last executing test programs:

3.083882254s ago: executing program 0 (id=3631):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x569800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441)
socket$kcm(0x2, 0x5, 0x84)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004c000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.942103666s ago: executing program 0 (id=3632):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x800, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000900)="6e5c52dc4d175625fc91663ab5538c79329d927ed633d68811b4648250f174db2a6386f1a8d0cff64329dade4466b4676d5cbdb5f9af471b0e512c3098b48c44c8530d874e7971e143675f930ad3b57287fced25ae086f636574393e31ada5894c4e5992ab1d408c932f23ff19f4f57f408eaf23147aed63db2be7d6569dc4a9d1220022035e0eb747687caf5e9ba4f05e2ac30c8049ea2ec138706d3bcbf7880b613968136814ab6193d006e531620456e6aa7923d82af35a402cd583e99e6645891de6f56384dae0")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000000000000000000000b644cbd6ec6a8fc5a785f98294e0247be87062cd4304558e182c7a44386b23023724ca7103cf4e6bbbb7a855887db60149b80228b42e6c65d6c3c7acb1f2d94a2f2dd3be4edf5b81379083db71ee09438b1bd4b4f0e2c574b2b656c4ce1735"], 0x50)
socket$kcm(0x29, 0xc, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x51b80, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000740), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb645}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

2.655280349s ago: executing program 3 (id=3637):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x569800, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x4, 0x12}, {0x10000002, 0x0, 0x13}], 0x10, 0x4000001}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441)
r3 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x83, &(0x7f0000000000)=r6, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r8)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.5867577s ago: executing program 0 (id=3638):
r0 = perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x4}, 0x2, 0x7, 0x4000000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e00500000087dbe9abc8d24470e7", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000fdff00"/28], 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1e00000036000000c69700000400000020040000", @ANYRES32, @ANYBLOB="ff7f00000000000100"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0100000001000000050000000900"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x10005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0x1b, 0x0, &(0x7f0000000240)="f57b0bb7994307a7ac95a7c7d13d76a26029a006c0f6c24c731016", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="b0", 0x0, 0x0, 0x4}, 0x50)

2.57036338s ago: executing program 2 (id=3639):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc03fffe017f03e3f7000000006ee2ffca1b1f0000050004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000)

2.387445702s ago: executing program 2 (id=3640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x569800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441)
socket$kcm(0x2, 0x5, 0x84)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.360011993s ago: executing program 3 (id=3641):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42fbd5dcab7bee29, @perf_bp={0x0, 0xd}, 0x106c48, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x40000000)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000760007538e486dd630ace2220052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4)

2.200333695s ago: executing program 2 (id=3642):
r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56330300000000000000d6e747033a0093b837dc6cc01e32efaec80000ec00123d000140060404000404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00", 0x89}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x43, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f0000000280)=ANY=[@ANYBLOB="000026d4f47f00000000960000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0)
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xc, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x9}, @union={0xf, 0x3, 0x0, 0x5, 0x0, 0x12, [{0xe, 0x2, 0x7}, {0x2, 0x4, 0x9}, {0x8, 0x0, 0xfffffeff}]}]}, {0x0, [0x61, 0x61, 0x30, 0x2e, 0x30, 0x1e, 0x0, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000340)=""/164, 0x7c, 0xa4, 0x0, 0x6, 0x10000, @value=r6}, 0x28)
close(r0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x14, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080))
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="180000007f000000000000002d0b000004000000000000001860000009000000000000004a0000009500000000000000a101b238fca01b931d6f30ddffcf83dda306be9b5a3b21c0b6480a0677f5486f5d256b"], &(0x7f0000000480)='syzkaller\x00', 0xd, 0x83, &(0x7f0000000580)=""/131, 0x40f00, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x3, 0x4, 0xff}, 0x10, 0x10e64, r1, 0x7, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x1, 0xf, 0x7}, {0x5, 0x2, 0x3, 0xc}, {0x3, 0x1, 0x6, 0x1}, {0x3, 0x5, 0xc, 0x1}, {0x0, 0x1, 0x1, 0x9}, {0x3, 0x4, 0x0, 0x3}, {0x3, 0x1, 0x2, 0x8}], 0x10, 0x1}, 0x94)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000840)=r10, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

2.107424305s ago: executing program 3 (id=3643):
socketpair(0x9, 0x1, 0x5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, 0x0}, 0x20)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5, 0x1010000}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x141)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x86, 0x0, 0x0)

1.73542842s ago: executing program 1 (id=3644):
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0)
close(0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

1.7313143s ago: executing program 3 (id=3645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, 0x0, 0x8054)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000), 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0xf100}, 0x90)

1.563522402s ago: executing program 2 (id=3646):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x800, 0x0, 0x0, 0x0, &(0x7f0000000580), &(0x7f0000000900)="6e5c52dc4d175625fc91663ab5538c79329d927ed633d68811b4648250f174db2a6386f1a8d0cff64329dade4466b4676d5cbdb5f9af471b0e512c3098b48c44c8530d874e7971e143675f930ad3b57287fced25ae086f636574393e31ada5894c4e5992ab1d408c932f23ff19f4f57f408eaf23147aed63db2be7d6569dc4a9d1220022035e0eb747687caf5e9ba4f05e2ac30c8049ea2ec138706d3bcbf7880b613968136814ab6193d006e531620456e6aa7923d82af35a402cd583e99e6645891de6f56384dae02b64")
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="00000000010000000000000000000000000000000000000000000000b644cbd6ec6a8fc5a785f98294e0247be87062cd4304558e182c7a44386b23023724ca7103cf4e6bbbb7a855887db60149b80228b42e6c65d6c3c7acb1f2d94a2f2dd3be4edf5b81379083db71ee09438b1bd4b4f0e2c574b2b656c4ce1735"], 0x50)
socket$kcm(0x29, 0xc, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x51b80, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x807f, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000740), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000180)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb645}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

1.563243732s ago: executing program 3 (id=3647):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0)
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="01"], 0x9a)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x4, 0x0, 0xa}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="1400000010ff030000000000006394f9030000000000000000f897534d7263ec27a9882fd2991327afde8321b593e25711f7bc021b7a8709c6a69c9200904f48b4f5feb84599658e379cdd97a4588a1c9ec5357a3733e0669e0bc6b8ea66d9cecb419700000000000020000000000000000000", 0x73}], 0x1}, 0x20048050)
recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a50053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0x5, 0x0, &(0x7f0000000c40)="63eced8e86", 0x0, 0x6328, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x54)

1.563007402s ago: executing program 0 (id=3648):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x1e, 0x0, 0x1}, 0x28)
socketpair(0x18, 0x0, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10e, 0xa, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x541b, &(0x7f0000000080))
r6 = perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x80, 0x2, 0x8, 0x8, 0x68, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x3, @perf_config_ext={0x40a83506, 0xab6}, 0x8101, 0x3, 0x2, 0x5, 0x6, 0x8001, 0x3, 0x0, 0x7ff, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
sendmsg(r0, &(0x7f00000005c0)={&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="196749ae32f1948799b045faf9a10e", 0xf}], 0x1, &(0x7f0000000600)=[{0x58, 0x0, 0x7, "06f5b2d3f0bfd9517888e7e27a0aee5961792764a0849463c8e65ee9386b55a35ebe824f31899541e708ce02d15d48531b0d28159ae1c1f956e458a5ca5745d293b14af9"}, {0x78, 0x88, 0x6, "6522df5bf746524ae7244ff49cb7917d049897af2499afd6526a02db46eba59b2e8a2fe6a667ca72fb0ba41d1f2bf9d647a68fbbffeee00bd3853dd4319837f184e824b66176c7437ce510b62933713cdd3625840bbbec20320f21eee069484e2f98"}, {0x68, 0x119, 0x7, "d04975b747e0cb66b55ef352908ae93cda549d0ca28f798650598022b55a752c9f19079d67a0ad856b2c60c563af0018f9e74243e0a3e37fede7e37cc571038bac02555a48063146237a05e3d732cfeac115"}, {0xd8, 0x99, 0x98, "238c03d67b9af833ae713823f47f6e071c26f0f1ae01f89d847f89493604bd526b9213b349adb0ecbc57c79d18b7aac14821a5b6d88f938893e0fd9ca4f96a577f81ceeeb3ffd6ee4cc4cfe50335b069523b11b22accfd9648bbdd150080dc0ad902e5b679178fb12f44aff68b9631d798b0f9902e997a12ddb64ea9dbc488f066a1854d3828bb05b7fd87fe37f1dabbf16fab19b877febcd97b708dad8b4e6dd20cafeacc3d46f2d7355e3b7157be2b8276bad31cb22fa39db20a6b0440f08269a6"}, {0xc8, 0x119, 0xd, "e73a89959cf555b1c464385f64bf4585809582523af98bbd471578fd52ec4863ff762722cb4aed3b3f6797dcaf82d2640216fa7cacb646df1ce9fb93ffae702ed00f6de97c3272e6d54afecdde121abe625aaf72987ee79c3bf125beddc10a7841f3daa7613e101204cd2ebb3a538aa66755888a7fe57a447257e788aa0cab5f2e099524b7c6ca222571f0e27b897d63073e62c24bc40c5d7e0cbb19507a70de03eb6f1783b34c09476f2287e6767382ed"}], 0x2d8}, 0x4048045)
ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x5)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a400034003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.539716892s ago: executing program 1 (id=3649):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000280), 0x4)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="2705020016001400060000", 0xb}, {0x0}, {&(0x7f00000002c0)="832debe16dcb86c87d5aef884702cfd5abf09af52aa52b8cabb58fc01abb15f60d5a22c41db1026e79ce59a5435ee6dbbda06da24d6ba4b1c74be48cbecfac18a86c6beeaa9d76f459afacefd359e19a883a72f60ace4e37e2a42a3bb1370dba262a81516897d1c6d6b3535adf8dda2565eb11f4790cd2919d6c3e6f81debad0fcbe88b526c21f32fa437bf41e509dd290c7a0770786a6a11677efa2b21d2e84e1126303bec5af3365c0761d846d3573e20682f18e3d99691b1c6c6e9c3d37", 0xbf}], 0x3}, 0x8080)

1.203383246s ago: executing program 1 (id=3650):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x569800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441)
socket$kcm(0x2, 0x5, 0x84)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.203123476s ago: executing program 3 (id=3651):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712e", 0x4e}], 0x1}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

1.198137156s ago: executing program 0 (id=3652):
socket$kcm(0x10, 0x2, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r0, &(0x7f0000000240)="703c7024f72a7e21721fb7fa9f78f6c12d27085ee1ae95ea7ea7d949ff73334a3efa112845e0494dfa241148b0fd76131a3ff379389d5035a71a2ab7f96cbf938c209b88bf3306e8354cb541d96b85ec11581ef3b3d8c687d4ce5831afbc19a0df5b34afe2959efb032ad574d7c9d8ea390600a6c3b2e0c0fe9ee5f17040d07bf67a5d05632c53cf60ddc4fcd665b2165be3888a25aa8b43b1052eb97e3e82d3f1a78731391d8866363f35e6ddc6e728fc09386229f07670ea321aea72"}, 0x20)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14", 0x6c}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="db82384e", 0x4}], 0x1}, 0x8000)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x909c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x9, 0x7, 0x0, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x7}, {0x2, 0x4, 0xfffffffc}], 0x10, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r9, 0x88, 0x64, &(0x7f00000009c0)=r8, 0x4)
socketpair(0x1, 0x1, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

1.152808937s ago: executing program 1 (id=3653):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000001500)=""/158, 0x9e}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x4}, 0x2002)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xffffffc6)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r4 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8920, &(0x7f0000000080))
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, 0x0, 0xffffffc6)

1.021660528s ago: executing program 2 (id=3654):
r0 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04", 0x16}], 0x2}, 0xfeffffff)

844.41378ms ago: executing program 2 (id=3655):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000000)='./file\x00', 0x0)
mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x6, 0x3, 0x6, 0x0, 0x7, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x880, 0xd, 0x1, 0x7, 0x40, 0x7, 0xd34, 0x0, 0x7, 0x0, 0x6}, r1, 0x8, 0xffffffffffffffff, 0xb)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)=0x1)

843.37546ms ago: executing program 0 (id=3656):
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94)
socket$kcm(0x2, 0x5, 0x84) (async)
socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=0x1, 0xb, 0x0, 0xa2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
bpf$ITER_CREATE(0xb, 0x0, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0xffff0000, 0x9, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

196.213007ms ago: executing program 1 (id=3657):
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0)
close(0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x8081, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)

0s ago: executing program 1 (id=3658):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (fail_nth: 2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000001c0), 0x12)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)="4c4cd24293ab0115bd0592553bda151cbfc8288326eca8b810bba7e9ca7ee790e80c6e6ab4ded34880567c5fefc5831b1daa1cd34dc4bd6d34525ba18ee747c05462a888a985c55f247d0fafb981948534ef352a5ea32dfc65c350f4833a01487785aa2d365657ec7c4950f54d685d5179e3ba0412057d66755ed7cfb051b80f6675adcf78c8737a660e297c3a1eb5e276477dc6241ccfe73b0356521ad1bdda2bf2a0bcd9d20e7602a6d0641f6ba199af6d638f825995c32db0d4650a98c859571a63ace0e43b120bc249fab07a813ace91a7f4170665f8bd1ab317c3df3c15e219b2c7b0c2703898f217fcad3ab1e7c718c0012b168f9104320c7e20af1d98e87236e17bc35f7f01b33f1d454b22c6a94442e681965fba98f76651ae4947995b482374692709448168f9e853da9f442050e5d3c5239f54cbcddd5e77ad31242ee5eb34e69cf6d50bf4ddf2e51583216f495c26267d957432927181253f58da822e4ef8606025b582b360dd769f996f87aa523590f9158ec78585dc17bbf0b12a5440ce3ec9a07b836fe988c286ffcc1f28065308021f07f6ec30ea7251af54b914e7d256383c5f81e97a3d9dfe570896268178d3213b93f0859e5a6b21fd3bfc2c8cd19e031c0dc49fa4fac35aa735379fa536b81368bdeee0ca56971236b2506a4b032d15d96ec4087660173ced2031505c16bb4d3ae9317d88579351127839d96f7c8fc16aa5303a0f1f7355c7b8289c099d5554fc6bf6dfa34da18676eb254518744cb972a5619d9e86b6b1753a447ce0b093c93396303306a9e9d1b44e7306194d967ab24f13017e33ccd323ff08a82da40c56aeafafc1dbb93a3490cf6e428cefd128925279c4e8ac5c3a5c18a3abb274e4091936712a9d2b5b5e2f827cf5150614634295e543e475a19bd60e5b46278d92fc37d5cdde10776f0a47542fc8b1afd8ce624384059bea6c06d7e343ef3e45768435a222d2ddfd789f46cf8e4154b8cf2b0db7dd417bebc3c872771fb6309fd71c6a926c9b6e544c7b690daae46f1eff2b8ececb185d05754cf4adf9ce306f1ffcfd15711a5b9131d5171813d20d35e8cac43d8f02e2a7c334ebc1e59c68f1d62485985605a019b83bae1ed28b48e9819066072d3fda54c823c1447ccc3a307ab1b230bf15b56265f3c75854f74391720402cb89482fb3e49bb97c6634074564250cb78120809ee3ea6b0b713f8aa8676bd6b063efde20055dfa3a14b0280d8531e22a4ae01696f6a3d3b760c71f1b9ced4d9b9e6b12f106fba350d261c9da29b3b70d63c3a15c23d3bf05f3477b0e2a89d242caabd1f68cf22bb69e8ceed72c6e4394d6f587c029c4e15a1291e89fa69b3ab75683af549d120ecd79e077e4b2e4bad53d631d93a6b47a9dcb5f846e687897ed01552331da4c488836b03877201e3284bafc02cf5724a0aec1e0a187a85c5b7efeec58f88f88deae3f954be157245db4c32d5c4dc8c170e7ed716e07f4f3324937fa0063735f70e6be78c200fce94d55e8f8967166ffd511afc7d06746542076383575cc9e5314f8a9b10dffdeaced344911a0c305f613f255d5b09706cfcb3df19140f3f4aaa293a77bdcdffd63d7cc90063c80a67b481f7f2c2574c7f8d643c8e966cd486bde18344177b3e5cf847ecea415fcc2ba491656ecaf6055dc03cb0fe2f66e3047d2c7ad20eb8864d8388103a5650b2a1dc299f82a7bc0ffbec1bd59bea1e3fb86dd8505c406cca8bfd1ace1f3af0bb3cd948bc38fe78c48f47a9f1822d8bf2e7dc2d6e4f2ed176b9f4e65cc12cd933b22a07851e76011468362b78a56e66fd62e08e49d0026170cddfe7e50dcead198d5576cf0944d1a0c65dc3af63f191f163b38909e1e1046235f859ee5a64f4cdfdd6d1bcb2d96c12c8ab7196d45fd0bbe5baccfdfe036ef634369929193c7a6a2b66c28cab7e6f5c9a2ea7d362bb964f8f0b8f88ebec687bc8c67214291abf82ea2c8751ff0645d70636a040b6a5b05a368bfc4ecba5da026792896597d4bccc10fc4330f78d2eab8e79b0dc7fd57fa977c36af4a5e321485619384ec8f81d9589c52440637c953f33a889b71e2c66a682557d64a213801f1e2e90b9d70559787cf3d3e4c25e0a2baf65a7018f4e4b506561d66ec8d6a113fff01de62b97efc92ed82b51d600118a03de218109d085a8667d83f043fbf8d7f891738ac12161034b7891a75859fccb247955502003187e3a6a3d14d6878fffec73a199d13d2bfd490d903ef228d79bfba4c86f309d82a982865a4cc03a5b6df5f0f7115701554305f096db08068de4cbfc2687eea8c562f8065abbd16983e1a2757adaa9279822569d8a66afdc5bb7beed69f1c43f51f579f8887ede1f16146beb853fca1dcc10479796f8cbc21a4f446ef61cbce4aea1fd5086de41c77b197a51ce41f67c15cf1ab6e8c85fbf639e3519e84162c827583fb2ffac0e217c6b6cb0619a2ae636de5b145d7036f95fff9c826b2f4033d9d0366e7717fc3d9c6723f7428142ef1a770506c74539cedbfed42cb10c05928af4365b52fd509e865f0d8bfe6be76a833774800d1697f00bf4c404671f74ef51296113c8edf7c52488b84f37648b10ce4547731666035f4c0f47966523b76d3003d9667bdf6dd3af8180d1f1899c09c144c39a0b78c2d14eb3941169ac8fbdfeb833843a76dd79874bc4b3e134469bb242c87ed553f0b30a5a3f6624decc4b28fbe5ef976c47b43e81a008cbb466b90d5fcc5bb54b483a21decfed72698faad9b1cb148594fc3ac85e75ed881f59375eca08bfdd324cb12415381225210d9ccb94daaa4fd4a4c83b2c54b72e116c124b1174c704fea2540872a21d01283fdb306d5a5763191600fbc78225e7f303fd0feadc799f6e951ad91ae0e4d3b266c288923a700b7d385b0732080c7b79f413281", 0x81c}], 0x1}, 0x20000)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

