last executing test programs:

27.232004753s ago: executing program 3 (id=2491):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xcd, &(0x7f0000000300)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000380), 0x8, 0xb3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000a40)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x4810)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (fail_nth: 7)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x13, 0x1d98, 0x9, 0x9, 0x2401, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x50)

26.576444557s ago: executing program 3 (id=2495):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008ca94ff480152ad3200000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES8], 0xfe33)

26.356572711s ago: executing program 3 (id=2498):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000440), 0x3}, 0x38)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

25.849601361s ago: executing program 3 (id=2500):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)="62c5628269299f9a4cba589a94fc7f20aaa7c32ce82c21d8b97b"}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x50)
close(0x3)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0200000000000000000000000000000000000004"], 0x0, 0x3a, 0x0, 0x1}, 0x28)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090000007b8af8ff000000000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000602f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a75f930a248b705d70eb29c1b5", 0xec}, {&(0x7f0000000840)="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", 0x1b4}], 0x2}, 0x8001)

24.9461168s ago: executing program 3 (id=2502):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000440), 0x3}, 0x38)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x28)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

23.964341571s ago: executing program 3 (id=2510):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="5c00000014006b0402313dfc0b2154972c29389fc4a03e20aebba6080c000acc28d2280000f800250f02000f00e5aa000017d34460bc241e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d45b3b7a04dbdb57", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x6, 0x1, 0x38, &(0x7f00000000c0))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000142603600e12080005007a010401a80004000000035c7f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e0000a67af28a615f189b16cc", 0xd8}], 0x1}, 0xc000004)

20.316477737s ago: executing program 0 (id=2533):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307d", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e3704", 0x25}], 0x1}, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x527, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000100"/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f0000000680)='%pi6   \x00'}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='/cpu'], 0x5)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x4, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x3}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080))

19.70348804s ago: executing program 0 (id=2536):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4000, 0xec, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x15, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)

19.017011914s ago: executing program 0 (id=2540):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x3, 0xff, 0x0, 0x0, 0x0, 0x2511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7b1, 0x100003}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610424000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

18.882001787s ago: executing program 0 (id=2541):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811)
recvmsg(0xffffffffffffffff, 0x0, 0x100)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x80, 0x0, 0x0, 0x8000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8510, 0x4, 0x0, 0x8, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000340)=""/241, 0x41000, 0x26, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xc, 0x80, 0x7}, 0x10, 0x0, r1, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="81fb2c000000155ba1a508000000edd8c05878004000"/37, @ANYRES32=r1, @ANYRES64=0x0], 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080)=0x7000000, &(0x7f0000000240)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.events\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000", @ANYBLOB="8a4909876bfa40d28aabdbfa68fc52e38e15955ab706aedba24a7fd4b787d0cba8556524eb1b904cb10a19a467709a8758bb6708fb2c938c4d915f1a6be946df727470bf43a4ebddf9e1d1ee69a8c98981f637fd465a615f0c39cb736780868b54fdf2d0a30322690762ec890207394c", @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

18.585947713s ago: executing program 0 (id=2543):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad06f0ff0101190000080f050005000000852000000400"/32], 0x0, 0x5, 0x1000, &(0x7f0000000840)=""/4096, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdd}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r3, 0x110, 0x5, 0x0, 0x0)
write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000300), 0x16)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x88, 0x9, 0xffffffff, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$unix(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000240)=0x5)
r7 = socket$kcm(0x10, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0)
sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="458600dedf", 0x5}, {0x0}], 0x2}, 0x40000)
r8 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000)
r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r5], &(0x7f0000000000)='GPL\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
socketpair(0x3, 0x79a02e2a3dcc5a68, 0x7, &(0x7f0000000100))

17.856244238s ago: executing program 0 (id=2549):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x10, 0x400000002, 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x8902, &(0x7f00000005c0))
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
perf_event_open(0x0, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

16.916739998s ago: executing program 1 (id=2552):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000000000000000000000000000711234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

16.849012729s ago: executing program 2 (id=2553):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10)

