x70/0x180
[  371.896331][T10668]  bpf_test_run_xdp_live+0x180/0x1a20
[  371.901731][T10668]  ? 0xffffffffa0004500
[  371.905894][T10668]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  371.911806][T10668]  ? __sys_bpf+0x440/0x800
[  371.916320][T10668]  ? __x64_sys_bpf+0x7c/0x90
[  371.920924][T10668]  ? do_syscall_64+0x55/0xb0
[  371.925549][T10668]  ? xdp_convert_md_to_buff+0x330/0x330
[  371.931483][T10668]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  371.937734][T10668]  ? _copy_from_user+0xa5/0xe0
[  371.942525][T10668]  ? bpf_test_init+0x134/0x150
[  371.947317][T10668]  ? xdp_convert_md_to_buff+0x5b/0x330
[  371.952789][T10668]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  371.958102][T10668]  ? dev_put+0x80/0x80
[  371.962200][T10668]  ? dev_put+0x80/0x80
[  371.966367][T10668]  bpf_prog_test_run+0x321/0x390
[  371.971326][T10668]  __sys_bpf+0x440/0x800
[  371.975673][T10668]  ? bpf_link_show_fdinfo+0x350/0x350
[  371.981071][T10668]  ? lock_chain_count+0x20/0x20
[  371.985950][T10668]  __x64_sys_bpf+0x7c/0x90
[  371.990377][T10668]  do_syscall_64+0x55/0xb0
[  371.994804][T10668]  ? clear_bhb_loop+0x40/0x90
[  371.999496][T10668]  ? clear_bhb_loop+0x40/0x90
[  372.004186][T10668]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  372.010174][T10668] RIP: 0033:0x7fdf6638f749
[  372.014599][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.034232][T10668] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  372.042658][T10668] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  372.050664][T10668] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  372.058693][T10668] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  372.066691][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.074676][T10668] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  372.082682][T10668]  </TASK>
[  372.356110][T10681] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  372.390363][T10681] batman_adv: batadv0: Adding interface: wlan0
[  372.416126][T10681] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.475688][T10681] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active
[  374.022612][T10711] FAULT_INJECTION: forcing a failure.
[  374.022612][T10711] name failslab, interval 1, probability 0, space 0, times 0
[  374.036180][T10711] CPU: 1 PID: 10711 Comm: syz.3.1633 Not tainted syzkaller #0
[  374.043707][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  374.053805][T10711] Call Trace:
[  374.057104][T10711]  <TASK>
[  374.060055][T10711]  dump_stack_lvl+0x16c/0x230
[  374.064771][T10711]  ? show_regs_print_info+0x20/0x20
[  374.070192][T10711]  ? load_image+0x3b0/0x3b0
[  374.074738][T10711]  ? __might_sleep+0xe0/0xe0
[  374.079365][T10711]  ? __lock_acquire+0x7c80/0x7c80
[  374.084413][T10711]  should_fail_ex+0x39d/0x4d0
[  374.089116][T10711]  should_failslab+0x9/0x20
[  374.093636][T10711]  slab_pre_alloc_hook+0x59/0x310
[  374.098738][T10711]  ? page_pool_create+0x71/0x5e0
[  374.103690][T10711]  __kmem_cache_alloc_node+0x53/0x260
[  374.109085][T10711]  ? page_pool_create+0x71/0x5e0
[  374.114032][T10711]  kmalloc_node_trace+0x26/0xe0
[  374.118900][T10711]  page_pool_create+0x71/0x5e0
[  374.123676][T10711]  bpf_test_run_xdp_live+0x1c1/0x1a20
[  374.129064][T10711]  ? 0xffffffffa0004500
[  374.133229][T10711]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  374.139137][T10711]  ? __sys_bpf+0x440/0x800
[  374.143561][T10711]  ? __x64_sys_bpf+0x7c/0x90
[  374.148177][T10711]  ? do_syscall_64+0x55/0xb0
[  374.152787][T10711]  ? xdp_convert_md_to_buff+0x330/0x330
[  374.158372][T10711]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  374.164625][T10711]  ? _copy_from_user+0xa5/0xe0
[  374.169402][T10711]  ? bpf_test_init+0x134/0x150
[  374.174176][T10711]  ? xdp_convert_md_to_buff+0x5b/0x330
[  374.179646][T10711]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  374.184950][T10711]  ? dev_put+0x80/0x80
[  374.189044][T10711]  ? dev_put+0x80/0x80
[  374.193121][T10711]  bpf_prog_test_run+0x321/0x390
[  374.198088][T10711]  __sys_bpf+0x440/0x800
[  374.202428][T10711]  ? bpf_link_show_fdinfo+0x350/0x350
[  374.208167][T10711]  ? lock_chain_count+0x20/0x20
[  374.213042][T10711]  __x64_sys_bpf+0x7c/0x90