a_af_perm+0x330/0x330
[  477.302220][T12595]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  477.308703][T12595]  ? sock_rps_record_flow+0x19/0x3f0
[  477.314068][T12595]  ? inet_sendmsg+0xe9/0x2f0
[  477.318720][T12595]  ? inet_send_prepare+0x260/0x260
[  477.323885][T12595]  ____sys_sendmsg+0x5ba/0x960
[  477.328695][T12595]  ? __lock_acquire+0x7d40/0x7d40
[  477.333786][T12595]  ? __asan_memset+0x22/0x40
[  477.338443][T12595]  ? __sys_sendmsg_sock+0x30/0x30
[  477.343504][T12595]  ? __import_iovec+0x5f2/0x850
[  477.348416][T12595]  ? import_iovec+0x73/0xa0
[  477.352953][T12595]  ___sys_sendmsg+0x2a6/0x360
[  477.357674][T12595]  ? get_pid_task+0x20/0x1e0
[  477.362294][T12595]  ? __sys_sendmsg+0x2a0/0x2a0
[  477.367116][T12595]  ? __lock_acquire+0x7d40/0x7d40
[  477.372212][T12595]  __se_sys_sendmsg+0x1c2/0x2b0
[  477.377112][T12595]  ? __x64_sys_sendmsg+0x80/0x80
[  477.382101][T12595]  ? lockdep_hardirqs_on+0x98/0x150
[  477.387340][T12595]  do_syscall_64+0x55/0xa0
[  477.391799][T12595]  ? clear_bhb_loop+0x40/0x90
[  477.396598][T12595]  ? clear_bhb_loop+0x40/0x90
[  477.401316][T12595]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  477.407242][T12595] RIP: 0033:0x7fd13dd9cdd9
[  477.411687][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.431347][T12595] RSP: 002b:00007fd13ebfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.439843][T12595] RAX: ffffffffffffffda RBX: 00007fd13e015fa0 RCX: 00007fd13dd9cdd9
[  477.447843][T12595] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003
[  477.455839][T12595] RBP: 00007fd13ebfa090 R08: 0000000000000000 R09: 0000000000000000
[  477.463834][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  477.471833][T12595] R13: 00007fd13e016038 R14: 00007fd13e015fa0 R15: 00007ffe2e79c4f8
[  477.479961][T12595]  </TASK>
[  477.626965][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.728369][T12461] veth0_vlan: entered promiscuous mode
[  477.741648][T12600] delete_channel: no stack
[  477.753254][T12461] veth1_vlan: entered promiscuous mode
[  477.883286][T12461] veth0_macvtap: entered promiscuous mode
[  477.910859][T12461] veth1_macvtap: entered promiscuous mode
[  477.957883][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.977965][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.995602][T12609] netlink: 160408 bytes leftover after parsing attributes in process `syz.0.2413'.
[  478.011385][T12461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.021422][T12461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.031664][T12461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.043567][T12461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.056053][T12611] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2414'.
[  478.076259][T12611] FAULT_INJECTION: forcing a failure.
[  478.076259][T12611] name failslab, interval 1, probability 0, space 0, times 0
[  478.117971][T12611] CPU: 0 PID: 12611 Comm: syz.2.2414 Not tainted syzkaller #0
[  478.125528][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  478.135655][T12611] Call Trace:
[  478.138976][T12611]  <TASK>
[  478.141946][T12611]  dump_stack_lvl+0x18c/0x250
[  478.146688][T12611]  ? show_regs_print_info+0x20/0x20
[  478.151953][T12611]  ? load_image+0x420/0x420
[  478.156529][T12611]  ? __might_sleep+0xe0/0xe0
[  478.161181][T12611]  ? __lock_acquire+0x7d40/0x7d40
[  478.166264][T12611]  should_fail_ex+0x39d/0x4d0
[  478.171001][T12611]  should_failslab+0x9/0x20
[  478.175541][T12611]  slab_pre_alloc_hook+0x59/0x310
[  478.180601][T12611]  ? lockdep_hardirqs_on+0x98/0x150
[  478.185837][T12611]  kmem_cache_alloc_node+0x60/0x320
[  478.191087][T12611]  ? __alloc_skb+0x103/0x2c0
[  478.195704][T12611]  __alloc_skb+0x103/0x2c0
[  478.200162][T12611]  netlink_ack+0x376/0x1180
[  478.204705][T12611]  ? __dev_queue_xmit+0x265/0x3660
[  478.209859][T12611]  ? netlink_dump+0xe50/0xe50
[  478.214585][T12611]  ? ref_tracker_free+0x690/0x840
[  478.219654][T12611]  netlink_rcv_skb+0x2c5/0x4d0
[  478.224455][T12611]  ? rtnetlink_bind+0x80/0x80
[  478.229220][T12611]  ? netlink_ack+0x1180/0x1180
[  478.234037][T12611]  ? __lock_acquire+0x7d40/0x7d40
[  478.239215][T12611]  ? netlink_deliver_tap+0x2e/0x1b0
[  478.244445][T12611]  netlink_unicast+0x751/0x8d0
[  478.249243][T12611]  netlink_sendmsg+0x8d0/0xbf0
[  478.254042][T12611]  ? netlink_getsockopt+0x590/0x590
[  478.259284][T12611]  ? aa_sock_msg_perm+0x94/0x150
[  478.264259][T12611]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  478.269591][T12611]  ? security_socket_sendmsg+0x80/0xa0
[  478.275092][T12611]  ? netlink_getsockopt+0x590/0x590
[  478.280333][T12611]  ____sys_sendmsg+0x5ba/0x960
[  478.285137][T12611]  ? __asan_memset+0x22/0x40
[  478.289781][T12611]  ? __sys_sendmsg_sock+0x30/0x30
[  478.294840][T12611]  ? __import_iovec+0x3fa/0x850
[  478.299719][T12611]  ? import_iovec+0x73/0xa0
[  478.304251][T12611]  ___sys_sendmsg+0x2a6/0x360
[  478.308950][T12611]  ? get_pid_task+0x20/0x1e0
[  478.313569][T12611]  ? __sys_sendmsg+0x2a0/0x2a0
[  478.318365][T12611]  ? __lock_acquire+0x7d40/0x7d40
[  478.323444][T12611]  __se_sys_sendmsg+0x1c2/0x2b0
[  478.328340][T12611]  ? __x64_sys_sendmsg+0x80/0x80
[  478.333341][T12611]  ? lockdep_hardirqs_on+0x98/0x150
[  478.338570][T12611]  do_syscall_64+0x55/0xa0
[  478.342999][T12611]  ? clear_bhb_loop+0x40/0x90
[  478.347703][T12611]  ? clear_bhb_loop+0x40/0x90
[  478.352413][T12611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  478.358337][T12611] RIP: 0033:0x7efdcf19cdd9
[  478.362785][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.382413][T12611] RSP: 002b:00007efdd005a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.390948][T12611] RAX: ffffffffffffffda RBX: 00007efdcf415fa0 RCX: 00007efdcf19cdd9
[  478.398944][T12611] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  478.406938][T12611] RBP: 00007efdd005a090 R08: 0000000000000000 R09: 0000000000000000
[  478.414940][T12611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.422946][T12611] R13: 00007efdcf416038 R14: 00007efdcf415fa0 R15: 00007ffdbd2bfa38
[  478.430956][T12611]  </TASK>
[  478.581721][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.606723][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.693907][T11966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.706399][ T5775] Bluetooth: hci1: command tx timeout
[  478.725165][T11966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.968060][T12629] netlink: 'syz.0.2421': attribute type 29 has an invalid length.
[  478.985537][T12629] netlink: 'syz.0.2421': attribute type 29 has an invalid length.
[  478.995203][T12629] netlink: 'syz.0.2421': attribute type 29 has an invalid length.
[  479.055875][T12630] netlink: 'syz.1.2357': attribute type 10 has an invalid length.
[  479.146735][T12630] syz_tun: entered promiscuous mode
[  479.152223][T12630] syz_tun: entered allmulticast mode
[  479.238064][T12630] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  480.012755][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  480.022960][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  480.033105][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  480.046576][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  480.057492][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  480.065927][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  480.491178][T11965] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.877069][T11965] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.958032][T12664] netlink: 'syz.0.2432': attribute type 10 has an invalid length.
[  480.986383][T12664] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  480.995503][T12664] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.005374][T12664] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.016403][T12664] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.029409][T12664] geneve0: entered promiscuous mode
[  481.126779][T11965] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.284763][T11965] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.418795][T12675] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check.
[  481.687871][T12649] chnl_net:caif_netlink_parms(): no params data found
[  481.849803][T12686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2440'.
[  482.100023][T12698] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2444'.
[  482.145793][   T51] Bluetooth: hci4: command tx timeout
[  482.421372][T12649] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.430299][T12649] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.438320][T12649] bridge_slave_0: entered allmulticast mode
[  482.447133][T12649] bridge_slave_0: entered promiscuous mode
[  482.498894][T12649] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.509823][T12649] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.519324][T12649] bridge_slave_1: entered allmulticast mode
[  482.523536][T12712] netlink: 'syz.2.2446': attribute type 2 has an invalid length.
[  482.536959][T12649] bridge_slave_1: entered promiscuous mode
[  482.554522][T12712] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2446'.
[  482.852027][T12649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.016560][T12720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.097071][T12649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.347259][T12649] team0: Port device team_slave_0 added
[  483.358557][T12649] team0: Port device team_slave_1 added
[  483.452242][T12649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.474832][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.530725][T12649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.589643][T12649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.597337][T12649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.636489][T12649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.916707][T12649] hsr_slave_0: entered promiscuous mode
[  483.933844][T12649] hsr_slave_1: entered promiscuous mode
[  483.943676][T12649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.951797][T12649] Cannot create hsr debugfs directory
[  484.225129][   T51] Bluetooth: hci4: command tx timeout
[  485.038773][T11965] hsr_slave_0: left promiscuous mode
[  485.075625][T11965] hsr_slave_1: left promiscuous mode
[  485.096607][T11965] hsr0: left allmulticast mode
[  485.105712][T11965] bridge0: port 2(hsr0) entered disabled state
[  485.125699][T11965] bridge_slave_0: left promiscuous mode
[  485.131569][T11965] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.206316][T11965] veth0_macvtap: left promiscuous mode
[  486.158509][T11965] team0 (unregistering): Port device team_slave_1 removed
[  486.309384][   T51] Bluetooth: hci4: command tx timeout
[  486.798464][T12782] netlink: 'syz.1.2462': attribute type 10 has an invalid length.
[  486.819452][T12782] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  486.851983][T12786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2462'.
[  488.385902][   T51] Bluetooth: hci4: command tx timeout
[  488.582576][T12649] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  488.615023][T12649] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  488.652010][T12649] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  488.678985][T12649] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  488.979092][T12649] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.032497][T12850] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2481'.
[  489.099176][T12649] 8021q: adding VLAN 0 to HW filter on device team0
[  489.186841][T11963] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.194150][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.226143][T11963] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.233420][T11963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.195133][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.507615][T12649] veth0_vlan: entered promiscuous mode
[  490.549797][T12649] veth1_vlan: entered promiscuous mode
[  490.685347][T12649] veth0_macvtap: entered promiscuous mode
[  490.716942][T12649] veth1_macvtap: entered promiscuous mode
[  490.753525][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  490.791220][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.807158][T12649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.828946][T12649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  490.850296][T12649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  490.877393][T12649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.914052][T12649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.928381][T12649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.939027][T12649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.948133][T12649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.466765][T11972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.505085][T11972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.593906][T11965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  491.629399][T11965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.862608][T12905] netlink: 'syz.0.2493': attribute type 10 has an invalid length.
[  492.906233][T12931] netlink: zone id is out of range
[  492.914811][T12931] netlink: set zone limit has 8 unknown bytes
[  492.946727][T12931] netlink: 'syz.1.2499': attribute type 10 has an invalid length.
[  492.988156][T12931] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2499'.
[  493.136893][T12937] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2501'.
[  493.187356][T12937] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check.
[  493.715900][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  493.726035][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  493.743303][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  493.761196][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  493.770311][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  493.779576][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  494.379190][T11963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.849892][T11963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.012047][T12982] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2511'.
[  495.037093][T12982] openvswitch: netlink: Message has 8454 unknown bytes.
[  495.126553][T11963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.350349][T11963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.776101][T13009] netlink: 'syz.1.2517': attribute type 21 has an invalid length.
[  495.784217][T13009] netlink: 'syz.1.2517': attribute type 6 has an invalid length.
[  495.792712][T13009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2517'.
[  495.825451][ T5775] Bluetooth: hci0: command tx timeout
[  496.026997][T12954] chnl_net:caif_netlink_parms(): no params data found
[  496.258411][T13023] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2521'.
[  496.294987][T13023] openvswitch: netlink: Key type 4112 is out of range max 32
[  496.885358][T12954] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.892820][T12954] bridge0: port 1(bridge_slave_0) entered disabled state
[  496.927290][T12954] bridge_slave_0: entered allmulticast mode
[  496.955249][T12954] bridge_slave_0: entered promiscuous mode
[  496.979205][T12954] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.994748][T12954] bridge0: port 2(bridge_slave_1) entered disabled state
[  497.006945][T12954] bridge_slave_1: entered allmulticast mode
[  497.027865][T12954] bridge_slave_1: entered promiscuous mode
[  497.548100][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  497.582066][T13058] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2528'.
[  497.733202][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.905032][ T5775] Bluetooth: hci0: command tx timeout
[  498.185446][T12954] team0: Port device team_slave_0 added
[  498.328322][T12954] team0: Port device team_slave_1 added
[  498.909228][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.938864][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.014676][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.084913][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.109440][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.192212][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.449860][T11963] bond0: (slave .3ãc¤±): Releasing backup interface
[  499.650139][T13073] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2531'.
[  499.665697][T13073] openvswitch: netlink: Key type 4112 is out of range max 32
[  499.985244][ T5775] Bluetooth: hci0: command tx timeout
[  500.048973][T11963] hsr_slave_0: left promiscuous mode
[  500.081426][T11963] hsr_slave_1: left promiscuous mode
[  500.105245][T11963] hsr0: left allmulticast mode
[  500.110492][T11963] bridge0: port 2(hsr0) entered disabled state
[  500.141595][T11963] bridge_slave_0: left allmulticast mode
[  500.154691][T11963] bridge_slave_0: left promiscuous mode
[  500.160637][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.401511][T11963] veth0_macvtap: left promiscuous mode
[  501.328637][T13096] FAULT_INJECTION: forcing a failure.
[  501.328637][T13096] name failslab, interval 1, probability 0, space 0, times 0
[  501.353861][T13096] CPU: 0 PID: 13096 Comm: syz.3.2536 Not tainted syzkaller #0
[  501.361462][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  501.371677][T13096] Call Trace:
[  501.375029][T13096]  <TASK>
[  501.378034][T13096]  dump_stack_lvl+0x18c/0x250
[  501.382809][T13096]  ? show_regs_print_info+0x20/0x20