16.7836646s ago: executing program 1 (id=2554):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000000000feffffff00000000", @ANYRES32=0x1, @ANYBLOB="006089e2071500000000000000000000000000000000a96e46f4303dd26a46f269e3c5e14127117f55556b411001893dd2257efddcf6f1a5ac67c7cec95a93965579a9eb1c5da2421316165030face20c814fdfcb5f595d09d1530b4b81d3ff7623f958a6c6a9bdaaf976eb17f4ea9718f7b35db768dedbdb9e6b7b68af08d11be92d0bf", @ANYRES32], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x15cc, 0x41f, 0xdc3, 0x50000, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0xc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x0, 0x0, 0x0, 0xd6a4, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e11e0000850000009d00000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x480000000000000, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7cf, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0x2e1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0xb}, 0x0)

16.705120772s ago: executing program 2 (id=2555):
socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61127d000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc44}, 0x48)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x17b397b4dcd54698}, 0x144, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r1})
r4 = syz_open_procfs$namespace(0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={0x0, 0x0, 0x4008, r4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={r2, 0x0, 0x22, 0xfe, &(0x7f0000000240)="9207802c4ace6eb039c0f7c321db7b589b126bacdf0e23ea7777f9997f88d871ef25", &(0x7f0000000640)=""/254, 0x10000, 0x0, 0xa7, 0x1000, &(0x7f0000000740)="86a70d2187f5173eb3b27d822d69e3977d563c2bcbbb9beb4f2bd1e026ceabd3a1e0db1cc84c8fa98ec025a51edc25291824f48b0b8bafcc4be8d707c14e9058ec27ff3a4d34c33e750c25620c6be04b1cbc057ad4a014930c0f311bc2691e8ab2021c5b15ebc913991434202cb51027f2092a7e45f8baf10216a927698226ca9eaf2686c27b602bb94df6929438c3af290c46e2e376efc5fda80b9d3301991c616e93d69ad919", &(0x7f0000001980)="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", 0x4}, 0x50)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="e5ffff"], 0xa0}, 0x4004881)
gettid()
socket$kcm(0xa, 0x922000000003, 0x11)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000009"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r7}, 0xc)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000040)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc00, &(0x7f0000000000)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080))

16.648207383s ago: executing program 1 (id=2556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})

16.438283618s ago: executing program 1 (id=2557):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10e, 0xb, &(0x7f0000000080), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e120800090000000401a8001600200008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x9cdc2384056f4939)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0}, 0x18)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r9, &(0x7f00000000c0), 0x12)

16.213732772s ago: executing program 2 (id=2558):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4000, 0xec, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x15, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)

15.997328217s ago: executing program 1 (id=2559):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4000, 0xec, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x15, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)

15.8518732s ago: executing program 2 (id=2560):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91724fc60", 0x14}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307d", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e3704", 0x25}], 0x1}, 0x0)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x527, 0x1, 0xa0, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000100"/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f0000000680)='%pi6   \x00'}, 0x20)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x4, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x3}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x29, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080)
mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8924, &(0x7f0000000080))

15.502740917s ago: executing program 1 (id=2561):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.428674949s ago: executing program 2 (id=2562):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10)

15.290757512s ago: executing program 2 (id=2563):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4000, 0xec, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x15, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)

2.524393747s ago: executing program 32 (id=2549):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000340), 0x2}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
r6 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x10, 0x400000002, 0x0)
r7 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x8902, &(0x7f00000005c0))
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = syz_clone(0x2800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
perf_event_open(0x0, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

45.175599ms ago: executing program 33 (id=2561):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900180000000401a80016000a001140060000000360", 0x3a}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x125, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x9, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x100002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="33fe000071009154090893b3520ba54a07"], 0xfe33)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x20010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x5a}, 0x28)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 34 (id=2563):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x4000, 0xec, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x80002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
getpid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
socket$kcm(0x15, 0x5, 0x0)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)

kernel console output (not intermixed with test programs):