[  374.217465][T10711]  do_syscall_64+0x55/0xb0
[  374.222079][T10711]  ? clear_bhb_loop+0x40/0x90
[  374.226762][T10711]  ? clear_bhb_loop+0x40/0x90
[  374.231446][T10711]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  374.237350][T10711] RIP: 0033:0x7f550998f749
[  374.241776][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.261409][T10711] RSP: 002b:00007f550a74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  374.269864][T10711] RAX: ffffffffffffffda RBX: 00007f5509be5fa0 RCX: 00007f550998f749
[  374.277889][T10711] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a
[  374.285898][T10711] RBP: 00007f550a74e090 R08: 0000000000000000 R09: 0000000000000000
[  374.293887][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  374.301873][T10711] R13: 00007f5509be6038 R14: 00007f5509be5fa0 R15: 00007fffe83b67d8
[  374.309870][T10711]  </TASK>
[  376.336326][T10753] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1643'.
[  377.462711][T10760] netlink: 'syz.0.1646': attribute type 1 has an invalid length.
[  377.573819][T10760] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1646'.
[  377.959195][T10770] netlink: 'syz.1.1651': attribute type 10 has an invalid length.
[  377.977243][T10770] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1651'.
[  377.992017][T10770] bond0: entered promiscuous mode
[  377.997509][T10770] bond_slave_1: entered promiscuous mode
[  378.003653][T10770] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  378.012850][T10770] dummy0: entered promiscuous mode
[  379.040998][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  379.047566][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  379.082533][T10787] netlink: 'syz.2.1654': attribute type 29 has an invalid length.
[  380.943905][T10787] netlink: 'syz.2.1654': attribute type 29 has an invalid length.
[  382.321750][T10822] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  382.366998][T10822] netlink: 'syz.1.1663': attribute type 29 has an invalid length.
[  382.637248][T10829] netlink: 'syz.3.1667': attribute type 10 has an invalid length.
[  382.730478][T10832] netlink: 'syz.3.1667': attribute type 3 has an invalid length.
[  382.803063][T10829] 8021q: adding VLAN 0 to HW filter on device team0
[  382.807159][T10832] netlink: 'syz.3.1667': attribute type 5 has an invalid length.
[  382.849557][T10829] bond0: (slave team0): Enslaving as an active interface with an up link
[  382.884553][T10834] syzkaller0: left promiscuous mode
[  382.897118][T10834] syzkaller0: left allmulticast mode
[  388.644430][T10894] delete_channel: no stack
[  389.187817][T10912] netlink: 'syz.1.1692': attribute type 10 has an invalid length.
[  389.247721][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1692'.
[  389.295987][T10912] netlink: 'syz.1.1692': attribute type 10 has an invalid length.
[  389.318760][T10912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1692'.
[  390.333158][T10938] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1700'.
[  390.379643][T10938] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1700'.
[  390.423703][T10941] netlink: 'syz.0.1700': attribute type 29 has an invalid length.
[  390.462092][T10941] netlink: 'syz.0.1700': attribute type 29 has an invalid length.
[  391.530776][T10979] syzkaller0: entered promiscuous mode
[  391.537140][T10979] syzkaller0: entered allmulticast mode
[  391.752355][T10983] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1716'.
[  391.784543][T10983] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1716'.
[  391.834558][T10991] netlink: 'syz.2.1716': attribute type 29 has an invalid length.
[  391.860138][T10991] netlink: 'syz.2.1716': attribute type 29 has an invalid length.
[  392.017279][T10995] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1719'.
[  393.788844][T11027] veth1_macvtap: left promiscuous mode
[  393.797819][T11027] macsec0: entered promiscuous mode
[  393.804673][T11027] macsec0: entered allmulticast mode
[  393.833998][T11027] veth1_macvtap: entered promiscuous mode
[  393.848211][T11027] veth1_macvtap: entered allmulticast mode
[  396.350661][T11072] netlink: 'syz.2.1746': attribute type 21 has an invalid length.