[  501.388114][T13096]  ? load_image+0x420/0x420
[  501.392718][T13096]  ? __might_sleep+0xe0/0xe0
[  501.397404][T13096]  ? __lock_acquire+0x7d40/0x7d40
[  501.402521][T13096]  should_fail_ex+0x39d/0x4d0
[  501.407301][T13096]  should_failslab+0x9/0x20
[  501.411873][T13096]  slab_pre_alloc_hook+0x59/0x310
[  501.416991][T13096]  ? sk_prot_alloc+0xe7/0x210
[  501.421754][T13096]  ? sk_prot_alloc+0xe7/0x210
[  501.426514][T13096]  __kmem_cache_alloc_node+0x53/0x250
[  501.431988][T13096]  ? sk_prot_alloc+0xe7/0x210
[  501.436754][T13096]  __kmalloc+0xa4/0x230
[  501.441014][T13096]  sk_prot_alloc+0xe7/0x210
[  501.445596][T13096]  ? sk_alloc+0x24/0x360
[  501.449932][T13096]  sk_alloc+0x3a/0x360
[  501.454078][T13096]  ? bpf_ctx_init+0x163/0x1a0
[  501.458838][T13096]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  501.464498][T13096]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  501.469959][T13096]  ? __fget_files+0x28/0x4b0
[  501.474612][T13096]  ? __fget_files+0x28/0x4b0
[  501.479263][T13096]  ? __fget_files+0x43d/0x4b0
[  501.484020][T13096]  ? cpu_online+0x60/0x60
[  501.488490][T13096]  bpf_prog_test_run+0x321/0x390
[  501.493492][T13096]  __sys_bpf+0x49d/0x890
[  501.497816][T13096]  ? bpf_link_show_fdinfo+0x390/0x390
[  501.503280][T13096]  ? lock_chain_count+0x20/0x20
[  501.508219][T13096]  __x64_sys_bpf+0x7c/0x90
[  501.512684][T13096]  do_syscall_64+0x55/0xa0
[  501.517146][T13096]  ? clear_bhb_loop+0x40/0x90
[  501.521875][T13096]  ? clear_bhb_loop+0x40/0x90
[  501.526607][T13096]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  501.532548][T13096] RIP: 0033:0x7f05f459cdd9
[  501.537017][T13096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  501.556684][T13096] RSP: 002b:00007f05f54a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  501.565143][T13096] RAX: ffffffffffffffda RBX: 00007f05f4815fa0 RCX: 00007f05f459cdd9
[  501.573151][T13096] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  501.581165][T13096] RBP: 00007f05f54a2090 R08: 0000000000000000 R09: 0000000000000000
[  501.589181][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.597198][T13096] R13: 00007f05f4816038 R14: 00007f05f4815fa0 R15: 00007ffc2f3f4ee8
[  501.605279][T13096]  </TASK>
[  501.684067][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  501.702294][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  501.779992][T11963] team0 (unregistering): Port device team_slave_1 removed
[  501.912863][T11963] bond0 (unregistering): (slave 
5AþÿÙ): Releasing backup interface
[  502.011008][T11963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.065268][ T5775] Bluetooth: hci0: command tx timeout
[  502.151073][T11963] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  504.352406][T13106] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2540'.
[  504.372504][T13106] openvswitch: netlink: Key type 4112 is out of range max 32
[  504.426228][T11963] bond0 (unregistering): Released all slaves
[  504.590246][T12954] hsr_slave_0: entered promiscuous mode
[  504.611991][T12954] hsr_slave_1: entered promiscuous mode
[  504.628725][T12954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  504.639129][T12954] Cannot create hsr debugfs directory
[  505.192253][T13108] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2541'.
[  505.249421][T13108] openvswitch: netlink: Key type 4112 is out of range max 32
[  505.892754][T13131] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2545'.
[  505.914672][T13131] bridge_slave_1: default FDB implementation only supports local addresses
[  506.171602][T13138] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2546'.
[  506.760394][T13146] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2548'.
[  506.776042][T13146] openvswitch: netlink: Key type 4112 is out of range max 32
[  507.059289][T13138] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  507.339081][T12954] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  507.363466][T12954] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  507.379740][T12954] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  507.404926][T12954] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  507.670089][T12954] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.710389][T12954] 8021q: adding VLAN 0 to HW filter on device team0
[  507.746329][T11968] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.753569][T11968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.839008][T11968] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.846284][T11968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.128417][T12954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  508.645566][T13189] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2558'.
[  508.666195][T13189] openvswitch: netlink: Key type 4112 is out of range max 32
[  509.097041][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  509.384208][T12954] veth0_vlan: entered promiscuous mode
[  509.485962][T12954] veth1_vlan: entered promiscuous mode
[  509.745444][T13222] netlink: 'syz.1.2565': attribute type 29 has an invalid length.
[  509.754142][T12954] veth0_macvtap: entered promiscuous mode
[  509.782091][T11963] hsr_slave_1: left promiscuous mode
[  509.793834][T11963] bridge0: port 2(team0) entered disabled state
[  509.814202][T13220] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2566'.
[  509.826743][T11963] bridge_slave_0: left allmulticast mode
[  509.832770][T11963] bridge_slave_0: left promiscuous mode
[  509.839844][T11963] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.845577][T13220] openvswitch: netlink: Key type 4112 is out of range max 32
[  509.904383][T11963] veth0_macvtap: left promiscuous mode
[  510.729869][T11963] team_slave_1 (unregistering): left promiscuous mode
[  510.739516][T11963] team_slave_1 (unregistering): left allmulticast mode
[  510.756678][T11963] team0 (unregistering): Port device team_slave_1 removed
[  510.813900][T11963] team_slave_0 (unregistering): left promiscuous mode
[  510.824215][T11963] team_slave_0 (unregistering): left allmulticast mode
[  510.838909][T11963] team0 (unregistering): Port device team_slave_0 removed
[  511.828204][T13222] netlink: 'syz.1.2565': attribute type 29 has an invalid length.
[  511.874158][T12954] veth1_macvtap: entered promiscuous mode
[  511.946082][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.974635][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.005088][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  512.019531][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.041755][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.097638][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  512.134831][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.160163][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  512.190740][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.212594][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.276670][T12954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.301426][T12954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.324603][T12954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.346847][T12954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.611510][T11965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.640090][T11965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.694272][T13269] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2574'.
[  512.735594][T13269] openvswitch: netlink: Key type 4112 is out of range max 32
[  512.775643][T11967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.783662][T11967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.698650][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  514.710930][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  514.724050][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  514.758170][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  514.772976][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  514.780924][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  514.806864][T13313] FAULT_INJECTION: forcing a failure.
[  514.806864][T13313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.849024][T13313] CPU: 0 PID: 13313 Comm: syz.1.2583 Not tainted syzkaller #0
[  514.856584][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  514.866697][T13313] Call Trace:
[  514.870028][T13313]  <TASK>
[  514.872999][T13313]  dump_stack_lvl+0x18c/0x250
[  514.877735][T13313]  ? show_regs_print_info+0x20/0x20
[  514.882990][T13313]  ? load_image+0x420/0x420
[  514.887554][T13313]  ? __lock_acquire+0x7d40/0x7d40
[  514.892629][T13313]  ? snprintf+0xe9/0x140
[  514.896929][T13313]  should_fail_ex+0x39d/0x4d0
[  514.901679][T13313]  _copy_to_user+0x2f/0xa0
[  514.906169][T13313]  simple_read_from_buffer+0xe7/0x150
[  514.911613][T13313]  proc_fail_nth_read+0x1e8/0x260
[  514.916736][T13313]  ? proc_fault_inject_write+0x360/0x360
[  514.922430][T13313]  ? fsnotify_perm+0x271/0x5e0
[  514.927257][T13313]  ? proc_fault_inject_write+0x360/0x360
[  514.932955][T13313]  vfs_read+0x28b/0x970
[  514.937187][T13313]  ? kernel_read+0x1e0/0x1e0
[  514.941833][T13313]  ? __fget_files+0x28/0x4b0
[  514.946486][T13313]  ? __fget_files+0x28/0x4b0
[  514.951147][T13313]  ? __fget_files+0x43d/0x4b0
[  514.955889][T13313]  ? __fdget_pos+0x2a3/0x330
[  514.960526][T13313]  ? ksys_read+0x75/0x260
[  514.964944][T13313]  ksys_read+0x150/0x260
[  514.969259][T13313]  ? vfs_write+0x990/0x990
[  514.973731][T13313]  ? lockdep_hardirqs_on+0x98/0x150
[  514.978980][T13313]  do_syscall_64+0x55/0xa0
[  514.983462][T13313]  ? clear_bhb_loop+0x40/0x90
[  514.988197][T13313]  ? clear_bhb_loop+0x40/0x90
[  514.992932][T13313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.998901][T13313] RIP: 0033:0x7fb10215d60e
[  515.003369][T13313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  515.023040][T13313] RSP: 002b:00007fb103022fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  515.031542][T13313] RAX: ffffffffffffffda RBX: 00007fb1030236c0 RCX: 00007fb10215d60e
[  515.039568][T13313] RDX: 000000000000000f RSI: 00007fb1030230a0 RDI: 0000000000000005
[  515.047614][T13313] RBP: 00007fb103023090 R08: 0000000000000000 R09: 0000000000000000
[  515.055624][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  515.063629][T13313] R13: 00007fb102416038 R14: 00007fb102415fa0 R15: 00007ffd42e29dc8
[  515.071659][T13313]  </TASK>
[  515.553896][T11967] tipc: Left network mode
[  515.842882][T13309] chnl_net:caif_netlink_parms(): no params data found
[  516.866303][ T5775] Bluetooth: hci2: command tx timeout
[  516.966260][T13309] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.982300][T13309] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.990411][T13309] bridge_slave_0: entered allmulticast mode
[  517.007379][T13309] bridge_slave_0: entered promiscuous mode
[  517.019125][T13309] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.028925][T13309] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.036920][T13309] bridge_slave_1: entered allmulticast mode
[  517.049624][T13309] bridge_slave_1: entered promiscuous mode
[  517.470539][T13309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.502821][T13309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.683210][T13309] team0: Port device team_slave_0 added
[  517.971082][T13309] team0: Port device team_slave_1 added
[  518.773015][T13392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2602'.
[  518.945784][ T5775] Bluetooth: hci2: command tx timeout
[  518.997029][T13309] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.004147][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.174861][T13309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.221856][T13309] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.229058][T13309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.258261][T13309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.657117][T13412] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2608'.
[  520.732065][T13309] hsr_slave_0: entered promiscuous mode
[  520.777470][T13309] hsr_slave_1: entered promiscuous mode
[  521.026332][ T5775] Bluetooth: hci2: command tx timeout
[  521.086606][T13439] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2611'.
[  521.213413][T13439] netlink: 'syz.3.2611': attribute type 3 has an invalid length.
[  521.246078][T13436] bˆ¡cÊRݘOC‰ÿæ: renamed from lo (while UP)
[  521.266458][T13439] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2611'.
[  521.461632][T11967] hsr_slave_1: left promiscuous mode
[  521.491565][T11967] hsr0: left allmulticast mode
[  521.500302][T11967] bridge0: port 2(hsr0) entered disabled state
[  521.531286][T11967] bridge_slave_0: left promiscuous mode
[  521.543484][T11967] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.573019][T11967] veth0_macvtap: left promiscuous mode
[  522.125987][T11967] team0 (unregistering): Port device team_slave_1 removed
[  523.121601][ T5775] Bluetooth: hci2: command tx timeout
[  523.663180][T13482] veth1_macvtap: left promiscuous mode
[  524.230853][T13309] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  524.252376][T13309] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  524.266640][T13309] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  524.281475][T13309] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  524.450869][T13309] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.488600][T13309] 8021q: adding VLAN 0 to HW filter on device team0
[  524.511892][T11965] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.519206][T11965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.541801][T11965] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.549065][T11965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.243583][T13309] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.405996][T13309] veth0_vlan: entered promiscuous mode
[  525.458133][T13309] veth1_vlan: entered promiscuous mode
[  525.599368][T13309] veth0_macvtap: entered promiscuous mode
[  525.662769][T13309] veth1_macvtap: entered promiscuous mode
[  525.689443][T13534] netlink: 'syz.1.2635': attribute type 11 has an invalid length.
[  525.722116][T13534] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.2635'.
[  525.747868][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.777406][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.808946][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.851110][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.864318][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.879045][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.892354][T13309] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.945512][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.963381][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.981601][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.008053][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.029792][T13309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.040707][T13309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.053140][T13309] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.083103][T13309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.103608][T13309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.124641][T13309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.133816][T13309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.306012][T11963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.313980][T11963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.403118][T11966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.430442][T11966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.921860][T13552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2586'.
[  526.964114][T13552] openvswitch: netlink: Key type 4112 is out of range max 32
[  527.711143][T13580] netlink: 180496 bytes leftover after parsing attributes in process `syz.0.2646'.
[  528.105543][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'.
[  528.458720][T13602] netlink: 'syz.1.2651': attribute type 20 has an invalid length.
[  528.883851][T13616] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2654'.
[  528.900523][T13616] openvswitch: netlink: Key type 4112 is out of range max 32
[  529.667161][T13643] netlink: 'syz.2.2661': attribute type 2 has an invalid length.
[  529.688831][T13643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2661'.
[  530.341987][T13656] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2663'.
[  530.354978][T13656] openvswitch: netlink: Key type 4112 is out of range max 32
[  530.938021][T13679] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2666'.
[  531.166916][T13683] FAULT_INJECTION: forcing a failure.
[  531.166916][T13683] name failslab, interval 1, probability 0, space 0, times 0
[  531.185514][T13683] CPU: 1 PID: 13683 Comm: syz.1.2668 Not tainted syzkaller #0
[  531.193070][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.203196][T13683] Call Trace:
[  531.206543][T13683]  <TASK>
[  531.209529][T13683]  dump_stack_lvl+0x18c/0x250
[  531.214289][T13683]  ? show_regs_print_info+0x20/0x20
[  531.219573][T13683]  ? load_image+0x420/0x420
[  531.224161][T13683]  ? __might_sleep+0xe0/0xe0
[  531.228816][T13683]  ? __lock_acquire+0x7d40/0x7d40
[  531.233922][T13683]  should_fail_ex+0x39d/0x4d0
[  531.238708][T13683]  should_failslab+0x9/0x20
[  531.243284][T13683]  slab_pre_alloc_hook+0x59/0x310
[  531.248383][T13683]  ? trace_event_raw_event_lock+0x250/0x250