[T10853] netlink: 179440 bytes leftover after parsing attributes in process `syz.0.1685'.
[  348.271039][T10889] netlink: 'syz.3.1700': attribute type 2 has an invalid length.
[  348.284915][T10889] netlink: 'syz.3.1700': attribute type 1 has an invalid length.
[  348.753645][T10891] netlink: 'syz.0.1701': attribute type 11 has an invalid length.
[  348.763469][T10891] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  351.710606][T10907] FAULT_INJECTION: forcing a failure.
[  351.710606][T10907] name failslab, interval 1, probability 0, space 0, times 0
[  351.746632][T10907] CPU: 0 PID: 10907 Comm: syz.2.1708 Not tainted syzkaller #0
[  351.754160][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  351.764290][T10907] Call Trace:
[  351.767674][T10907]  <TASK>
[  351.770756][T10907]  dump_stack_lvl+0x18c/0x250
[  351.775624][T10907]  ? show_regs_print_info+0x20/0x20
[  351.780959][T10907]  ? load_image+0x420/0x420
[  351.785539][T10907]  ? __lock_acquire+0x7d80/0x7d80
[  351.790662][T10907]  ? verify_lock_unused+0x140/0x140
[  351.795893][T10907]  should_fail_ex+0x394/0x4c0
[  351.800653][T10907]  should_failslab+0x9/0x20
[  351.805222][T10907]  slab_pre_alloc_hook+0x59/0x300
[  351.810418][T10907]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  351.816310][T10907]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  351.821887][T10907]  __kmem_cache_alloc_node+0x53/0x250
[  351.827302][T10907]  ? bpf_prog_test_run_skb+0x242/0x18f0
[  351.832881][T10907]  __kmalloc+0xa7/0x240
[  351.837070][T10907]  bpf_prog_test_run_skb+0x242/0x18f0
[  351.842484][T10907]  ? __fget_files+0x28/0x460
[  351.847194][T10907]  ? __fget_files+0x3fc/0x460
[  351.852010][T10907]  ? cpu_online+0x60/0x60
[  351.856375][T10907]  bpf_prog_test_run+0x31f/0x390
[  351.861366][T10907]  __sys_bpf+0x49d/0x890
[  351.865821][T10907]  ? bpf_link_show_fdinfo+0x390/0x390
[  351.871279][T10907]  ? lock_chain_count+0x20/0x20
[  351.876156][T10907]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  351.882186][T10907]  __x64_sys_bpf+0x7c/0x90
[  351.886865][T10907]  do_syscall_64+0x55/0xb0
[  351.891559][T10907]  ? clear_bhb_loop+0x40/0x90
[  351.896459][T10907]  ? clear_bhb_loop+0x40/0x90
[  351.901294][T10907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.907304][T10907] RIP: 0033:0x7f375659e0d9
[  351.911848][T10907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.931607][T10907] RSP: 002b:00007f37547f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  351.940230][T10907] RAX: ffffffffffffffda RBX: 00007f3756825fa0 RCX: 00007f375659e0d9
[  351.948229][T10907] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a
[  351.956227][T10907] RBP: 00007f37547f6090 R08: 0000000000000000 R09: 0000000000000000
[  351.964221][T10907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.972331][T10907] R13: 00007f3756826038 R14: 00007f3756825fa0 R15: 00007ffd2dc09dd8
[  351.980349][T10907]  </TASK>
[  352.107290][T10915] __nla_validate_parse: 3 callbacks suppressed
[  352.107356][T10915] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1711'.
[  352.324224][T10923] netlink: 'syz.1.1712': attribute type 11 has an invalid length.
[  352.333626][T10923] netlink: 'syz.1.1712': attribute type 1 has an invalid length.
[  352.342210][T10923] netlink: 179440 bytes leftover after parsing attributes in process `syz.1.1712'.
[  352.418877][T10921] netlink: 'syz.0.1710': attribute type 13 has an invalid length.
[  352.458138][T10921] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1710'.
[  352.528067][T10921] `: renamed from syz_tun (while UP)
[  352.680557][T10932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1716'.
[  352.843648][T10934] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1717'.
[  353.351144][T10951] netlink: 'syz.2.1724': attribute type 11 has an invalid length.
[  353.364057][T10952] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1723'.
[  353.391682][T10951] netlink: 'syz.2.1724': attribute type 1 has an invalid length.
[  353.410716][T10951] netlink: 179440 bytes leftover after parsing attributes in process `syz.2.1724'.
[  353.823737][T10961] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1727'.
[  353.994203][T10964] veth1_macvtap: left promiscuous mode
[  353.999796][T10964] macsec0: entered allmulticast mode