[  396.374701][T11072] netlink: 'syz.2.1746': attribute type 1 has an invalid length.
[  398.869625][T11128] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.1764'.
[  398.879444][T11128] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  400.402027][T11170] netlink: 'syz.2.1777': attribute type 19 has an invalid length.
[  407.049492][T11249] netlink: 'syz.3.1803': attribute type 39 has an invalid length.
[  409.052191][T11298] netlink: 'syz.0.1818': attribute type 10 has an invalid length.
[  409.361191][T11305] netlink: 'syz.2.1820': attribute type 39 has an invalid length.
[  409.751062][T11314] netlink: 'syz.0.1825': attribute type 1 has an invalid length.
[  409.793938][T11314] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1825'.
[  409.817739][T11314] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1825'.
[  409.867667][T11314] netlink: 205108 bytes leftover after parsing attributes in process `syz.0.1825'.
[  410.112021][T11326] netlink: 'syz.1.1829': attribute type 4 has an invalid length.
[  410.120497][T11326] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1829'.
[  410.633236][T11354] netlink: 'syz.1.1835': attribute type 39 has an invalid length.
[  411.450702][T11364] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1840'.
[  420.119482][T11463] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.1872'.
[  420.489065][T11471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1875'.
[  421.161793][T11485] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1878'.
[  421.273820][T11485] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.1878'.
[  421.351928][T11485] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1878'.
[  421.596113][T11490] FAULT_INJECTION: forcing a failure.
[  421.596113][T11490] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  421.682103][T11490] CPU: 0 PID: 11490 Comm: syz.2.1882 Not tainted syzkaller #0
[  421.689652][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  421.699747][T11490] Call Trace:
[  421.703060][T11490]  <TASK>
[  421.706019][T11490]  dump_stack_lvl+0x16c/0x230
[  421.710744][T11490]  ? show_regs_print_info+0x20/0x20
[  421.715987][T11490]  ? load_image+0x3b0/0x3b0
[  421.720530][T11490]  ? __lock_acquire+0x7c80/0x7c80
[  421.725612][T11490]  should_fail_ex+0x39d/0x4d0
[  421.730338][T11490]  prepare_alloc_pages+0x1e2/0x5f0
[  421.735508][T11490]  __alloc_pages+0x127/0x460
[  421.740146][T11490]  ? zone_statistics+0x170/0x170
[  421.745136][T11490]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  421.751080][T11490]  __folio_alloc+0x10/0x20
[  421.755624][T11490]  vma_alloc_folio+0x47a/0x8f0
[  421.760438][T11490]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  421.766293][T11490]  shmem_alloc_folio+0x179/0x230
[  421.771280][T11490]  ? folio_put+0xd0/0xd0
[  421.775584][T11490]  ? __vm_enough_memory+0x11b/0x370
[  421.780826][T11490]  ? shmem_inode_acct_block+0x35e/0x460
[  421.786399][T11490]  shmem_alloc_and_acct_folio+0x189/0x630
[  421.792171][T11490]  ? put_swap_device+0x230/0x230
[  421.797135][T11490]  ? filemap_get_entry+0xb1/0x3c0
[  421.802164][T11490]  ? filemap_get_entry+0xb1/0x3c0
[  421.807197][T11490]  ? filemap_get_entry+0x35c/0x3c0
[  421.812322][T11490]  ? page_cache_prev_miss+0x360/0x360
[  421.817706][T11490]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  421.823445][T11490]  shmem_get_folio_gfp+0xcde/0x2ac0
[  421.828847][T11490]  ? lockdep_hardirqs_on+0x98/0x150
[  421.834068][T11490]  shmem_write_begin+0xf2/0x420
[  421.839027][T11490]  generic_perform_write+0x2fb/0x5b0
[  421.844339][T11490]  ? generic_file_direct_write+0x3e0/0x3e0
[  421.850165][T11490]  ? file_update_time+0x1a2/0x1b0
[  421.855206][T11490]  shmem_file_write_iter+0xfb/0x120
[  421.860443][T11490]  vfs_write+0x43b/0x940
[  421.864707][T11490]  ? file_end_write+0x250/0x250
[  421.869663][T11490]  ? __fget_files+0x44a/0x4d0
[  421.874358][T11490]  ? __fdget_pos+0x2a3/0x330
[  421.878959][T11490]  ? ksys_write+0x75/0x250
[  421.883393][T11490]  ksys_write+0x147/0x250
[  421.887998][T11490]  ? __ia32_sys_read+0x90/0x90
[  421.892783][T11490]  ? syscall_enter_from_user_mode+0x2e/0x80
[  421.898689][T11490]  do_syscall_64+0x55/0xb0
[  421.903123][T11490]  ? clear_bhb_loop+0x40/0x90
[  421.907813][T11490]  ? clear_bhb_loop+0x40/0x90
[  421.912505][T11490]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  421.918418][T11490] RIP: 0033:0x7fe8d638f749
[  421.922845][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  421.942463][T11490] RSP: 002b:00007fe8d7279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  421.950979][T11490] RAX: ffffffffffffffda RBX: 00007fe8d65e5fa0 RCX: 00007fe8d638f749
[  421.958960][T11490] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 000000000000000b
[  421.966941][T11490] RBP: 00007fe8d7279090 R08: 0000000000000000 R09: 0000000000000000
[  421.975006][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  421.983013][T11490] R13: 00007fe8d65e6038 R14: 00007fe8d65e5fa0 R15: 00007ffecbb49f68
[  421.991009][T11490]  </TASK>
[  422.480254][T11510] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1888'.