[  531.254366][T13683]  ? sock_kmalloc+0x96/0xf0
[  531.258949][T13683]  ? sock_kmalloc+0x96/0xf0
[  531.263524][T13683]  __kmem_cache_alloc_node+0x53/0x250
[  531.268985][T13683]  ? sock_kmalloc+0x96/0xf0
[  531.273565][T13683]  __kmalloc+0xa4/0x230
[  531.277799][T13683]  sock_kmalloc+0x96/0xf0
[  531.282208][T13683]  ____sys_sendmsg+0x1be/0x960
[  531.287041][T13683]  ? __lock_acquire+0x7d40/0x7d40
[  531.292139][T13683]  ? __asan_memset+0x22/0x40
[  531.296798][T13683]  ? __sys_sendmsg_sock+0x30/0x30
[  531.301880][T13683]  ? __import_iovec+0x3fa/0x850
[  531.306816][T13683]  ? import_iovec+0x73/0xa0
[  531.311390][T13683]  ___sys_sendmsg+0x2a6/0x360
[  531.316147][T13683]  ? __sys_sendmsg+0x2a0/0x2a0
[  531.321027][T13683]  ? trace_call_bpf+0xc3/0x6c0
[  531.325946][T13683]  __se_sys_sendmsg+0x1c2/0x2b0
[  531.330885][T13683]  ? __x64_sys_sendmsg+0x80/0x80
[  531.335925][T13683]  ? lockdep_hardirqs_on+0x98/0x150
[  531.341205][T13683]  do_syscall_64+0x55/0xa0
[  531.345688][T13683]  ? clear_bhb_loop+0x40/0x90
[  531.350431][T13683]  ? clear_bhb_loop+0x40/0x90
[  531.355290][T13683]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  531.361256][T13683] RIP: 0033:0x7fb10219cdd9
[  531.365734][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.385408][T13683] RSP: 002b:00007fb103023028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  531.393903][T13683] RAX: ffffffffffffffda RBX: 00007fb102415fa0 RCX: 00007fb10219cdd9
[  531.401941][T13683] RDX: 00000000240048c0 RSI: 00002000000001c0 RDI: 0000000000000005
[  531.409975][T13683] RBP: 00007fb103023090 R08: 0000000000000000 R09: 0000000000000000
[  531.418009][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.426035][T13683] R13: 00007fb102416038 R14: 00007fb102415fa0 R15: 00007ffd42e29dc8
[  531.434104][T13683]  </TASK>
[  531.960202][T13699] IPv6: NLM_F_CREATE should be specified when creating new route
[  532.421552][T13707] FAULT_INJECTION: forcing a failure.
[  532.421552][T13707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  532.442418][T13707] CPU: 1 PID: 13707 Comm: syz.0.2674 Not tainted syzkaller #0
[  532.449975][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  532.460082][T13707] Call Trace:
[  532.463418][T13707]  <TASK>
[  532.466400][T13707]  dump_stack_lvl+0x18c/0x250
[  532.471154][T13707]  ? show_regs_print_info+0x20/0x20
[  532.476417][T13707]  ? load_image+0x420/0x420
[  532.481001][T13707]  ? __might_fault+0xaa/0x120
[  532.485729][T13707]  ? __lock_acquire+0x7d40/0x7d40
[  532.490813][T13707]  should_fail_ex+0x39d/0x4d0
[  532.495561][T13707]  _copy_from_user+0x2f/0xe0
[  532.500215][T13707]  generic_map_update_batch+0x59a/0x810
[  532.505826][T13707]  ? rcu_read_unlock+0xa0/0xa0
[  532.510733][T13707]  ? __fdget+0x180/0x210
[  532.515042][T13707]  ? rcu_read_unlock+0xa0/0xa0
[  532.519890][T13707]  bpf_map_do_batch+0x3d7/0x610
[  532.524805][T13707]  __sys_bpf+0x381/0x890
[  532.529111][T13707]  ? bpf_link_show_fdinfo+0x390/0x390
[  532.534550][T13707]  ? lock_chain_count+0x20/0x20
[  532.539466][T13707]  __x64_sys_bpf+0x7c/0x90
[  532.543938][T13707]  do_syscall_64+0x55/0xa0
[  532.548407][T13707]  ? clear_bhb_loop+0x40/0x90
[  532.553137][T13707]  ? clear_bhb_loop+0x40/0x90
[  532.557872][T13707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  532.563824][T13707] RIP: 0033:0x7f9dc879cdd9
[  532.568294][T13707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  532.587965][T13707] RSP: 002b:00007f9dc95f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  532.596439][T13707] RAX: ffffffffffffffda RBX: 00007f9dc8a15fa0 RCX: 00007f9dc879cdd9
[  532.604464][T13707] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  532.612487][T13707] RBP: 00007f9dc95f2090 R08: 0000000000000000 R09: 0000000000000000
[  532.620597][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  532.628618][T13707] R13: 00007f9dc8a16038 R14: 00007f9dc8a15fa0 R15: 00007ffd2fc5d9a8
[  532.636666][T13707]  </TASK>
[  532.640543][T13711] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2675'.
[  532.826617][T13714] netlink: 'syz.1.2676': attribute type 10 has an invalid length.
[  532.970164][T13714] team0: Port device geneve1 added
[  533.015039][T13718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.746298][T13756] pim6reg1: entered promiscuous mode
[  534.753024][T13756] pim6reg1: entered allmulticast mode
[  534.785550][T13752] netlink: zone id is out of range
[  534.802078][T13752] netlink: set zone limit has 8 unknown bytes
[  534.825536][T13752] netlink: 'syz.1.2690': attribute type 10 has an invalid length.
[  534.843934][T13752] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2690'.
[  535.316698][T13763] FAULT_INJECTION: forcing a failure.
[  535.316698][T13763] name failslab, interval 1, probability 0, space 0, times 0
[  535.414648][T13763] CPU: 1 PID: 13763 Comm: syz.3.2694 Not tainted syzkaller #0
[  535.422294][T13763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  535.432407][T13763] Call Trace:
[  535.435739][T13763]  <TASK>
[  535.438715][T13763]  dump_stack_lvl+0x18c/0x250
[  535.443459][T13763]  ? sctp_sendmsg+0x1575/0x28c0
[  535.448359][T13763]  ? ___sys_sendmsg+0x2a6/0x360
[  535.453282][T13763]  ? show_regs_print_info+0x20/0x20
[  535.458540][T13763]  ? load_image+0x420/0x420
[  535.463116][T13763]  should_fail_ex+0x39d/0x4d0
[  535.467883][T13763]  should_failslab+0x9/0x20
[  535.472448][T13763]  slab_pre_alloc_hook+0x59/0x310
[  535.477527][T13763]  ? sctp_add_bind_addr+0x8c/0x360
[  535.482655][T13763]  __kmem_cache_alloc_node+0x53/0x250
[  535.488069][T13763]  ? sctp_add_bind_addr+0x8c/0x360
[  535.493238][T13763]  kmalloc_trace+0x2a/0xe0
[  535.497721][T13763]  sctp_add_bind_addr+0x8c/0x360
[  535.502719][T13763]  sctp_copy_local_addr_list+0x315/0x4f0
[  535.508410][T13763]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  535.514181][T13763]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  535.520313][T13763]  ? sctp_v6_is_any+0x64/0x70
[  535.525055][T13763]  ? sctp_copy_one_addr+0x8c/0x350
[  535.530224][T13763]  sctp_bind_addr_copy+0xb3/0x3c0
[  535.535313][T13763]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  535.541704][T13763]  sctp_connect_new_asoc+0x2f9/0x6a0
[  535.547044][T13763]  ? __sctp_connect+0xd80/0xd80
[  535.551939][T13763]  ? __local_bh_enable_ip+0x13a/0x1c0
[  535.557366][T13763]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  535.563014][T13763]  ? security_sctp_bind_connect+0x89/0xb0
[  535.568792][T13763]  sctp_sendmsg+0x1575/0x28c0
[  535.573527][T13763]  ? sctp_getsockopt+0xb60/0xb60
[  535.578509][T13763]  ? aa_sk_perm+0x83c/0x970
[  535.583083][T13763]  ? aa_af_perm+0x330/0x330
[  535.587643][T13763]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  535.594112][T13763]  ? sock_rps_record_flow+0x19/0x3f0
[  535.599462][T13763]  ? inet_sendmsg+0xe9/0x2f0
[  535.604122][T13763]  ? inet_send_prepare+0x260/0x260
[  535.609296][T13763]  ____sys_sendmsg+0x5ba/0x960
[  535.614109][T13763]  ? __lock_acquire+0x7d40/0x7d40
[  535.619203][T13763]  ? __asan_memset+0x22/0x40
[  535.623859][T13763]  ? __sys_sendmsg_sock+0x30/0x30
[  535.628933][T13763]  ? __import_iovec+0x5f2/0x850
[  535.633828][T13763]  ? import_iovec+0x73/0xa0
[  535.638364][T13763]  ___sys_sendmsg+0x2a6/0x360
[  535.643089][T13763]  ? get_pid_task+0x20/0x1e0
[  535.647737][T13763]  ? __sys_sendmsg+0x2a0/0x2a0
[  535.652668][T13763]  ? __lock_acquire+0x7d40/0x7d40
[  535.657795][T13763]  __se_sys_sendmsg+0x1c2/0x2b0
[  535.662710][T13763]  ? __x64_sys_sendmsg+0x80/0x80
[  535.667704][T13763]  ? lockdep_hardirqs_on+0x98/0x150
[  535.672956][T13763]  do_syscall_64+0x55/0xa0
[  535.677409][T13763]  ? clear_bhb_loop+0x40/0x90
[  535.682160][T13763]  ? clear_bhb_loop+0x40/0x90
[  535.686998][T13763]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.692935][T13763] RIP: 0033:0x7f05f459cdd9
[  535.697383][T13763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.717045][T13763] RSP: 002b:00007f05f54a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.719568][T13770] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2697'.
[  535.725497][T13763] RAX: ffffffffffffffda RBX: 00007f05f4815fa0 RCX: 00007f05f459cdd9
[  535.725516][T13763] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003
[  535.725529][T13763] RBP: 00007f05f54a2090 R08: 0000000000000000 R09: 0000000000000000
[  535.725542][T13763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  535.725554][T13763] R13: 00007f05f4816038 R14: 00007f05f4815fa0 R15: 00007ffc2f3f4ee8
[  535.725587][T13763]  </TASK>
[  536.257751][T13783] netlink: 'syz.2.2701': attribute type 10 has an invalid length.
[  536.549694][T13783] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  538.407777][T13818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2715'.
[  540.212665][T13858] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  540.219232][T13858] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  540.473260][T13864] netlink: 'syz.0.2733': attribute type 21 has an invalid length.
[  540.484334][T13864] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2733'.
[  540.500653][T13864] netlink: 'syz.0.2733': attribute type 4 has an invalid length.
[  541.164476][T13896] netlink: 'syz.0.2743': attribute type 9 has an invalid length.
[  541.173070][T13896] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2743'.
[  541.392641][T13901] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2746'.
[  546.650900][T13971] netlink: 'syz.3.2770': attribute type 10 has an invalid length.
[  546.832191][T13971] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.877073][T13971] bridge_slave_1: left allmulticast mode
[  546.883855][T13971] bridge_slave_1: left promiscuous mode
[  546.894378][T13971] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.030647][T13971] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  547.432648][T13989] netlink: 'syz.3.2777': attribute type 33 has an invalid length.
[  547.441761][T13989] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2777'.
[  552.213314][T14001] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2780'.
[  552.902865][T14050] netlink: 'syz.2.2794': attribute type 9 has an invalid length.
[  552.911938][T14050] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2794'.
[  553.372835][T14055] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2796'.
[  554.109152][T14065] netlink: 'syz.0.2795': attribute type 10 has an invalid length.
[  554.762778][T14065] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.814069][T14065] bridge_slave_1: left allmulticast mode
[  554.824612][T14065] bridge_slave_1: left promiscuous mode
[  554.830532][T14065] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.869663][T14065] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  556.248898][T14107] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2811'.
[  557.520881][T14111] netlink: 'syz.2.2814': attribute type 10 has an invalid length.
[  557.694122][T14111] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.852927][T14111] bridge_slave_1: left allmulticast mode
[  557.915263][T14111] bridge_slave_1: left promiscuous mode
[  557.958936][T14111] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.080365][T14111] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  558.138017][T14132] netlink: 'syz.0.2819': attribute type 10 has an invalid length.
[  558.205560][T14131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  558.942807][T14149] FAULT_INJECTION: forcing a failure.
[  558.942807][T14149] name failslab, interval 1, probability 0, space 0, times 0
[  558.962155][T14149] CPU: 1 PID: 14149 Comm: syz.1.2826 Not tainted syzkaller #0
[  558.969708][T14149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  558.979831][T14149] Call Trace:
[  558.983158][T14149]  <TASK>
[  558.986137][T14149]  dump_stack_lvl+0x18c/0x250
[  558.990878][T14149]  ? show_regs_print_info+0x20/0x20
[  558.996141][T14149]  ? load_image+0x420/0x420
[  559.000708][T14149]  ? __might_sleep+0xe0/0xe0
[  559.005357][T14149]  ? __lock_acquire+0x7d40/0x7d40
[  559.010453][T14149]  should_fail_ex+0x39d/0x4d0
[  559.015198][T14149]  should_failslab+0x9/0x20
[  559.019759][T14149]  slab_pre_alloc_hook+0x59/0x310
[  559.024841][T14149]  ? apparmor_sk_alloc_security+0x77/0x100
[  559.030700][T14149]  __kmem_cache_alloc_node+0x53/0x250
[  559.036137][T14149]  ? apparmor_sk_alloc_security+0x77/0x100
[  559.042004][T14149]  kmalloc_trace+0x2a/0xe0
[  559.046485][T14149]  apparmor_sk_alloc_security+0x77/0x100
[  559.052173][T14149]  security_sk_alloc+0x6e/0xa0
[  559.057016][T14149]  sk_prot_alloc+0x101/0x210
[  559.061650][T14149]  ? sk_alloc+0x24/0x360
[  559.065946][T14149]  sk_alloc+0x3a/0x360
[  559.070065][T14149]  ? bpf_ctx_init+0x163/0x1a0
[  559.074786][T14149]  ? bpf_prog_test_run_skb+0x273/0x12b0
[  559.080389][T14149]  bpf_prog_test_run_skb+0x3a5/0x12b0
[  559.085829][T14149]  ? __fget_files+0x28/0x4b0
[  559.090469][T14149]  ? __fget_files+0x28/0x4b0
[  559.095107][T14149]  ? __fget_files+0x43d/0x4b0
[  559.099860][T14149]  ? cpu_online+0x60/0x60
[  559.104261][T14149]  bpf_prog_test_run+0x321/0x390
[  559.109272][T14149]  __sys_bpf+0x49d/0x890
[  559.113569][T14149]  ? bpf_link_show_fdinfo+0x390/0x390
[  559.119046][T14149]  ? lock_chain_count+0x20/0x20
[  559.123970][T14149]  __x64_sys_bpf+0x7c/0x90
[  559.128439][T14149]  do_syscall_64+0x55/0xa0
[  559.132912][T14149]  ? clear_bhb_loop+0x40/0x90
[  559.137662][T14149]  ? clear_bhb_loop+0x40/0x90
[  559.142395][T14149]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  559.148343][T14149] RIP: 0033:0x7fb10219cdd9
[  559.152812][T14149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  559.172497][T14149] RSP: 002b:00007fb103023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  559.180983][T14149] RAX: ffffffffffffffda RBX: 00007fb102415fa0 RCX: 00007fb10219cdd9
[  559.189014][T14149] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 000000000000000a
[  559.197043][T14149] RBP: 00007fb103023090 R08: 0000000000000000 R09: 0000000000000000
[  559.205076][T14149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  559.213194][T14149] R13: 00007fb102416038 R14: 00007fb102415fa0 R15: 00007ffd42e29dc8
[  559.221244][T14149]  </TASK>
[  559.523125][T14157] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2825'.
[  560.480133][T14182] FAULT_INJECTION: forcing a failure.
[  560.480133][T14182] name failslab, interval 1, probability 0, space 0, times 0
[  560.602752][T14182] CPU: 0 PID: 14182 Comm: syz.2.2837 Not tainted syzkaller #0
[  560.610341][T14182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  560.620464][T14182] Call Trace:
[  560.623795][T14182]  <TASK>
[  560.626866][T14182]  dump_stack_lvl+0x18c/0x250
[  560.631607][T14182]  ? sctp_sendmsg+0x1575/0x28c0
[  560.636513][T14182]  ? ___sys_sendmsg+0x2a6/0x360
[  560.641398][T14182]  ? show_regs_print_info+0x20/0x20
[  560.646645][T14182]  ? load_image+0x420/0x420
[  560.651231][T14182]  should_fail_ex+0x39d/0x4d0
[  560.655982][T14182]  should_failslab+0x9/0x20
[  560.660543][T14182]  slab_pre_alloc_hook+0x59/0x310
[  560.665632][T14182]  ? sctp_add_bind_addr+0x8c/0x360
[  560.670793][T14182]  __kmem_cache_alloc_node+0x53/0x250
[  560.676229][T14182]  ? sctp_add_bind_addr+0x8c/0x360
[  560.681395][T14182]  kmalloc_trace+0x2a/0xe0
[  560.685882][T14182]  sctp_add_bind_addr+0x8c/0x360
[  560.690874][T14182]  sctp_copy_local_addr_list+0x315/0x4f0
[  560.696565][T14182]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  560.702337][T14182]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  560.708459][T14182]  ? sctp_v4_is_any+0x35/0x60
[  560.713278][T14182]  ? sctp_copy_one_addr+0x8c/0x350
[  560.718460][T14182]  sctp_bind_addr_copy+0xb3/0x3c0
[  560.723537][T14182]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  560.729926][T14182]  sctp_connect_new_asoc+0x2f9/0x6a0
[  560.735266][T14182]  ? __sctp_connect+0xd80/0xd80
[  560.740179][T14182]  ? __local_bh_enable_ip+0x13a/0x1c0
[  560.745619][T14182]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  560.751217][T14182]  ? security_sctp_bind_connect+0x89/0xb0
[  560.757007][T14182]  sctp_sendmsg+0x1575/0x28c0
[  560.761747][T14182]  ? sctp_getsockopt+0xb60/0xb60
[  560.766824][T14182]  ? aa_sk_perm+0x83c/0x970
[  560.771398][T14182]  ? aa_af_perm+0x330/0x330
[  560.775963][T14182]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  560.782443][T14182]  ? sock_rps_record_flow+0x19/0x3f0
[  560.787795][T14182]  ? inet_sendmsg+0xe9/0x2f0
[  560.792437][T14182]  ? inet_send_prepare+0x260/0x260
[  560.797605][T14182]  ____sys_sendmsg+0x5ba/0x960
[  560.802426][T14182]  ? __lock_acquire+0x7d40/0x7d40
[  560.807520][T14182]  ? __asan_memset+0x22/0x40
[  560.812165][T14182]  ? __sys_sendmsg_sock+0x30/0x30
[  560.817272][T14182]  ? __import_iovec+0x5f2/0x850
[  560.822190][T14182]  ? import_iovec+0x73/0xa0
[  560.826766][T14182]  ___sys_sendmsg+0x2a6/0x360
[  560.831502][T14182]  ? __sys_sendmsg+0x2a0/0x2a0
[  560.836353][T14182]  ? __lock_acquire+0x7d40/0x7d40
[  560.841480][T14182]  __se_sys_sendmsg+0x1c2/0x2b0
[  560.846380][T14182]  ? __x64_sys_sendmsg+0x80/0x80
[  560.851386][T14182]  ? lockdep_hardirqs_on+0x98/0x150
[  560.856645][T14182]  do_syscall_64+0x55/0xa0
[  560.861118][T14182]  ? clear_bhb_loop+0x40/0x90
[  560.865850][T14182]  ? clear_bhb_loop+0x40/0x90
[  560.870587][T14182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.876532][T14182] RIP: 0033:0x7f119c99cdd9