[  354.219134][T10974] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1731'.
[  354.957199][T10979] netlink: 'syz.2.1733': attribute type 11 has an invalid length.
[  354.966465][T10979] netlink: 'syz.2.1733': attribute type 2 has an invalid length.
[  354.974416][T10979] netlink: 168704 bytes leftover after parsing attributes in process `syz.2.1733'.
[  354.991067][T10981] openvswitch: netlink: Key type 29 is not supported
[  355.999260][T11011] netlink: 'syz.2.1745': attribute type 11 has an invalid length.
[  356.021467][T11011] netlink: 'syz.2.1745': attribute type 2 has an invalid length.
[  356.096675][T11014] openvswitch: netlink: Key type 29 is not supported
[  357.539916][T11029] __nla_validate_parse: 5 callbacks suppressed
[  357.539955][T11029] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1750'.
[  357.962559][T11036] netlink: 'syz.2.1751': attribute type 13 has an invalid length.
[  358.022561][T11036] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1751'.
[  358.192212][T11040] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1753'.
[  358.383831][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1755'.
[  358.559434][T11046] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1756'.
[  358.582117][T11046] openvswitch: netlink: Key type 29 is not supported
[  358.812845][T11049] netlink: 'syz.0.1757': attribute type 11 has an invalid length.
[  358.831257][T11049] netlink: 'syz.0.1757': attribute type 2 has an invalid length.
[  358.839159][T11049] netlink: 168704 bytes leftover after parsing attributes in process `syz.0.1757'.
[  359.618650][T11069] netlink: 'syz.2.1763': attribute type 153 has an invalid length.
[  359.651971][T11069] netlink: 101768 bytes leftover after parsing attributes in process `syz.2.1763'.
[  360.232204][T11082] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1766'.
[  360.268649][T11081] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1767'.
[  360.291223][T11081] openvswitch: netlink: Key type 29 is not supported
[  360.514174][T11084] netlink: 'syz.1.1768': attribute type 10 has an invalid length.
[  360.618231][T11089] netlink: 'syz.2.1769': attribute type 11 has an invalid length.
[  360.640797][T11089] netlink: 'syz.2.1769': attribute type 2 has an invalid length.
[  360.660153][T11089] netlink: 168704 bytes leftover after parsing attributes in process `syz.2.1769'.
[  361.688074][T11117] openvswitch: netlink: Key type 29 is not supported
[  362.050783][T11125] netlink: 'syz.0.1782': attribute type 10 has an invalid length.
[  362.184412][T11128] netlink: 'syz.2.1783': attribute type 11 has an invalid length.
[  362.199898][T11128] netlink: 'syz.2.1783': attribute type 2 has an invalid length.
[  362.925545][T11149] __nla_validate_parse: 4 callbacks suppressed
[  362.925569][T11149] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1789'.
[  362.944864][T11149] openvswitch: netlink: Key type 29 is not supported
[  363.484344][T11162] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1793'.
[  363.582174][T11164] netlink: 'syz.0.1794': attribute type 11 has an invalid length.
[  363.592335][T11164] netlink: 'syz.0.1794': attribute type 2 has an invalid length.
[  363.600573][T11164] netlink: 168704 bytes leftover after parsing attributes in process `syz.0.1794'.
[  364.269394][T11174] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1798'.
[  364.287281][T11173] netlink: 'syz.0.1806': attribute type 11 has an invalid length.
[  364.298465][T11174] openvswitch: netlink: Key type 29 is not supported
[  364.306882][T11173] netlink: 'syz.0.1806': attribute type 2 has an invalid length.
[  364.320574][T11173] netlink: 168704 bytes leftover after parsing attributes in process `syz.0.1806'.
[  365.008471][T11194] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1805'.
[  365.528277][T11203] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1811'.
[  365.549971][T11203] openvswitch: netlink: Key type 29 is not supported
[  365.668954][T11207] netlink: 'syz.3.1812': attribute type 11 has an invalid length.
[  365.677162][T11207] netlink: 'syz.3.1812': attribute type 2 has an invalid length.
[  365.688047][T11207] netlink: 168704 bytes leftover after parsing attributes in process `syz.3.1812'.
[  365.711015][T11205] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1809'.