[  423.353315][T11528] FAULT_INJECTION: forcing a failure.
[  423.353315][T11528] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  423.367772][T11528] CPU: 0 PID: 11528 Comm: syz.0.1894 Not tainted syzkaller #0
[  423.375289][T11528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  423.385386][T11528] Call Trace:
[  423.388697][T11528]  <TASK>
[  423.391646][T11528]  dump_stack_lvl+0x16c/0x230
[  423.396354][T11528]  ? shmem_get_folio_gfp+0x138c/0x2ac0
[  423.401834][T11528]  ? show_regs_print_info+0x20/0x20
[  423.407070][T11528]  ? load_image+0x3b0/0x3b0
[  423.411588][T11528]  ? shmem_get_folio_gfp+0x138c/0x2ac0
[  423.417060][T11528]  ? __lock_acquire+0x7c80/0x7c80
[  423.422106][T11528]  ? __rwlock_init+0x150/0x150
[  423.426886][T11528]  should_fail_ex+0x39d/0x4d0
[  423.431588][T11528]  copy_page_from_iter_atomic+0x2a2/0x1530
[  423.437510][T11528]  ? shmem_get_folio_gfp+0x2705/0x2ac0
[  423.442995][T11528]  ? iov_iter_zero+0x1120/0x1120
[  423.447956][T11528]  ? shmem_write_begin+0x1cf/0x420
[  423.453085][T11528]  generic_perform_write+0x350/0x5b0
[  423.458581][T11528]  ? generic_file_direct_write+0x3e0/0x3e0
[  423.464411][T11528]  ? file_update_time+0x1a2/0x1b0
[  423.469460][T11528]  shmem_file_write_iter+0xfb/0x120
[  423.474674][T11528]  vfs_write+0x43b/0x940
[  423.478937][T11528]  ? file_end_write+0x250/0x250
[  423.483816][T11528]  ? __fget_files+0x44a/0x4d0
[  423.488609][T11528]  ? __fdget_pos+0x2a3/0x330
[  423.493211][T11528]  ? ksys_write+0x75/0x250
[  423.497643][T11528]  ksys_write+0x147/0x250
[  423.501990][T11528]  ? __ia32_sys_read+0x90/0x90
[  423.506770][T11528]  ? syscall_enter_from_user_mode+0x2e/0x80
[  423.512674][T11528]  do_syscall_64+0x55/0xb0
[  423.517193][T11528]  ? clear_bhb_loop+0x40/0x90
[  423.521887][T11528]  ? clear_bhb_loop+0x40/0x90
[  423.526578][T11528]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  423.532490][T11528] RIP: 0033:0x7fdf6638f749
[  423.537006][T11528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  423.556639][T11528] RSP: 002b:00007fdf67239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  423.565069][T11528] RAX: ffffffffffffffda RBX: 00007fdf665e5fa0 RCX: 00007fdf6638f749
[  423.573050][T11528] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 000000000000000b
[  423.581030][T11528] RBP: 00007fdf67239090 R08: 0000000000000000 R09: 0000000000000000
[  423.589009][T11528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  423.596995][T11528] R13: 00007fdf665e6038 R14: 00007fdf665e5fa0 R15: 00007ffe8d3b3418
[  423.604994][T11528]  </TASK>
[  424.916076][T11553] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1901'.