[  560.881030][T14182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.900731][T14182] RSP: 002b:00007f119d94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  560.909202][T14182] RAX: ffffffffffffffda RBX: 00007f119cc15fa0 RCX: 00007f119c99cdd9
[  560.917244][T14182] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003
[  560.925276][T14182] RBP: 00007f119d94a090 R08: 0000000000000000 R09: 0000000000000000
[  560.933301][T14182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.941325][T14182] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  560.949366][T14182]  </TASK>
[  561.435190][T14191] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2839'.
[  561.699775][T14198] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2840'.
[  562.446880][T14214] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2846'.
[  563.123066][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  563.129732][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  564.881690][T14259] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2859'.
[  565.967794][T14283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.008492][T14290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2869'.
[  566.070441][T14290] Lè+߬ç³Õ: renamed from bridge_slave_0 (while UP)
[  566.547699][T14305] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2873'.
[  567.190799][T14315] sctp: [Deprecated]: syz.1.2878 (pid 14315) Use of struct sctp_assoc_value in delayed_ack socket option.
[  567.190799][T14315] Use struct sctp_sack_info instead
[  567.334275][T14315] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2878'.
[  567.406083][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  567.929818][T14328] netlink: 'syz.1.2882': attribute type 21 has an invalid length.
[  567.974998][T14328] netlink: 'syz.1.2882': attribute type 6 has an invalid length.
[  568.017742][T14328] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2882'.
[  568.331333][T14336] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2886'.
[  568.549666][T14339] syzkaller0: entered promiscuous mode
[  568.561160][T14339] syzkaller0: entered allmulticast mode
[  570.536939][T14373] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2896'.
[  575.475939][T14410] sctp: [Deprecated]: syz.3.2906 (pid 14410) Use of struct sctp_assoc_value in delayed_ack socket option.
[  575.475939][T14410] Use struct sctp_sack_info instead
[  575.544322][T14414] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2914'.
[  575.561258][T14413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2908'.
[  575.746422][T14410] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2906'.
[  575.884719][T14410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'.
[  577.406401][T14449] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2919'.
[  578.123565][T14458] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2923'.
[  578.167325][T14458] openvswitch: netlink: Key type 4112 is out of range max 32
[  578.525977][T14469] IPv6: …: Disabled Multicast RS
[  579.061943][T14477] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2929'.
[  579.560466][T14487] netlink: 'syz.3.2932': attribute type 10 has an invalid length.
[  579.672205][T14487] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2932'.
[  580.445423][T14498] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2934'.
[  580.476511][T14498] openvswitch: netlink: Key type 4112 is out of range max 32
[  581.163229][T14492] netlink: 'syz.0.2933': attribute type 39 has an invalid length.
[  581.542291][T14510] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2939'.
[  581.749991][T14509] IPv6: …: Disabled Multicast RS
[  582.044245][T14520] FAULT_INJECTION: forcing a failure.
[  582.044245][T14520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  582.106578][T14520] CPU: 0 PID: 14520 Comm: syz.2.2943 Not tainted syzkaller #0
[  582.114126][T14520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  582.124268][T14520] Call Trace:
[  582.127591][T14520]  <TASK>
[  582.130560][T14520]  dump_stack_lvl+0x18c/0x250
[  582.135302][T14520]  ? show_regs_print_info+0x20/0x20
[  582.140575][T14520]  ? load_image+0x420/0x420
[  582.145138][T14520]  ? __might_fault+0xaa/0x120
[  582.149952][T14520]  ? __lock_acquire+0x7d40/0x7d40
[  582.155031][T14520]  should_fail_ex+0x39d/0x4d0
[  582.159858][T14520]  _copy_from_user+0x2f/0xe0
[  582.164497][T14520]  ___sys_sendmsg+0x1c7/0x360
[  582.169312][T14520]  ? get_pid_task+0x20/0x1e0
[  582.173969][T14520]  ? __sys_sendmsg+0x2a0/0x2a0
[  582.178806][T14520]  ? __lock_acquire+0x7d40/0x7d40
[  582.183923][T14520]  __se_sys_sendmsg+0x1c2/0x2b0
[  582.188830][T14520]  ? __x64_sys_sendmsg+0x80/0x80
[  582.193847][T14520]  ? lockdep_hardirqs_on+0x98/0x150
[  582.199119][T14520]  do_syscall_64+0x55/0xa0
[  582.203592][T14520]  ? clear_bhb_loop+0x40/0x90
[  582.208337][T14520]  ? clear_bhb_loop+0x40/0x90
[  582.213097][T14520]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.219039][T14520] RIP: 0033:0x7f119c99cdd9
[  582.223497][T14520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.243160][T14520] RSP: 002b:00007f119d94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.251640][T14520] RAX: ffffffffffffffda RBX: 00007f119cc15fa0 RCX: 00007f119c99cdd9
[  582.259674][T14520] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003
[  582.267868][T14520] RBP: 00007f119d94a090 R08: 0000000000000000 R09: 0000000000000000
[  582.275893][T14520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.283910][T14520] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  582.291944][T14520]  </TASK>
[  582.727869][T14528] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2945'.
[  582.784750][T14528] openvswitch: netlink: Key type 4112 is out of range max 32
[  583.521911][T14534] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2949'.
[  583.862049][T14549] macsec0: entered promiscuous mode
[  583.884411][T14549] macsec0: entered allmulticast mode
[  583.896860][T14549] veth1_macvtap: entered allmulticast mode
[  585.277004][T14569] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2961'.
[  585.581593][T14575] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.2964'.
[  585.630365][T14578] netlink: 'syz.3.2965': attribute type 10 has an invalid length.
[  585.638462][T14578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2965'.
[  585.666065][T14578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.641091][T14594] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2972'.
[  587.383382][T14610] netlink: 'syz.1.2979': attribute type 10 has an invalid length.
[  587.571348][T14610] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  588.082526][T14626] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2983'.
[  588.419767][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'.
[  591.815157][T14691] syzkaller0: entered promiscuous mode
[  591.820810][T14691] syzkaller0: entered allmulticast mode
[  595.908302][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  597.852146][T14753] FAULT_INJECTION: forcing a failure.
[  597.852146][T14753] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.891714][T14753] CPU: 1 PID: 14753 Comm: syz.1.3028 Not tainted syzkaller #0
[  597.899276][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  597.909381][T14753] Call Trace:
[  597.912695][T14753]  <TASK>
[  597.915663][T14753]  dump_stack_lvl+0x18c/0x250
[  597.920398][T14753]  ? show_regs_print_info+0x20/0x20
[  597.925648][T14753]  ? load_image+0x420/0x420
[  597.930204][T14753]  ? __might_fault+0xaa/0x120
[  597.934919][T14753]  ? __lock_acquire+0x7d40/0x7d40
[  597.940000][T14753]  should_fail_ex+0x39d/0x4d0
[  597.944821][T14753]  _copy_from_user+0x2f/0xe0
[  597.949472][T14753]  generic_map_update_batch+0x54b/0x810
[  597.955090][T14753]  ? rcu_read_unlock+0xa0/0xa0
[  597.959901][T14753]  ? __fdget+0x180/0x210
[  597.964190][T14753]  ? rcu_read_unlock+0xa0/0xa0
[  597.969007][T14753]  bpf_map_do_batch+0x3d7/0x610
[  597.973904][T14753]  __sys_bpf+0x381/0x890
[  597.978192][T14753]  ? bpf_link_show_fdinfo+0x390/0x390
[  597.983622][T14753]  ? lock_chain_count+0x20/0x20
[  597.988549][T14753]  __x64_sys_bpf+0x7c/0x90
[  597.993014][T14753]  do_syscall_64+0x55/0xa0
[  597.997465][T14753]  ? clear_bhb_loop+0x40/0x90
[  598.002281][T14753]  ? clear_bhb_loop+0x40/0x90
[  598.007019][T14753]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  598.012957][T14753] RIP: 0033:0x7fb10219cdd9
[  598.017410][T14753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  598.037056][T14753] RSP: 002b:00007fb103023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  598.045516][T14753] RAX: ffffffffffffffda RBX: 00007fb102415fa0 RCX: 00007fb10219cdd9
[  598.053610][T14753] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  598.061605][T14753] RBP: 00007fb103023090 R08: 0000000000000000 R09: 0000000000000000
[  598.069602][T14753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  598.077595][T14753] R13: 00007fb102416038 R14: 00007fb102415fa0 R15: 00007ffd42e29dc8
[  598.085604][T14753]  </TASK>
[  598.549392][T14768] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3033'.
[  599.882685][T14792] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3039'.
[  599.964807][T14792] openvswitch: netlink: Key type 4112 is out of range max 32
[  600.745642][T14813] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3045'.
[  601.421415][T14823] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3049'.
[  601.447404][T14823] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  601.483284][T14823] CPU: 1 PID: 14823 Comm: syz.3.3049 Not tainted syzkaller #0
[  601.490840][T14823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  601.500947][T14823] Call Trace:
[  601.504276][T14823]  <TASK>
[  601.507253][T14823]  dump_stack_lvl+0x18c/0x250
[  601.512006][T14823]  ? show_regs_print_info+0x20/0x20
[  601.517300][T14823]  ? load_image+0x420/0x420
[  601.521890][T14823]  sysfs_warn_dup+0x8e/0xa0
[  601.526464][T14823]  sysfs_do_create_link_sd+0xc0/0x110
[  601.531900][T14823]  device_add_class_symlinks+0x1cf/0x240
[  601.537607][T14823]  device_add+0x507/0xc20
[  601.542018][T14823]  wiphy_register+0x1dad/0x2ae0
[  601.546954][T14823]  ? cfg80211_event_work+0x40/0x40
[  601.552120][T14823]  ? minstrel_ht_alloc+0x88a/0x990
[  601.557396][T14823]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  601.563529][T14823]  ieee80211_register_hw+0x3464/0x4250
[  601.569091][T14823]  ? ieee80211_tasklet_handler+0x20/0x20
[  601.574773][T14823]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  601.580730][T14823]  ? __debug_object_init+0xec/0x450
[  601.586030][T14823]  ? __asan_memset+0x22/0x40
[  601.590688][T14823]  ? __hrtimer_init+0x186/0x270
[  601.595607][T14823]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  601.601408][T14823]  ? mac80211_hwsim_free+0x220/0x220
[  601.606753][T14823]  ? rcu_is_watching+0x15/0xb0
[  601.611575][T14823]  ? kstrndup+0xbd/0x140
[  601.615893][T14823]  hwsim_new_radio_nl+0xdc9/0x1a90
[  601.621084][T14823]  ? __nla_validate+0x50/0x50
[  601.625828][T14823]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  601.632226][T14823]  ? __nla_parse+0x40/0x50
[  601.636707][T14823]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  601.643096][T14823]  genl_family_rcv_msg_doit+0x211/0x310
[  601.648695][T14823]  ? end_current_label_crit_section+0x170/0x170
[  601.655015][T14823]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  601.660982][T14823]  ? bpf_lsm_capable+0x9/0x10
[  601.665737][T14823]  ? security_capable+0x89/0xb0
[  601.670654][T14823]  genl_rcv_msg+0x619/0x7a0
[  601.675227][T14823]  ? genl_bind+0x360/0x360
[  601.679698][T14823]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  601.686090][T14823]  ? ref_tracker_free+0x690/0x840
[  601.691189][T14823]  netlink_rcv_skb+0x241/0x4d0
[  601.696031][T14823]  ? genl_bind+0x360/0x360
[  601.700506][T14823]  ? netlink_ack+0x1180/0x1180
[  601.705348][T14823]  ? __lock_acquire+0x7d40/0x7d40
[  601.710446][T14823]  ? down_read+0x1ac/0x2e0
[  601.714920][T14823]  genl_rcv+0x28/0x40
[  601.718956][T14823]  netlink_unicast+0x751/0x8d0
[  601.723801][T14823]  netlink_sendmsg+0x8d0/0xbf0
[  601.728639][T14823]  ? netlink_getsockopt+0x590/0x590
[  601.733899][T14823]  ? aa_sock_msg_perm+0x94/0x150
[  601.738893][T14823]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  601.744247][T14823]  ? security_socket_sendmsg+0x80/0xa0
[  601.749771][T14823]  ? netlink_getsockopt+0x590/0x590
[  601.755047][T14823]  ____sys_sendmsg+0x5ba/0x960
[  601.759873][T14823]  ? __asan_memset+0x22/0x40
[  601.764513][T14823]  ? __sys_sendmsg_sock+0x30/0x30
[  601.769584][T14823]  ? __import_iovec+0x5f2/0x850
[  601.774495][T14823]  ? import_iovec+0x73/0xa0
[  601.779204][T14823]  ___sys_sendmsg+0x2a6/0x360
[  601.783966][T14823]  ? __sys_sendmsg+0x2a0/0x2a0
[  601.788827][T14823]  ? debug_mutex_init+0x38/0x70
[  601.793832][T14823]  __se_sys_sendmsg+0x1c2/0x2b0
[  601.798757][T14823]  ? __x64_sys_sendmsg+0x80/0x80
[  601.803777][T14823]  ? lockdep_hardirqs_on+0x98/0x150
[  601.809055][T14823]  do_syscall_64+0x55/0xa0
[  601.813527][T14823]  ? clear_bhb_loop+0x40/0x90
[  601.818262][T14823]  ? clear_bhb_loop+0x40/0x90
[  601.823018][T14823]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  601.828974][T14823] RIP: 0033:0x7f05f459cdd9
[  601.833446][T14823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.853119][T14823] RSP: 002b:00007f05f54a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  601.861608][T14823] RAX: ffffffffffffffda RBX: 00007f05f4815fa0 RCX: 00007f05f459cdd9
[  601.869647][T14823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  601.877733][T14823] RBP: 00007f05f4632d69 R08: 0000000000000000 R09: 0000000000000000
[  601.885768][T14823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  601.893853][T14823] R13: 00007f05f4816038 R14: 00007f05f4815fa0 R15: 00007ffc2f3f4ee8
[  601.901921][T14823]  </TASK>
[  602.419240][T14836] netlink: 'syz.0.3054': attribute type 1 has an invalid length.
[  602.484678][T14836] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3054'.
[  602.705164][T14841] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3055'.
[  603.313332][T14843] netlink: 'syz.2.3057': attribute type 10 has an invalid length.
[  603.376184][T14843] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.647680][T14843] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.655094][T14843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.714426][T14843] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  605.015354][T14861] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode
[  605.022509][T14861] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode
[  605.511055][T14875] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3068'.
[  606.158091][ T5775] Bluetooth: hci4: command 0x0406 tx timeout
[  607.448332][T14894] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  607.580640][T14894] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  607.969442][T14909] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3079'.
[  610.018764][T14941] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3091'.
[  610.411940][T14950] netlink: 'syz.2.3094': attribute type 21 has an invalid length.
[  610.704876][T14955] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3095'.
[  611.077663][T14961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3099'.
[  611.105098][T14961] openvswitch: netlink: Key type 4112 is out of range max 32
[  612.099637][T14975] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3103'.
[  613.326618][T14990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3110'.
[  613.345176][T14993] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3111'.
[  613.415170][T14990] openvswitch: netlink: Key type 4112 is out of range max 32
[  614.736898][T15006] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3114'.
[  614.882809][T15011] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3116'.
[  616.009135][T15028] netlink: 'syz.2.3123': attribute type 3 has an invalid length.
[  616.057460][T15028] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3123'.
[  616.386458][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  616.978449][T15041] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3127'.
[  617.513102][T15048] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3130'.
[  617.535902][T15048] openvswitch: netlink: Key type 4112 is out of range max 32
[  618.212061][T15069] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3137'.
[  619.946522][T15088] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3142'.
[  619.976146][T15088] openvswitch: netlink: Key type 4112 is out of range max 32
[  620.963970][T15093] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3145'.
[  622.252982][T15119] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3152'.
[  622.809423][T15124] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3156'.
[  622.855619][T15124] openvswitch: netlink: Key type 4112 is out of range max 32
[  623.425765][T15131] netlink: 'syz.1.3153': attribute type 10 has an invalid length.
[  624.151926][T15131] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.197414][T15131] bridge_slave_1: left allmulticast mode
[  624.203174][T15131] bridge_slave_1: left promiscuous mode
[  624.270256][T15131] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.405772][T15131] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  624.573890][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  624.580362][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  626.057468][T15174] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3168'.
[  626.164048][T15174] openvswitch: netlink: Key type 4112 is out of range max 32
[  627.351635][T15192] netlink: 'syz.0.3175': attribute type 10 has an invalid length.
[  627.561188][T15194] netlink: 'syz.3.3176': attribute type 21 has an invalid length.
[  627.574432][T15194] netlink: 'syz.3.3176': attribute type 6 has an invalid length.
[  627.596301][T15194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3176'.
[  628.603949][T15208] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3182'.
[  628.651362][T15208] openvswitch: netlink: Key type 4112 is out of range max 32
[  629.779103][T15225] netlink: 'syz.3.3187': attribute type 10 has an invalid length.
[  630.294347][T15236] aaaaaaaaaaaaaaa: entered promiscuous mode
[  630.838998][T15245] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3194'.
[  630.860622][T15245] openvswitch: netlink: Key type 4112 is out of range max 32
[  631.088423][T15257] netlink: 'syz.2.3198': attribute type 10 has an invalid length.
[  631.196047][T15257] team0: Port device wlan1 added
[  631.286922][T15256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  632.726124][T15282] netlink: 'syz.2.3202': attribute type 10 has an invalid length.
[  633.434194][T15296] syzkaller0: entered promiscuous mode
[  633.454794][T15296] syzkaller0: entered allmulticast mode
[  633.864608][T15310] FAULT_INJECTION: forcing a failure.
[  633.864608][T15310] name failslab, interval 1, probability 0, space 0, times 0
[  633.880601][T15310] CPU: 1 PID: 15310 Comm: syz.2.3213 Not tainted syzkaller #0
[  633.888155][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  633.898250][T15310] Call Trace:
[  633.901581][T15310]  <TASK>
[  633.904577][T15310]  dump_stack_lvl+0x18c/0x250
[  633.909344][T15310]  ? show_regs_print_info+0x20/0x20
[  633.914629][T15310]  ? load_image+0x420/0x420
[  633.919220][T15310]  ? mark_lock+0x94/0x320
[  633.923623][T15310]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  633.929656][T15310]  should_fail_ex+0x39d/0x4d0
[  633.934410][T15310]  should_failslab+0x9/0x20
[  633.938990][T15310]  slab_pre_alloc_hook+0x59/0x310
[  633.944161][T15310]  ? sctp_add_bind_addr+0x8c/0x360
[  633.949336][T15310]  __kmem_cache_alloc_node+0x53/0x250
[  633.954787][T15310]  ? sctp_add_bind_addr+0x8c/0x360
[  633.959955][T15310]  kmalloc_trace+0x2a/0xe0
[  633.964428][T15310]  sctp_add_bind_addr+0x8c/0x360
[  633.969445][T15310]  sctp_copy_local_addr_list+0x315/0x4f0
[  633.975137][T15310]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  633.980915][T15310]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  633.987037][T15310]  ? sctp_v4_is_any+0x35/0x60
[  633.991758][T15310]  ? sctp_copy_one_addr+0x8c/0x350
[  633.996937][T15310]  sctp_bind_addr_copy+0xb3/0x3c0
[  634.002030][T15310]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  634.008425][T15310]  sctp_connect_new_asoc+0x2f9/0x6a0
[  634.013772][T15310]  ? __sctp_connect+0xd80/0xd80
[  634.018716][T15310]  ? __local_bh_enable_ip+0x13a/0x1c0
[  634.024166][T15310]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  634.029778][T15310]  ? security_sctp_bind_connect+0x89/0xb0
[  634.035565][T15310]  sctp_sendmsg+0x1575/0x28c0
[  634.040308][T15310]  ? sctp_getsockopt+0xb60/0xb60
[  634.045295][T15310]  ? aa_sk_perm+0x83c/0x970
[  634.049869][T15310]  ? aa_af_perm+0x330/0x330
[  634.054429][T15310]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  634.060897][T15310]  ? sock_rps_record_flow+0x19/0x3f0
[  634.066238][T15310]  ? inet_sendmsg+0xe9/0x2f0
[  634.070899][T15310]  ? inet_send_prepare+0x260/0x260
[  634.076063][T15310]  ____sys_sendmsg+0x5ba/0x960
[  634.080882][T15310]  ? __lock_acquire+0x7d40/0x7d40
[  634.085959][T15310]  ? __asan_memset+0x22/0x40
[  634.090629][T15310]  ? __sys_sendmsg_sock+0x30/0x30
[  634.095741][T15310]  ? __import_iovec+0x5f2/0x850
[  634.100661][T15310]  ? import_iovec+0x73/0xa0
[  634.105224][T15310]  ___sys_sendmsg+0x2a6/0x360
[  634.109947][T15310]  ? get_pid_task+0x20/0x1e0
[  634.114621][T15310]  ? __sys_sendmsg+0x2a0/0x2a0
[  634.119457][T15310]  ? __lock_acquire+0x7d40/0x7d40
[  634.124569][T15310]  __se_sys_sendmsg+0x1c2/0x2b0
[  634.129467][T15310]  ? __x64_sys_sendmsg+0x80/0x80
[  634.134475][T15310]  ? lockdep_hardirqs_on+0x98/0x150
[  634.139738][T15310]  do_syscall_64+0x55/0xa0
[  634.144200][T15310]  ? clear_bhb_loop+0x40/0x90
[  634.148925][T15310]  ? clear_bhb_loop+0x40/0x90
[  634.153668][T15310]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  634.159613][T15310] RIP: 0033:0x7f119c99cdd9
[  634.164076][T15310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  634.183740][T15310] RSP: 002b:00007f119d94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  634.192218][T15310] RAX: ffffffffffffffda RBX: 00007f119cc15fa0 RCX: 00007f119c99cdd9
[  634.200248][T15310] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003
[  634.208274][T15310] RBP: 00007f119d94a090 R08: 0000000000000000 R09: 0000000000000000
[  634.216302][T15310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  634.224319][T15310] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  634.232359][T15310]  </TASK>
[  635.853742][T15338] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  635.861476][T15338] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  638.749806][T15369] netlink: 'syz.1.3232': attribute type 21 has an invalid length.
[  638.765639][T15369] netlink: 'syz.1.3232': attribute type 6 has an invalid length.
[  638.783362][T15369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3232'.
[  638.996437][T15378] FAULT_INJECTION: forcing a failure.
[  638.996437][T15378] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  639.019811][T15378] CPU: 0 PID: 15378 Comm: syz.3.3236 Not tainted syzkaller #0
[  639.027383][T15378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  639.037535][T15378] Call Trace:
[  639.040875][T15378]  <TASK>
[  639.043875][T15378]  dump_stack_lvl+0x18c/0x250
[  639.048659][T15378]  ? show_regs_print_info+0x20/0x20
[  639.053959][T15378]  ? load_image+0x420/0x420
[  639.058546][T15378]  ? __lock_acquire+0x7d40/0x7d40
[  639.063645][T15378]  should_fail_ex+0x39d/0x4d0
[  639.068450][T15378]  _copy_from_user+0x2f/0xe0
[  639.073152][T15378]  __copy_msghdr+0x3bb/0x580
[  639.077838][T15378]  ___sys_sendmsg+0x214/0x360
[  639.082589][T15378]  ? __sys_sendmsg+0x2a0/0x2a0
[  639.087463][T15378]  ? __lock_acquire+0x7d40/0x7d40
[  639.092736][T15378]  __se_sys_sendmsg+0x1c2/0x2b0
[  639.097679][T15378]  ? __x64_sys_sendmsg+0x80/0x80
[  639.102729][T15378]  ? lockdep_hardirqs_on+0x98/0x150
[  639.108020][T15378]  do_syscall_64+0x55/0xa0
[  639.112584][T15378]  ? clear_bhb_loop+0x40/0x90
[  639.117345][T15378]  ? clear_bhb_loop+0x40/0x90
[  639.122098][T15378]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  639.128127][T15378] RIP: 0033:0x7f05f459cdd9
[  639.132600][T15378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  639.152277][T15378] RSP: 002b:00007f05f54a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  639.160770][T15378] RAX: ffffffffffffffda RBX: 00007f05f4815fa0 RCX: 00007f05f459cdd9
[  639.168826][T15378] RDX: 7e8166965e22236a RSI: 0000200000007940 RDI: 0000000000000003
[  639.176874][T15378] RBP: 00007f05f54a2090 R08: 0000000000000000 R09: 0000000000000000
[  639.184913][T15378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  639.192946][T15378] R13: 00007f05f4816038 R14: 00007f05f4815fa0 R15: 00007ffc2f3f4ee8
[  639.201058][T15378]  </TASK>
[  639.390307][T15383] netlink: 'syz.0.3239': attribute type 10 has an invalid length.
[  639.725032][T15390] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3242'.
[  639.741480][T15390] openvswitch: netlink: Key type 4112 is out of range max 32
[  640.395690][T15383] team0 (unregistering): Port device team_slave_0 removed
[  640.429280][T15383] team0 (unregistering): Port device team_slave_1 removed
[  640.469351][T15387] netlink: 'syz.0.3239': attribute type 10 has an invalid length.
[  640.487548][T15387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3239'.
[  640.502777][T15387] batman_adv: batadv0: Adding interface: veth0_vlan
[  640.514979][T15387] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  640.543639][T15387] batman_adv: batadv0: Interface activated: veth0_vlan
[  640.553520][T15392] netlink: 'syz.1.3240': attribute type 39 has an invalid length.
[  641.023257][T15406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3247'.
[  641.119248][T15406] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3247'.
[  641.135637][T15410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3247'.
[  641.230243][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'.
[  641.529052][T15420] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3252'.
[  641.560710][T15420] openvswitch: netlink: Key type 4112 is out of range max 32
[  641.770645][T15427] netlink: 'syz.2.3254': attribute type 10 has an invalid length.
[  641.784380][ T5775] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1
[  641.787195][ T5775] Bluetooth: hci4: hardware error 0x00
[  641.993018][T15428] Bluetooth: hci2: command 0x0406 tx timeout
[  642.422566][T15427] team0 (unregistering): Port device team_slave_0 removed
[  642.538189][T15427] team0 (unregistering): Port device team_slave_1 removed
[  642.607901][T15427] team0 (unregistering): Port device wlan1 removed
[  642.653460][T15429] netlink: 'syz.2.3254': attribute type 10 has an invalid length.
[  642.692346][T15429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3254'.
[  642.717801][T15429] batman_adv: batadv0: Adding interface: veth0_vlan
[  642.724890][T15429] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.756438][T15429] batman_adv: batadv0: Interface activated: veth0_vlan
[  643.090916][T15452] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3264'.
[  643.121023][T15452] openvswitch: netlink: Key type 4112 is out of range max 32
[  643.905063][ T5775] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  643.939626][T15472] netlink: 'syz.2.3272': attribute type 28 has an invalid length.
[  644.025664][T15475] netlink: 'syz.1.3273': attribute type 10 has an invalid length.
[  644.410021][T15475] team0 (unregistering): Port device team_slave_0 removed
[  644.604424][T15475] team0 (unregistering): Port device team_slave_1 removed
[  644.614997][T15491] __nla_validate_parse: 1 callbacks suppressed
[  644.615034][T15491] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3278'.
[  644.641704][T15491] openvswitch: netlink: Key type 4112 is out of range max 32
[  644.694427][T15475] team0 (unregistering): Port device geneve1 removed
[  644.735922][T15481] netlink: 'syz.1.3273': attribute type 10 has an invalid length.
[  644.744256][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3273'.
[  644.760804][T15493] netlink: 'syz.2.3279': attribute type 10 has an invalid length.
[  644.772413][T15493] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3279'.
[  644.795097][T15493] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  644.991048][T15499] FAULT_INJECTION: forcing a failure.
[  644.991048][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  645.020768][T15499] CPU: 0 PID: 15499 Comm: syz.0.3281 Not tainted syzkaller #0
[  645.028339][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  645.038455][T15499] Call Trace:
[  645.041778][T15499]  <TASK>
[  645.044752][T15499]  dump_stack_lvl+0x18c/0x250
[  645.049582][T15499]  ? show_regs_print_info+0x20/0x20
[  645.054862][T15499]  ? load_image+0x420/0x420
[  645.059525][T15499]  ? __lock_acquire+0x7d40/0x7d40
[  645.064614][T15499]  should_fail_ex+0x39d/0x4d0
[  645.069376][T15499]  _copy_from_user+0x2f/0xe0
[  645.074072][T15499]  __copy_msghdr+0x3bb/0x580
[  645.078734][T15499]  ___sys_sendmsg+0x214/0x360
[  645.083463][T15499]  ? get_pid_task+0x20/0x1e0
[  645.088114][T15499]  ? __sys_sendmsg+0x2a0/0x2a0
[  645.092971][T15499]  ? __lock_acquire+0x7d40/0x7d40
[  645.098091][T15499]  __se_sys_sendmsg+0x1c2/0x2b0
[  645.102998][T15499]  ? __x64_sys_sendmsg+0x80/0x80
[  645.108149][T15499]  ? lockdep_hardirqs_on+0x98/0x150
[  645.113414][T15499]  do_syscall_64+0x55/0xa0
[  645.118074][T15499]  ? clear_bhb_loop+0x40/0x90
[  645.122826][T15499]  ? clear_bhb_loop+0x40/0x90
[  645.127568][T15499]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  645.133526][T15499] RIP: 0033:0x7f9dc879cdd9
[  645.138005][T15499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  645.157669][T15499] RSP: 002b:00007f9dc95f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  645.166140][T15499] RAX: ffffffffffffffda RBX: 00007f9dc8a15fa0 RCX: 00007f9dc879cdd9
[  645.174151][T15499] RDX: 0000000020040000 RSI: 0000200000000240 RDI: 0000000000000003
[  645.182162][T15499] RBP: 00007f9dc95f2090 R08: 0000000000000000 R09: 0000000000000000
[  645.190182][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  645.198210][T15499] R13: 00007f9dc8a16038 R14: 00007f9dc8a15fa0 R15: 00007ffd2fc5d9a8
[  645.206250][T15499]  </TASK>
[  645.637161][T15501] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3280'.
[  645.830456][T15493] batman_adv: batadv0: Removing interface: veth0_vlan
[  645.910989][T15496] netlink: 'syz.3.3280': attribute type 5 has an invalid length.
[  645.919365][T15497] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3280'.
[  645.931394][T15497] bridge_slave_1: default FDB implementation only supports local addresses
[  646.245623][T15524] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3289'.
[  646.278005][T15524] openvswitch: netlink: Key type 4112 is out of range max 32
[  646.380938][T15533] netlink: 'syz.2.3292': attribute type 29 has an invalid length.
[  646.405149][T15533] netlink: 'syz.2.3292': attribute type 29 has an invalid length.
[  646.424377][T15529] bˆ¡cÊRݘOC‰ÿæ: renamed from lo (while UP)
[  646.438770][T15533] netlink: 'syz.2.3292': attribute type 29 has an invalid length.
[  646.471286][T15533] netlink: 'syz.2.3292': attribute type 29 has an invalid length.
[  646.521059][T15533] netlink: 'syz.2.3292': attribute type 29 has an invalid length.
[  647.230284][T15560] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3302'.
[  647.240746][T15560] openvswitch: netlink: Key type 4112 is out of range max 32
[  647.638157][T15585] FAULT_INJECTION: forcing a failure.
[  647.638157][T15585] name failslab, interval 1, probability 0, space 0, times 0
[  647.674609][T15585] CPU: 0 PID: 15585 Comm: syz.0.3310 Not tainted syzkaller #0
[  647.682367][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  647.692486][T15585] Call Trace:
[  647.695813][T15585]  <TASK>
[  647.698788][T15585]  dump_stack_lvl+0x18c/0x250
[  647.703552][T15585]  ? show_regs_print_info+0x20/0x20
[  647.708813][T15585]  ? load_image+0x420/0x420
[  647.713375][T15585]  ? __might_sleep+0xe0/0xe0
[  647.718016][T15585]  ? __lock_acquire+0x7d40/0x7d40
[  647.723092][T15585]  should_fail_ex+0x39d/0x4d0
[  647.727839][T15585]  should_failslab+0x9/0x20
[  647.732425][T15585]  slab_pre_alloc_hook+0x59/0x310
[  647.737517][T15585]  ? kernfs_fop_write_iter+0x159/0x520
[  647.743080][T15585]  ? kernfs_fop_write_iter+0x159/0x520
[  647.748614][T15585]  __kmem_cache_alloc_node+0x53/0x250
[  647.754054][T15585]  ? kernfs_fop_write_iter+0x159/0x520
[  647.759573][T15585]  __kmalloc+0xa4/0x230
[  647.763924][T15585]  kernfs_fop_write_iter+0x159/0x520
[  647.769298][T15585]  vfs_write+0x46c/0x990
[  647.773628][T15585]  ? file_end_write+0x250/0x250
[  647.778648][T15585]  ? __fget_files+0x43d/0x4b0
[  647.783401][T15585]  ? __fdget_pos+0x2a3/0x330
[  647.788140][T15585]  ? ksys_write+0x75/0x260
[  647.792892][T15585]  ksys_write+0x150/0x260
[  647.797289][T15585]  ? __ia32_sys_read+0x90/0x90
[  647.802116][T15585]  ? lockdep_hardirqs_on+0x98/0x150
[  647.807373][T15585]  do_syscall_64+0x55/0xa0
[  647.811819][T15585]  ? clear_bhb_loop+0x40/0x90
[  647.816539][T15585]  ? clear_bhb_loop+0x40/0x90
[  647.821260][T15585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  647.827190][T15585] RIP: 0033:0x7f9dc879cdd9
[  647.831636][T15585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.851373][T15585] RSP: 002b:00007f9dc95d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  647.859826][T15585] RAX: ffffffffffffffda RBX: 00007f9dc8a16090 RCX: 00007f9dc879cdd9
[  647.867899][T15585] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a
[  647.875912][T15585] RBP: 00007f9dc95d1090 R08: 0000000000000000 R09: 0000000000000000
[  647.883929][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.891952][T15585] R13: 00007f9dc8a16128 R14: 00007f9dc8a16090 R15: 00007ffd2fc5d9a8
[  647.900003][T15585]  </TASK>
[  647.958468][T15585] netlink: 16795 bytes leftover after parsing attributes in process `syz.0.3310'.
[  648.281245][T15599] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3318'.
[  648.291224][T15599] openvswitch: netlink: Key type 4112 is out of range max 32
[  648.879407][T15626] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3330'.
[  649.047241][T15628] openvswitch: netlink: Key type 4112 is out of range max 32
[  650.233439][T15652] validate_nla: 3 callbacks suppressed
[  650.233457][T15652] netlink: 'syz.3.3341': attribute type 58 has an invalid length.
[  650.247715][T15652] __nla_validate_parse: 2 callbacks suppressed
[  650.247731][T15652] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3341'.
[  650.296620][T15652] netlink: 'syz.3.3341': attribute type 2 has an invalid length.
[  650.683127][T15658] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3344'.