[  428.782721][T11609] netlink: 'syz.3.1919': attribute type 8 has an invalid length.
[  428.795055][T11609] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1919'.
[  437.422564][T11693] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1944'.
[  437.484937][T11697] netlink: 'syz.1.1947': attribute type 10 has an invalid length.
[  438.444727][T11718] netlink: 'syz.2.1955': attribute type 21 has an invalid length.
[  438.466989][T11718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1955'.
[  438.844727][T11718] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1955'.
[  438.873251][T11718] netlink: zone id is out of range
[  438.888841][T11718] netlink: zone id is out of range
[  438.899495][T11718] netlink: zone id is out of range
[  439.325109][T11734] netlink: 'syz.2.1960': attribute type 5 has an invalid length.
[  440.682034][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  440.688712][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  441.202053][T11775] netlink: 'syz.2.1975': attribute type 16 has an invalid length.
[  441.211135][T11775] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1975'.
[  442.620465][T11806] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.1986'.
[  442.633217][T11806] netlink: zone id is out of range
[  442.638737][T11806] netlink: zone id is out of range
[  442.643995][T11806] netlink: zone id is out of range
[  442.649881][T11806] netlink: zone id is out of range
[  442.671338][T11806] netlink: zone id is out of range
[  442.687194][T11806] netlink: zone id is out of range
[  442.700340][T11806] netlink: zone id is out of range
[  443.252475][T11827] netlink: 'syz.2.1994': attribute type 21 has an invalid length.
[  445.525699][T11851] syzkaller0: left promiscuous mode
[  445.530998][T11851] syzkaller0: left allmulticast mode
[  445.887135][T11864] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2006'.
[  447.135219][T11910] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2021'.
[  447.756507][T11933] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2028'.
[  447.798709][T11933] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  447.960168][T11942] netlink: 'syz.2.2031': attribute type 2 has an invalid length.
[  449.712861][T11995] syzkaller0: entered promiscuous mode
[  449.740319][T11995] syzkaller0: entered allmulticast mode
[  451.712827][T12026] netlink: 'syz.0.2064': attribute type 10 has an invalid length.
[  451.906721][T12029] netlink: 'syz.3.2062': attribute type 21 has an invalid length.
[  451.925278][T12029] netlink: 'syz.3.2062': attribute type 15 has an invalid length.
[  454.012943][T12045] netlink: 194812 bytes leftover after parsing attributes in process `syz.3.2070'.
[  460.101318][T12112] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2098'.
[  460.362157][T12123] netlink: 'syz.1.2093': attribute type 10 has an invalid length.
[  460.401419][T12123] bond0: (slave dummy0): Releasing backup interface
[  460.416365][T12123] dummy0: left promiscuous mode
[  460.432981][T12123] dummy0: entered promiscuous mode
[  460.449550][T12123] team0: Port device dummy0 added
[  460.478104][T12127] netlink: 'syz.1.2093': attribute type 10 has an invalid length.
[  460.526423][T12127] dummy0: left promiscuous mode
[  460.600903][T12127] team0: Port device dummy0 removed
[  461.621892][T12159] netlink: 'syz.2.2105': attribute type 10 has an invalid length.
[  461.719498][T12158] netlink: 'syz.1.2108': attribute type 11 has an invalid length.
[  461.729902][T12158] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2108'.
[  461.743560][T12157] netlink: 'syz.3.2107': attribute type 10 has an invalid length.
[  461.805951][T12157] bridge0: port 3(dummy0) entered disabled state
[  461.826880][T12157] dummy0: left allmulticast mode
[  461.834707][T12157] dummy0: left promiscuous mode
[  461.842754][T12157] bridge0: port 3(dummy0) entered disabled state
[  461.859880][T12157] team0: Port device dummy0 added
[  461.891815][T12158] veth0_vlan: left promiscuous mode
[  462.032907][T12158] veth0_vlan: entered promiscuous mode
[  462.149366][T12163] netlink: 'syz.3.2107': attribute type 10 has an invalid length.
[  462.217856][T12163] team0: Port device dummy0 removed
[  465.845595][T12195] netlink: 'syz.0.2119': attribute type 21 has an invalid length.