[  650.704858][T15658] openvswitch: netlink: Key type 4112 is out of range max 32
[  651.009337][T15666] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3350'.
[  651.251684][T15675] netlink: 'syz.3.3347': attribute type 39 has an invalid length.
[  651.472382][T15682] netlink: 'syz.2.3354': attribute type 2 has an invalid length.
[  651.744431][T15679] netlink: 'syz.2.3354': attribute type 58 has an invalid length.
[  651.756175][T15679] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3354'.
[  652.087879][T15697] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3358'.
[  652.117913][T15697] openvswitch: netlink: Key type 4112 is out of range max 32
[  652.341790][T15700] syzkaller0: entered promiscuous mode
[  652.348302][T15700] syzkaller0: entered allmulticast mode
[  653.236595][T15725] FAULT_INJECTION: forcing a failure.
[  653.236595][T15725] name failslab, interval 1, probability 0, space 0, times 0
[  653.249817][T15725] CPU: 1 PID: 15725 Comm: syz.2.3370 Not tainted syzkaller #0
[  653.257360][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.267511][T15725] Call Trace:
[  653.270838][T15725]  <TASK>
[  653.273798][T15725]  dump_stack_lvl+0x18c/0x250
[  653.278538][T15725]  ? show_regs_print_info+0x20/0x20
[  653.283812][T15725]  ? load_image+0x420/0x420
[  653.288406][T15725]  should_fail_ex+0x39d/0x4d0
[  653.293155][T15725]  should_failslab+0x9/0x20
[  653.297728][T15725]  slab_pre_alloc_hook+0x59/0x310
[  653.302819][T15725]  ? do_raw_spin_lock+0x11f/0x2c0
[  653.307908][T15725]  ? tipc_nametbl_lookup_group+0x78a/0xc10
[  653.313799][T15725]  __kmem_cache_alloc_node+0x53/0x250
[  653.319247][T15725]  ? tipc_nametbl_lookup_group+0x78a/0xc10
[  653.325129][T15725]  kmalloc_trace+0x2a/0xe0
[  653.329638][T15725]  tipc_nametbl_lookup_group+0x78a/0xc10
[  653.335366][T15725]  ? tipc_nametbl_lookup_group+0xac/0xc10
[  653.341246][T15725]  __tipc_sendmsg+0xfde/0x2bb0
[  653.346139][T15725]  ? rht_unlock+0x1d0/0x1d0
[  653.350719][T15725]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  653.356514][T15725]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  653.362327][T15725]  ? perf_trace_lock+0x304/0x3b0
[  653.367322][T15725]  ? perf_trace_lock+0x304/0x3b0
[  653.372353][T15725]  ? mark_lock+0x94/0x320
[  653.376753][T15725]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  653.382819][T15725]  ? __local_bh_enable_ip+0x13a/0x1c0
[  653.388254][T15725]  ? lockdep_hardirqs_on+0x98/0x150
[  653.393510][T15725]  ? __local_bh_enable_ip+0x13a/0x1c0
[  653.398954][T15725]  ? _local_bh_enable+0xa0/0xa0
[  653.403902][T15725]  tipc_sendmsg+0x55/0x70
[  653.408295][T15725]  ? tipc_recvmsg+0x1400/0x1400
[  653.413588][T15725]  ____sys_sendmsg+0x5ba/0x960
[  653.418406][T15725]  ? __lock_acquire+0x7d40/0x7d40
[  653.423512][T15725]  ? __sys_sendmsg_sock+0x30/0x30
[  653.428605][T15725]  ? __import_iovec+0x3fa/0x850
[  653.433543][T15725]  ? import_iovec+0x73/0xa0
[  653.438138][T15725]  ___sys_sendmsg+0x2a6/0x360
[  653.442897][T15725]  ? __sys_sendmsg+0x2a0/0x2a0
[  653.447773][T15725]  ? __lock_acquire+0x7d40/0x7d40
[  653.452926][T15725]  __se_sys_sendmsg+0x1c2/0x2b0
[  653.457850][T15725]  ? __x64_sys_sendmsg+0x80/0x80
[  653.462883][T15725]  ? lockdep_hardirqs_on+0x98/0x150
[  653.468153][T15725]  do_syscall_64+0x55/0xa0
[  653.472618][T15725]  ? clear_bhb_loop+0x40/0x90
[  653.477359][T15725]  ? clear_bhb_loop+0x40/0x90
[  653.482104][T15725]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  653.488059][T15725] RIP: 0033:0x7f119c99cdd9
[  653.492535][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.512209][T15725] RSP: 002b:00007f119d94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.520702][T15725] RAX: ffffffffffffffda RBX: 00007f119cc15fa0 RCX: 00007f119c99cdd9
[  653.528732][T15725] RDX: 00000000240048c0 RSI: 00002000000001c0 RDI: 0000000000000005
[  653.536769][T15725] RBP: 00007f119d94a090 R08: 0000000000000000 R09: 0000000000000000
[  653.544826][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.552852][T15725] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  653.560921][T15725]  </TASK>
[  653.613834][T15727] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3371'.
[  653.649063][T15727] openvswitch: netlink: Key type 4112 is out of range max 32
[  653.816809][T15738] FAULT_INJECTION: forcing a failure.
[  653.816809][T15738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.837310][T15738] CPU: 1 PID: 15738 Comm: syz.3.3373 Not tainted syzkaller #0
[  653.844863][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.854977][T15738] Call Trace:
[  653.858298][T15738]  <TASK>
[  653.861270][T15738]  dump_stack_lvl+0x18c/0x250
[  653.866016][T15738]  ? show_regs_print_info+0x20/0x20
[  653.871274][T15738]  ? load_image+0x420/0x420
[  653.875838][T15738]  ? __might_fault+0xaa/0x120
[  653.880559][T15738]  ? __lock_acquire+0x7d40/0x7d40
[  653.885629][T15738]  should_fail_ex+0x39d/0x4d0
[  653.890377][T15738]  _copy_from_user+0x2f/0xe0
[  653.895018][T15738]  generic_map_update_batch+0x59a/0x810
[  653.900642][T15738]  ? rcu_read_unlock+0xa0/0xa0
[  653.905453][T15738]  ? __fdget+0x180/0x210
[  653.909751][T15738]  ? rcu_read_unlock+0xa0/0xa0
[  653.914554][T15738]  bpf_map_do_batch+0x3d7/0x610
[  653.919457][T15738]  __sys_bpf+0x381/0x890
[  653.923753][T15738]  ? bpf_link_show_fdinfo+0x390/0x390
[  653.929189][T15738]  ? lock_chain_count+0x20/0x20
[  653.934097][T15738]  __x64_sys_bpf+0x7c/0x90
[  653.938570][T15738]  do_syscall_64+0x55/0xa0
[  653.943184][T15738]  ? clear_bhb_loop+0x40/0x90
[  653.947923][T15738]  ? clear_bhb_loop+0x40/0x90
[  653.952660][T15738]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  653.958619][T15738] RIP: 0033:0x7f05f459cdd9
[  653.963085][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.982755][T15738] RSP: 002b:00007f05f54a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  653.991227][T15738] RAX: ffffffffffffffda RBX: 00007f05f4815fa0 RCX: 00007f05f459cdd9
[  653.999257][T15738] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  654.007287][T15738] RBP: 00007f05f54a2090 R08: 0000000000000000 R09: 0000000000000000
[  654.015323][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  654.023346][T15738] R13: 00007f05f4816038 R14: 00007f05f4815fa0 R15: 00007ffc2f3f4ee8
[  654.031384][T15738]  </TASK>
[  654.587426][T15754] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3377'.
[  654.597868][T15754] netlink: del zone limit has 4 unknown bytes
[  656.117928][T15746] netlink: 'syz.0.3377': attribute type 9 has an invalid length.
[  656.374510][T15761] netlink: 'syz.2.3379': attribute type 10 has an invalid length.
[  656.585296][T15764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3382'.
[  656.605455][T15764] openvswitch: netlink: Key type 4112 is out of range max 32
[  658.426159][T15806] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3397'.
[  658.449702][T15806] tc_dump_action: action bad kind
[  658.516733][T15804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3396'.
[  658.550149][T15804] openvswitch: netlink: Key type 4112 is out of range max 32
[  660.042838][T15839] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  660.070762][T15839] netlink: 'syz.1.3409': attribute type 3 has an invalid length.
[  660.097979][T15839] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.3409'.
[  660.413690][T15849] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3413'.
[  660.473222][T15849] netlink: 'syz.1.3413': attribute type 10 has an invalid length.
[  660.495907][T15845] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3410'.
[  660.506997][T15845] openvswitch: netlink: Message has 8454 unknown bytes.
[  660.521189][T15849] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3413'.
[  660.749463][T15854] netlink: 'syz.0.3415': attribute type 10 has an invalid length.
[  661.861347][T15877] netlink: 'syz.1.3423': attribute type 33 has an invalid length.
[  661.870451][T15877] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3423'.
[  662.074188][T11963] wlan1: Trigger new scan to find an IBSS to join
[  662.665393][T15886] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3426'.
[  662.677219][T15886] openvswitch: netlink: Key type 4112 is out of range max 32
[  666.066601][T11968] wlan1: Trigger new scan to find an IBSS to join
[  667.935301][T11967] wlan1: Creating new IBSS network, BSSID 82:0e:98:4f:88:24
[  669.501746][T15956] netlink: 'syz.2.3450': attribute type 1 has an invalid length.
[  669.521219][T15956] netlink: 'syz.2.3450': attribute type 3 has an invalid length.
[  669.562036][T15956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3450'.
[  671.464179][T16001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3463'.
[  672.305389][T16024] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3471'.
[  672.454067][T16024] veth0_macvtap: left promiscuous mode
[  672.500345][T16026] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3472'.
[  672.542149][T16026] openvswitch: netlink: Key type 4112 is out of range max 32
[  674.194742][T16051] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3479'.
[  674.418028][T16055] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3480'.
[  674.449299][T16055] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3480'.
[  674.636734][T16061] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3482'.
[  674.671507][T16061] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3482'.
[  674.770741][T16061] bond0: (slave bond_slave_0): Releasing backup interface
[  674.888582][T16061] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  674.954986][T16067] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3484'.
[  674.984756][T16067] openvswitch: netlink: Key type 4112 is out of range max 32
[  675.387211][T16075] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3487'.
[  676.092116][T16075] veth0_macvtap: left promiscuous mode
[  676.949102][T16100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3494'.
[  677.011998][T16100] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3494'.
[  677.148422][T16102] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3494'.
[  677.309053][T16101] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3495'.
[  677.364924][T16101] openvswitch: netlink: Key type 4112 is out of range max 32
[  678.764929][T16117] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3500'.
[  679.399870][T16125] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3502'.
[  679.473064][T16125] veth0_macvtap: left promiscuous mode
[  680.614881][T16144] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3508'.
[  680.647824][T16145] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3509'.
[  680.653715][T16144] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3508'.
[  680.702295][T16144] bond0: (slave bond_slave_0): Releasing backup interface
[  680.729698][T16144] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  681.291331][T16166] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3515'.
[  682.384420][T16187] netlink: 'syz.0.3524': attribute type 10 has an invalid length.
[  682.426973][T16187] mac80211_hwsim hwsim38 wlan1: left promiscuous mode
[  682.434874][T16187] mac80211_hwsim hwsim38 wlan1: left allmulticast mode
[  682.477472][T16185] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3523'.
[  682.497709][T16186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  682.514779][T16185] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3523'.
[  682.535840][T16185] bond0: (slave bond_slave_0): Releasing backup interface
[  682.561090][T16185] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  685.477525][T16230] FAULT_INJECTION: forcing a failure.
[  685.477525][T16230] name failslab, interval 1, probability 0, space 0, times 0
[  685.513778][T16230] CPU: 0 PID: 16230 Comm: syz.0.3542 Not tainted syzkaller #0
[  685.521337][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  685.531447][T16230] Call Trace:
[  685.534764][T16230]  <TASK>
[  685.537735][T16230]  dump_stack_lvl+0x18c/0x250
[  685.542485][T16230]  ? sctp_sendmsg+0x1575/0x28c0
[  685.547386][T16230]  ? ___sys_sendmsg+0x2a6/0x360
[  685.552291][T16230]  ? show_regs_print_info+0x20/0x20
[  685.557554][T16230]  ? load_image+0x420/0x420
[  685.562131][T16230]  should_fail_ex+0x39d/0x4d0
[  685.566878][T16230]  should_failslab+0x9/0x20
[  685.571441][T16230]  slab_pre_alloc_hook+0x59/0x310
[  685.576535][T16230]  ? sctp_add_bind_addr+0x8c/0x360
[  685.581687][T16230]  __kmem_cache_alloc_node+0x53/0x250
[  685.587100][T16230]  ? sctp_add_bind_addr+0x8c/0x360
[  685.592246][T16230]  kmalloc_trace+0x2a/0xe0
[  685.596709][T16230]  sctp_add_bind_addr+0x8c/0x360
[  685.601682][T16230]  sctp_copy_local_addr_list+0x315/0x4f0
[  685.607347][T16230]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  685.613125][T16230]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  685.619229][T16230]  ? sctp_v4_is_any+0x35/0x60
[  685.623930][T16230]  ? sctp_copy_one_addr+0x8c/0x350
[  685.629066][T16230]  sctp_bind_addr_copy+0xb3/0x3c0
[  685.634132][T16230]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  685.640493][T16230]  sctp_connect_new_asoc+0x2f9/0x6a0
[  685.645819][T16230]  ? __sctp_connect+0xd80/0xd80
[  685.650695][T16230]  ? __local_bh_enable_ip+0x13a/0x1c0
[  685.656103][T16230]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  685.661695][T16230]  ? security_sctp_bind_connect+0x89/0xb0
[  685.667450][T16230]  sctp_sendmsg+0x1575/0x28c0
[  685.672256][T16230]  ? sctp_getsockopt+0xb60/0xb60
[  685.677235][T16230]  ? aa_sk_perm+0x83c/0x970
[  685.681783][T16230]  ? aa_af_perm+0x330/0x330
[  685.686317][T16230]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  685.692762][T16230]  ? sock_rps_record_flow+0x19/0x3f0
[  685.698080][T16230]  ? inet_sendmsg+0xe9/0x2f0
[  685.702701][T16230]  ? inet_send_prepare+0x260/0x260
[  685.707839][T16230]  ____sys_sendmsg+0x5ba/0x960
[  685.712654][T16230]  ? __lock_acquire+0x7d40/0x7d40
[  685.717712][T16230]  ? __asan_memset+0x22/0x40
[  685.722327][T16230]  ? __sys_sendmsg_sock+0x30/0x30
[  685.727371][T16230]  ? __import_iovec+0x5f2/0x850
[  685.732251][T16230]  ? import_iovec+0x73/0xa0
[  685.736798][T16230]  ___sys_sendmsg+0x2a6/0x360
[  685.741501][T16230]  ? get_pid_task+0x20/0x1e0
[  685.746130][T16230]  ? __sys_sendmsg+0x2a0/0x2a0
[  685.750939][T16230]  ? __lock_acquire+0x7d40/0x7d40
[  685.756016][T16230]  __se_sys_sendmsg+0x1c2/0x2b0
[  685.760898][T16230]  ? __x64_sys_sendmsg+0x80/0x80
[  685.765883][T16230]  ? lockdep_hardirqs_on+0x98/0x150
[  685.771122][T16230]  do_syscall_64+0x55/0xa0
[  685.775569][T16230]  ? clear_bhb_loop+0x40/0x90
[  685.780277][T16230]  ? clear_bhb_loop+0x40/0x90
[  685.784994][T16230]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  685.790917][T16230] RIP: 0033:0x7f9dc879cdd9
[  685.795359][T16230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.814985][T16230] RSP: 002b:00007f9dc95f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  685.823423][T16230] RAX: ffffffffffffffda RBX: 00007f9dc8a15fa0 RCX: 00007f9dc879cdd9
[  685.831442][T16230] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003
[  685.839441][T16230] RBP: 00007f9dc95f2090 R08: 0000000000000000 R09: 0000000000000000
[  685.847433][T16230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.855426][T16230] R13: 00007f9dc8a16038 R14: 00007f9dc8a15fa0 R15: 00007ffd2fc5d9a8
[  685.863433][T16230]  </TASK>
[  686.040761][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  686.047256][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  686.437226][T16241] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3546'.
[  686.599247][T16241] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  686.614732][T16241] CPU: 0 PID: 16241 Comm: syz.2.3546 Not tainted syzkaller #0
[  686.622305][T16241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  686.632417][T16241] Call Trace:
[  686.635737][T16241]  <TASK>
[  686.638697][T16241]  dump_stack_lvl+0x18c/0x250
[  686.643416][T16241]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  686.649613][T16241]  ? show_regs_print_info+0x20/0x20
[  686.654859][T16241]  ? load_image+0x420/0x420
[  686.659403][T16241]  ? sysfs_warn_dup+0x65/0xa0
[  686.664118][T16241]  sysfs_warn_dup+0x8e/0xa0
[  686.668649][T16241]  sysfs_do_create_link_sd+0xc0/0x110
[  686.674051][T16241]  device_add_class_symlinks+0x1cf/0x240
[  686.679821][T16241]  device_add+0x507/0xc20
[  686.684203][T16241]  wiphy_register+0x1dad/0x2ae0
[  686.689116][T16241]  ? cfg80211_event_work+0x40/0x40
[  686.694272][T16241]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  686.700379][T16241]  ieee80211_register_hw+0x3464/0x4250
[  686.705904][T16241]  ? ieee80211_tasklet_handler+0x20/0x20
[  686.711566][T16241]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  686.717507][T16241]  ? __debug_object_init+0xec/0x450
[  686.722753][T16241]  ? __asan_memset+0x22/0x40
[  686.727378][T16241]  ? __hrtimer_init+0x186/0x270
[  686.732265][T16241]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  686.738067][T16241]  ? mac80211_hwsim_free+0x220/0x220
[  686.743378][T16241]  ? rcu_is_watching+0x15/0xb0
[  686.748178][T16241]  ? kstrndup+0xbd/0x140
[  686.752460][T16241]  hwsim_new_radio_nl+0xdc9/0x1a90
[  686.757608][T16241]  ? __nla_validate+0x50/0x50
[  686.762325][T16241]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  686.768699][T16241]  ? __nla_parse+0x40/0x50
[  686.773152][T16241]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  686.779618][T16241]  genl_family_rcv_msg_doit+0x211/0x310
[  686.785205][T16241]  ? end_current_label_crit_section+0x170/0x170
[  686.791487][T16241]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  686.797424][T16241]  ? bpf_lsm_capable+0x9/0x10
[  686.802144][T16241]  ? security_capable+0x89/0xb0
[  686.807044][T16241]  genl_rcv_msg+0x619/0x7a0
[  686.811602][T16241]  ? genl_bind+0x360/0x360
[  686.816048][T16241]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  686.822422][T16241]  netlink_rcv_skb+0x241/0x4d0
[  686.827228][T16241]  ? genl_bind+0x360/0x360
[  686.831691][T16241]  ? netlink_ack+0x1180/0x1180
[  686.836530][T16241]  ? down_read+0x1ac/0x2e0
[  686.841004][T16241]  genl_rcv+0x28/0x40
[  686.845027][T16241]  netlink_unicast+0x751/0x8d0
[  686.849839][T16241]  netlink_sendmsg+0x8d0/0xbf0
[  686.854651][T16241]  ? netlink_getsockopt+0x590/0x590
[  686.859894][T16241]  ? aa_sock_msg_perm+0x94/0x150
[  686.864865][T16241]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  686.870197][T16241]  ? security_socket_sendmsg+0x80/0xa0
[  686.875682][T16241]  ? netlink_getsockopt+0x590/0x590
[  686.880949][T16241]  ____sys_sendmsg+0x5ba/0x960
[  686.885755][T16241]  ? __asan_memset+0x22/0x40
[  686.890385][T16241]  ? __sys_sendmsg_sock+0x30/0x30
[  686.895437][T16241]  ? __import_iovec+0x5f2/0x850
[  686.900321][T16241]  ? import_iovec+0x73/0xa0
[  686.904856][T16241]  ___sys_sendmsg+0x2a6/0x360
[  686.909575][T16241]  ? __sys_sendmsg+0x2a0/0x2a0
[  686.914427][T16241]  __se_sys_sendmsg+0x1c2/0x2b0
[  686.919347][T16241]  ? __x64_sys_sendmsg+0x80/0x80
[  686.924351][T16241]  ? syscall_enter_from_user_mode+0x2e/0x80
[  686.930297][T16241]  do_syscall_64+0x55/0xa0
[  686.934751][T16241]  ? clear_bhb_loop+0x40/0x90
[  686.939463][T16241]  ? clear_bhb_loop+0x40/0x90
[  686.944180][T16241]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  686.950112][T16241] RIP: 0033:0x7f119c99cdd9
[  686.954570][T16241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.974208][T16241] RSP: 002b:00007f119d94a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.982670][T16241] RAX: ffffffffffffffda RBX: 00007f119cc15fa0 RCX: 00007f119c99cdd9
[  686.990686][T16241] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e
[  686.998691][T16241] RBP: 00007f119ca32d69 R08: 0000000000000000 R09: 0000000000000000
[  687.006712][T16241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  687.014713][T16241] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  687.022732][T16241]  </TASK>
[  692.652103][T16307] netlink: 'syz.2.3569': attribute type 21 has an invalid length.
[  692.685461][T16307] netlink: 'syz.2.3569': attribute type 6 has an invalid length.
[  692.702599][T16307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3569'.
[  692.753028][T16311] macsec0: entered promiscuous mode
[  692.764747][T16311] macsec0: entered allmulticast mode
[  692.777145][T16311] veth1_macvtap: entered allmulticast mode
[  694.521325][T16356] netlink: 'syz.1.3587': attribute type 10 has an invalid length.
[  695.731438][T16382] netlink: 'syz.2.3596': attribute type 10 has an invalid length.
[  696.763508][T16405] netlink: 'syz.3.3602': attribute type 21 has an invalid length.
[  696.800109][T16405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3602'.
[  697.755159][T16430] FAULT_INJECTION: forcing a failure.
[  697.755159][T16430] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.794706][T16430] CPU: 0 PID: 16430 Comm: syz.2.3611 Not tainted syzkaller #0
[  697.802266][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  697.812357][T16430] Call Trace:
[  697.815675][T16430]  <TASK>
[  697.818630][T16430]  dump_stack_lvl+0x18c/0x250
[  697.823353][T16430]  ? show_regs_print_info+0x20/0x20
[  697.828589][T16430]  ? load_image+0x420/0x420
[  697.833146][T16430]  ? __lock_acquire+0x7d40/0x7d40
[  697.838215][T16430]  ? snprintf+0xe9/0x140
[  697.842494][T16430]  should_fail_ex+0x39d/0x4d0
[  697.847207][T16430]  _copy_to_user+0x2f/0xa0
[  697.851687][T16430]  simple_read_from_buffer+0xe7/0x150
[  697.857106][T16430]  proc_fail_nth_read+0x1e8/0x260
[  697.862184][T16430]  ? proc_fault_inject_write+0x360/0x360
[  697.867856][T16430]  ? fsnotify_perm+0x271/0x5e0
[  697.872667][T16430]  ? proc_fault_inject_write+0x360/0x360
[  697.878341][T16430]  vfs_read+0x28b/0x970
[  697.882542][T16430]  ? kernel_read+0x1e0/0x1e0
[  697.887180][T16430]  ? __fget_files+0x28/0x4b0
[  697.891836][T16430]  ? __fget_files+0x28/0x4b0
[  697.896456][T16430]  ? __fget_files+0x43d/0x4b0
[  697.901176][T16430]  ? __fdget_pos+0x2a3/0x330
[  697.905814][T16430]  ? ksys_read+0x75/0x260
[  697.910227][T16430]  ksys_read+0x150/0x260
[  697.914538][T16430]  ? vfs_write+0x990/0x990
[  697.919016][T16430]  ? lockdep_hardirqs_on+0x98/0x150
[  697.924263][T16430]  do_syscall_64+0x55/0xa0
[  697.928727][T16430]  ? clear_bhb_loop+0x40/0x90
[  697.933472][T16430]  ? clear_bhb_loop+0x40/0x90
[  697.938187][T16430]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  697.944133][T16430] RIP: 0033:0x7f119c95d60e
[  697.948574][T16430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  697.968273][T16430] RSP: 002b:00007f119d949fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  697.976722][T16430] RAX: ffffffffffffffda RBX: 00007f119d94a6c0 RCX: 00007f119c95d60e
[  697.984722][T16430] RDX: 000000000000000f RSI: 00007f119d94a0a0 RDI: 0000000000000004
[  697.992736][T16430] RBP: 00007f119d94a090 R08: 0000000000000000 R09: 0000000000000000
[  698.000733][T16430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.008731][T16430] R13: 00007f119cc16038 R14: 00007f119cc15fa0 R15: 00007ffdbb8d0138
[  698.016804][T16430]  </TASK>
[  698.021473][T11968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  698.441861][T16443] macsec0: entered promiscuous mode
[  698.453441][T16443] macsec0: entered allmulticast mode
[  698.461611][T16443] veth1_macvtap: entered allmulticast mode
[  698.663162][T16449] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3617'.
[  698.685490][T16449] openvswitch: netlink: Key type 4112 is out of range max 32
[  698.806130][T16454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3622'.
[  698.840667][T16454] netlink: 'syz.3.3622': attribute type 21 has an invalid length.
[  699.149141][T16460] netlink: 'syz.3.3625': attribute type 2 has an invalid length.
[  699.173155][T16460] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3625'.
[  699.608226][T16482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3634'.
[  699.660619][T16480] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3632'.
[  699.685934][T16480] openvswitch: netlink: Key type 4112 is out of range max 32
[  699.706598][T16482] netlink: 'syz.2.3634': attribute type 21 has an invalid length.
[  700.955632][T16521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3648'.
[  700.982628][T16520] netlink: 'syz.3.3647': attribute type 10 has an invalid length.
[  701.006736][T16520] netlink: 167716 bytes leftover after parsing attributes in process `syz.3.3647'.
[  701.048052][T16520] openvswitch: netlink: Message has 4 unknown bytes.
[  701.062554][T16521] netlink: 'syz.0.3648': attribute type 21 has an invalid length.
[  701.099368][T16522] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3646'.
[  701.116079][T16522] openvswitch: netlink: Key type 4112 is out of range max 32
[  701.312912][T16530] netlink: 'syz.0.3652': attribute type 1 has an invalid length.
[  701.324057][T16530] netlink: 'syz.0.3652': attribute type 3 has an invalid length.
[  701.342142][T16530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3652'.
[  701.497883][T16533] syzkaller0: entered promiscuous mode
[  701.521897][T16533] syzkaller0: entered allmulticast mode
[  702.533789][T16551] FAULT_INJECTION: forcing a failure.
[  702.533789][T16551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.552915][T16551] CPU: 1 PID: 16551 Comm: syz.1.3658 Not tainted syzkaller #0
[  702.560481][T16551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  702.570583][T16551] Call Trace:
[  702.573875][T16551]  <TASK>
[  702.576820][T16551]  dump_stack_lvl+0x18c/0x250
[  702.581523][T16551]  ? show_regs_print_info+0x20/0x20
[  702.586750][T16551]  ? load_image+0x420/0x420
[  702.591282][T16551]  ? __might_fault+0xaa/0x120
[  702.595968][T16551]  ? __lock_acquire+0x7d40/0x7d40
[  702.601005][T16551]  should_fail_ex+0x39d/0x4d0
[  702.605707][T16551]  _copy_from_iter+0x1d9/0x12e0
[  702.610596][T16551]  ? __virt_addr_valid+0x18c/0x540
[  702.615733][T16551]  ? __lock_acquire+0x7d40/0x7d40
[  702.620775][T16551]  ? copyout_mc+0x70/0x70
[  702.625127][T16551]  ? __virt_addr_valid+0x18c/0x540
[  702.630260][T16551]  ? __virt_addr_valid+0x18c/0x540
[  702.635846][T16551]  ? __virt_addr_valid+0x469/0x540
[  702.640970][T16551]  ? __check_object_size+0x506/0xa20
[  702.646262][T16551]  kernfs_fop_write_iter+0x1a4/0x520
[  702.651579][T16551]  vfs_write+0x46c/0x990
[  702.655842][T16551]  ? file_end_write+0x250/0x250
[  702.660714][T16551]  ? __fget_files+0x43d/0x4b0
[  702.665463][T16551]  ? __fdget_pos+0x2a3/0x330
[  702.670095][T16551]  ? ksys_write+0x75/0x260
[  702.674555][T16551]  ksys_write+0x150/0x260
[  702.679002][T16551]  ? __ia32_sys_read+0x90/0x90
[  702.683793][T16551]  ? lockdep_hardirqs_on+0x98/0x150
[  702.689015][T16551]  do_syscall_64+0x55/0xa0
[  702.693493][T16551]  ? clear_bhb_loop+0x40/0x90
[  702.698187][T16551]  ? clear_bhb_loop+0x40/0x90
[  702.702899][T16551]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  702.708808][T16551] RIP: 0033:0x7fb10219cdd9
[  702.713231][T16551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.732866][T16551] RSP: 002b:00007fb102fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  702.741301][T16551] RAX: ffffffffffffffda RBX: 00007fb102416180 RCX: 00007fb10219cdd9
[  702.749282][T16551] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 000000000000000a
[  702.757264][T16551] RBP: 00007fb102fe1090 R08: 0000000000000000 R09: 0000000000000000
[  702.765252][T16551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.773233][T16551] R13: 00007fb102416218 R14: 00007fb102416180 R15: 00007ffd42e29dc8
[  702.781236][T16551]  </TASK>
[  702.790695][T16550] ------------[ cut here ]------------
[  702.796769][T16550] WARNING: CPU: 1 PID: 16550 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470
[  702.807000][T16550] Modules linked in:
[  702.810958][T16550] CPU: 1 PID: 16550 Comm: syz.1.3658 Not tainted syzkaller #0
[  702.818638][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  702.828804][T16550] RIP: 0010:perf_pending_task+0x35c/0x470
[  702.834629][T16550] Code: ff 84 db 75 14 e8 44 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 d8 d5 ff e8 ab 53 4f ff eb e5 e8 24 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 18 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6
[  702.854860][T16550] RSP: 0018:ffffc900044af9c0 EFLAGS: 00010293
[  702.861251][T16550] RAX: ffffffff81b149dc RBX: ffff88807aaf8a80 RCX: ffff888023dfda00
[  702.869667][T16550] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  702.877740][T16550] RBP: 0000000000000001 R08: ffffffff8e8b19af R09: 1ffffffff1d16335
[  702.885872][T16550] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888023dfda00
[  702.893983][T16550] R13: ffff8880621b4530 R14: ffff88807aaf8840 R15: 1ffff1100f55f108
[  702.902269][T16550] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  702.911368][T16550] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  702.918046][T16550] CR2: 0000000000000000 CR3: 000000007666e000 CR4: 00000000003506e0
[  702.926142][T16550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  702.934167][T16550] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  702.942243][T16550] Call Trace:
[  702.945810][T16550]  <TASK>
[  702.948810][T16550]  task_work_run+0x1d4/0x260
[  702.953461][T16550]  ? task_work_cancel+0x220/0x220
[  702.959109][T16550]  do_exit+0x95a/0x2460
[  702.963344][T16550]  ? put_task_struct+0xc0/0xc0
[  702.968390][T16550]  ? preempt_schedule_common+0x82/0xc0
[  702.973917][T16550]  ? preempt_schedule+0xc0/0xd0
[  702.978887][T16550]  ? schedule_preempt_disabled+0x20/0x20
[  702.984608][T16550]  ? lock_chain_count+0x20/0x20
[  702.989524][T16550]  do_group_exit+0x21b/0x2d0
[  702.994181][T16550]  get_signal+0x12fc/0x13f0
[  702.998826][T16550]  arch_do_signal_or_restart+0xc2/0x800
[  703.004516][T16550]  ? mutex_unlock+0x10/0x10
[  703.009123][T16550]  ? get_sigframe_size+0x20/0x20
[  703.014140][T16550]  ? ksys_write+0x1fb/0x260
[  703.018758][T16550]  ? exit_to_user_mode_loop+0x3b/0x110
[  703.024289][T16550]  exit_to_user_mode_loop+0x70/0x110
[  703.029780][T16550]  exit_to_user_mode_prepare+0xee/0x180
[  703.035499][T16550]  syscall_exit_to_user_mode+0x1a/0x50
[  703.041033][T16550]  do_syscall_64+0x61/0xa0
[  703.045564][T16550]  ? clear_bhb_loop+0x40/0x90
[  703.050309][T16550]  ? clear_bhb_loop+0x40/0x90
[  703.055121][T16550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.061676][T16550] RIP: 0033:0x7fb10219cdd9
[  703.066298][T16550] Code: Unable to access opcode bytes at 0x7fb10219cdaf.
[  703.073415][T16550] RSP: 002b:00007fb103002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  703.081952][T16550] RAX: 0000000000000012 RBX: 00007fb102416090 RCX: 00007fb10219cdd9
[  703.090063][T16550] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008
[  703.098155][T16550] RBP: 00007fb102232d69 R08: 0000000000000000 R09: 0000000000000000
[  703.106298][T16550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.114501][T16550] R13: 00007fb102416128 R14: 00007fb102416090 R15: 00007ffd42e29dc8
[  703.122542][T16550]  </TASK>
[  703.125696][T16550] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  703.133021][T16550] CPU: 1 PID: 16550 Comm: syz.1.3658 Not tainted syzkaller #0
[  703.140521][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  703.150621][T16550] Call Trace:
[  703.153920][T16550]  <TASK>
[  703.156873][T16550]  dump_stack_lvl+0x18c/0x250
[  703.161609][T16550]  ? show_regs_print_info+0x20/0x20
[  703.166857][T16550]  ? load_image+0x420/0x420
[  703.171388][T16550]  panic+0x2dc/0x730
[  703.175311][T16550]  ? bpf_jit_dump+0xd0/0xd0
[  703.179861][T16550]  __warn+0x2e0/0x470
[  703.183861][T16550]  ? perf_pending_task+0x35c/0x470
[  703.189007][T16550]  ? perf_pending_task+0x35c/0x470
[  703.194166][T16550]  report_bug+0x2be/0x4f0
[  703.198524][T16550]  ? perf_pending_task+0x35c/0x470
[  703.203691][T16550]  ? perf_pending_task+0x35c/0x470
[  703.208836][T16550]  ? perf_pending_task+0x35e/0x470
[  703.213978][T16550]  handle_bug+0xcf/0x120
[  703.218255][T16550]  exc_invalid_op+0x1a/0x50
[  703.222820][T16550]  asm_exc_invalid_op+0x1a/0x20
[  703.227698][T16550] RIP: 0010:perf_pending_task+0x35c/0x470
[  703.233457][T16550] Code: ff 84 db 75 14 e8 44 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 d8 d5 ff e8 ab 53 4f ff eb e5 e8 24 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 18 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6
[  703.253176][T16550] RSP: 0018:ffffc900044af9c0 EFLAGS: 00010293
[  703.259269][T16550] RAX: ffffffff81b149dc RBX: ffff88807aaf8a80 RCX: ffff888023dfda00
[  703.267266][T16550] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  703.275279][T16550] RBP: 0000000000000001 R08: ffffffff8e8b19af R09: 1ffffffff1d16335
[  703.283276][T16550] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: ffff888023dfda00
[  703.291278][T16550] R13: ffff8880621b4530 R14: ffff88807aaf8840 R15: 1ffff1100f55f108
[  703.299281][T16550]  ? perf_pending_task+0x35c/0x470
[  703.304458][T16550]  task_work_run+0x1d4/0x260
[  703.309084][T16550]  ? task_work_cancel+0x220/0x220
[  703.314146][T16550]  do_exit+0x95a/0x2460
[  703.318442][T16550]  ? put_task_struct+0xc0/0xc0
[  703.323243][T16550]  ? preempt_schedule_common+0x82/0xc0
[  703.328734][T16550]  ? preempt_schedule+0xc0/0xd0
[  703.333614][T16550]  ? schedule_preempt_disabled+0x20/0x20
[  703.339286][T16550]  ? lock_chain_count+0x20/0x20
[  703.344180][T16550]  do_group_exit+0x21b/0x2d0
[  703.348827][T16550]  get_signal+0x12fc/0x13f0
[  703.353416][T16550]  arch_do_signal_or_restart+0xc2/0x800
[  703.359013][T16550]  ? mutex_unlock+0x10/0x10
[  703.363549][T16550]  ? get_sigframe_size+0x20/0x20
[  703.368539][T16550]  ? ksys_write+0x1fb/0x260
[  703.373080][T16550]  ? exit_to_user_mode_loop+0x3b/0x110
[  703.378661][T16550]  exit_to_user_mode_loop+0x70/0x110
[  703.383979][T16550]  exit_to_user_mode_prepare+0xee/0x180
[  703.389556][T16550]  syscall_exit_to_user_mode+0x1a/0x50
[  703.395038][T16550]  do_syscall_64+0x61/0xa0
[  703.399476][T16550]  ? clear_bhb_loop+0x40/0x90
[  703.404175][T16550]  ? clear_bhb_loop+0x40/0x90
[  703.408877][T16550]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.414836][T16550] RIP: 0033:0x7fb10219cdd9
[  703.419288][T16550] Code: Unable to access opcode bytes at 0x7fb10219cdaf.
[  703.426329][T16550] RSP: 002b:00007fb103002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  703.434779][T16550] RAX: 0000000000000012 RBX: 00007fb102416090 RCX: 00007fb10219cdd9
[  703.442771][T16550] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000008
[  703.450768][T16550] RBP: 00007fb102232d69 R08: 0000000000000000 R09: 0000000000000000
[  703.458766][T16550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.466757][T16550] R13: 00007fb102416128 R14: 00007fb102416090 R15: 00007ffd42e29dc8
[  703.474762][T16550]  </TASK>
[  703.478389][T16550] Kernel Offset: disabled
[  703.482730][T16550] Rebooting in 86400 seconds..