[  465.867377][T12196] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2119'.
[  466.093707][T12204] netlink: 'syz.0.2123': attribute type 9 has an invalid length.
[  466.160147][T12204] netlink: 379 bytes leftover after parsing attributes in process `syz.0.2123'.
[  466.488792][T12209] netlink: 'syz.3.2125': attribute type 6 has an invalid length.
[  466.527724][T12209] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2125'.
[  466.586038][T12211] netlink: 'syz.3.2125': attribute type 3 has an invalid length.
[  466.603166][T12211] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2125'.
[  466.638420][T12211] net_ratelimit: 2 callbacks suppressed
[  466.638440][T12211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  468.263105][T12256] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2141'.
[  468.399672][T12256] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2141'.
[  468.429481][T12255] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2141'.
[  468.444104][T12257] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2141'.
[  468.930394][T12267] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.2145'.
[  468.948803][T12268] netlink: 'syz.3.2144': attribute type 1 has an invalid length.
[  468.975628][T12268] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2144'.
[  469.283779][T12279] netlink: 'syz.2.2149': attribute type 4 has an invalid length.
[  469.964187][T12296] netlink: 'syz.2.2155': attribute type 39 has an invalid length.
[  470.703539][T12315] netlink: 'syz.3.2161': attribute type 1 has an invalid length.
[  471.711259][T12335] __nla_validate_parse: 1 callbacks suppressed
[  471.711281][T12335] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2167'.
[  474.329981][T12398] netlink: 'syz.1.2188': attribute type 1 has an invalid length.
[  474.378555][T12398] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2188'.
[  476.136439][T12436] netlink: 'syz.1.2198': attribute type 39 has an invalid length.
[  479.443211][T12494] netlink: 'syz.3.2214': attribute type 39 has an invalid length.
[  479.931600][T12491] delete_channel: no stack
[  483.617421][T12583] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2250'.
[  484.009431][T12591] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2254'.
[  484.032929][T12594] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2253'.
[  484.059270][T12593] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2253'.
[  484.077125][T12594] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  484.085441][T12594] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  484.098797][T12593] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  484.150769][T12593] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  484.702569][T12602] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2256'.
[  484.735095][T12602] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.2256'.
[  484.811695][T12618] netlink: 'syz.0.2261': attribute type 10 has an invalid length.
[  484.872282][T12618] mac80211_hwsim hwsim8 O3ãc¤±: entered promiscuous mode
[  484.887457][T12618] mac80211_hwsim hwsim8 O3ãc¤±: entered allmulticast mode
[  484.900962][T12618] team0: Port device O3ãc¤± added
[  484.962754][T12617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  563.286042][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.292413][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  563.329450][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  563.336629][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  590.845419][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  590.852176][    C1] rcu: 	1-....: (1 GPs behind) idle=a78c/1/0x4000000000000000 softirq=38272/38273 fqs=5182
[  590.863200][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  590.869616][    C1] rcu: 	 number:  1044239          0            0
[  590.876047][    C1] rcu: 	cputime:    19634      32855           43   ==> 52500(ms)
[  590.883954][    C1] rcu: 	(t=10502 jiffies g=48905 q=289 ncpus=2)
[  590.890222][    C1] CPU: 1 PID: 12631 Comm: syz.3.2267 Not tainted syzkaller #0
[  590.897728][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  590.907812][    C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50
[  590.913762][    C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a 04 ef f6 48 89 df e8 22 d6 ef f6 e8 3d 7c 13 f7 fb bf 01 00 00 00 <e8> 62 f8 e2 f6 65 8b 05 53 41 8b 75 85 c0 74 02 5b c3 e8 70 25 88
[  590.933409][    C1] RSP: 0018:ffffc900001f0cb0 EFLAGS: 00000282
[  590.939518][    C1] RAX: 15c75d1d443edb00 RBX: ffff8880b8f29580 RCX: 15c75d1d443edb00
[  590.947569][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: 0000000000000001
[  590.955574][    C1] RBP: ffffc900001f0e10 R08: ffffffff90da85ff R09: 1ffffffff21b50bf
[  590.963572][    C1] R10: dffffc0000000000 R11: fffffbfff21b50c0 R12: ffff8880b8f29580
[  590.971571][    C1] R13: 1ffff110171e52b8 R14: ffff88802b4dec10 R15: ffffc900001f0d60
[  590.979574][    C1] FS:  00007f550a74e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  590.988534][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  590.995177][    C1] CR2: 00007ffe8d3b3578 CR3: 0000000030085000 CR4: 00000000003506e0
[  591.003270][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  591.011269][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600
[  591.019274][    C1] Call Trace:
[  591.022577][    C1]  <IRQ>
[  591.025449][    C1]  ? mrp_init_applicant+0x4e0/0x4e0
[  591.030688][    C1]  __run_timers+0x51e/0x7d0
[  591.035237][    C1]  ? detach_timer+0x2b0/0x2b0
[  591.039966][    C1]  run_timer_softirq+0x67/0xf0
[  591.044770][    C1]  handle_softirqs+0x280/0x820
[  591.049574][    C1]  ? __irq_exit_rcu+0xc7/0x190
[  591.054374][    C1]  ? do_softirq+0x180/0x180
[  591.058910][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  591.064147][    C1]  __irq_exit_rcu+0xc7/0x190
[  591.068766][    C1]  ? irq_exit_rcu+0x20/0x20
[  591.073304][    C1]  irq_exit_rcu+0x9/0x20
[  591.077597][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  591.083275][    C1]  </IRQ>
[  591.086317][    C1]  <TASK>
[  591.089278][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  591.095291][    C1] RIP: 0010:generic_exec_single+0x476/0x4f0
[  591.101223][    C1] Code: 75 11 e8 3d e6 0a 00 48 85 db 75 16 e8 33 e6 0a 00 eb 15 e8 2c e6 0a 00 e8 47 24 f4 08 48 85 db 74 ea e8 1d e6 0a 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 66 43 c7 44 2c
[  591.120867][    C1] RSP: 0018:ffffc90019bf7a00 EFLAGS: 00000246
[  591.126970][    C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  591.134970][    C1] RDX: ffffc9000d50c000 RSI: 000000000000308f RDI: 0000000000003090
[  591.142974][    C1] RBP: ffffc90019bf7ad0 R08: ffffffff90da85ff R09: 1ffffffff21b50bf
[  591.151065][    C1] R10: dffffc0000000000 R11: fffffbfff21b50c0 R12: 1ffff9200337ef44
[  591.159152][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200337ef65
[  591.167176][    C1]  ? event_function+0x300/0x300
[  591.172063][    C1]  ? smp_call_function_single+0x580/0x580
[  591.177841][    C1]  smp_call_function_single+0x352/0x580
[  591.183424][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  591.188657][    C1]  ? event_function+0x300/0x300
[  591.193539][    C1]  ? flush_smp_call_function_queue+0x240/0x240
[  591.199736][    C1]  ? event_function+0x300/0x300
[  591.204640][    C1]  perf_install_in_context+0x591/0x8e0
[  591.210149][    C1]  ? exclusive_event_installable+0x2c0/0x2c0
[  591.216163][    C1]  ? add_event_to_ctx+0x1180/0x1180
[  591.221417][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  591.227638][    C1]  ? anon_inode_getfile+0x109/0x1a0
[  591.232899][    C1]  ? perf_event__header_size+0x165/0x220
[  591.238576][    C1]  __se_sys_perf_event_open+0x17fa/0x1c20
[  591.244352][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  591.250047][    C1]  ? syscall_enter_from_user_mode+0x2e/0x80
[  591.255997][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  591.261675][    C1]  do_syscall_64+0x55/0xb0
[  591.266127][    C1]  ? clear_bhb_loop+0x40/0x90
[  591.270837][    C1]  ? clear_bhb_loop+0x40/0x90
[  591.275637][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  591.281565][    C1] RIP: 0033:0x7f550998f749
[  591.286032][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  591.305694][    C1] RSP: 002b:00007f550a74e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  591.314162][    C1] RAX: ffffffffffffffda RBX: 00007f5509be5fa0 RCX: 00007f550998f749
[  591.322157][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  591.330149][    C1] RBP: 00007f5509a13f91 R08: 0000000000000002 R09: 0000000000000000
[  591.338216][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  591.346200][    C1] R13: 00007f5509be6038 R14: 00007f5509be5fa0 R15: 00007fffe83b67d8
[  591.354206][    C1]  </TASK>
[  592.218416][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  592.236336][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  592.244909][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  592.254068][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  592.264319][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  592.273908][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  592.578674][T12648] chnl_net:caif_netlink_parms(): no params data found