[  366.076478][T11216] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1816'.
[  367.457455][T11237] openvswitch: netlink: Key type 29 is not supported
[  367.664805][T11239] netlink: 'syz.1.1822': attribute type 11 has an invalid length.
[  367.692802][T11239] netlink: 'syz.1.1822': attribute type 2 has an invalid length.
[  368.602194][T11262] netlink: 'syz.3.1831': attribute type 10 has an invalid length.
[  368.760268][T11264] __nla_validate_parse: 5 callbacks suppressed
[  368.760291][T11264] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1832'.
[  368.851707][T11264] openvswitch: netlink: Key type 29 is not supported
[  369.156003][T11277] netlink: 'syz.1.1837': attribute type 11 has an invalid length.
[  369.169384][T11277] netlink: 'syz.1.1837': attribute type 2 has an invalid length.
[  369.203712][T11277] netlink: 168704 bytes leftover after parsing attributes in process `syz.1.1837'.
[  369.243945][T11280] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1835'.
[  369.286198][T11284] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  369.312698][T11284] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1839'.
[  369.342490][T11284] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1839'.
[  369.360365][T11284] FAULT_INJECTION: forcing a failure.
[  369.360365][T11284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.398661][T11284] CPU: 0 PID: 11284 Comm: syz.0.1839 Not tainted syzkaller #0
[  369.406293][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  369.416570][T11284] Call Trace:
[  369.419878][T11284]  <TASK>
[  369.422840][T11284]  dump_stack_lvl+0x18c/0x250
[  369.427693][T11284]  ? show_regs_print_info+0x20/0x20
[  369.433022][T11284]  ? load_image+0x420/0x420
[  369.437578][T11284]  ? __lock_acquire+0x7d80/0x7d80
[  369.442669][T11284]  ? snprintf+0xe9/0x140
[  369.447166][T11284]  should_fail_ex+0x394/0x4c0
[  369.451910][T11284]  _copy_to_user+0x2f/0xa0
[  369.456401][T11284]  simple_read_from_buffer+0xe7/0x150
[  369.461825][T11284]  proc_fail_nth_read+0x1e8/0x260
[  369.466929][T11284]  ? proc_fault_inject_write+0x360/0x360
[  369.472619][T11284]  ? fsnotify_perm+0x271/0x5e0
[  369.477464][T11284]  ? proc_fault_inject_write+0x360/0x360
[  369.483148][T11284]  vfs_read+0x298/0x990
[  369.487364][T11284]  ? kernel_read+0x1e0/0x1e0
[  369.491993][T11284]  ? __fget_files+0x28/0x460
[  369.496703][T11284]  ? __fget_files+0x3fc/0x460
[  369.501431][T11284]  ? __fdget_pos+0x2a3/0x330
[  369.506062][T11284]  ? ksys_read+0x74/0x260
[  369.510438][T11284]  ksys_read+0x151/0x260
[  369.514739][T11284]  ? vfs_write+0x9a0/0x9a0
[  369.519208][T11284]  ? lockdep_hardirqs_on+0x98/0x150
[  369.524457][T11284]  do_syscall_64+0x55/0xb0
[  369.528921][T11284]  ? clear_bhb_loop+0x40/0x90
[  369.533639][T11284]  ? clear_bhb_loop+0x40/0x90
[  369.538360][T11284]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.544290][T11284] RIP: 0033:0x7f3b8fd5e90e
[  369.548982][T11284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  369.568803][T11284] RSP: 002b:00007f3b90c75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  369.577279][T11284] RAX: ffffffffffffffda RBX: 00007f3b90c766c0 RCX: 00007f3b8fd5e90e
[  369.585678][T11284] RDX: 000000000000000f RSI: 00007f3b90c760a0 RDI: 0000000000000008
[  369.593772][T11284] RBP: 00007f3b90c76090 R08: 0000000000000000 R09: 0000000000000000
[  369.601782][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.609805][T11284] R13: 00007f3b90026038 R14: 00007f3b90025fa0 R15: 00007ffcb5f494a8
[  369.617854][T11284]  </TASK>
[  369.649485][ T5772] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  369.657017][ T5772] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  369.769309][T11288] netlink: 'syz.2.1840': attribute type 10 has an invalid length.
[  369.803139][T11288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1840'.
[  369.821525][T11288] netlink: 'syz.2.1840': attribute type 10 has an invalid length.
[  369.829441][T11288] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1840'.
[  369.875334][T11291] netlink: 'syz.2.1840': attribute type 10 has an invalid length.
[  369.896980][T11296] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1844'.
[  369.902685][T11291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1840'.
[  369.916284][T11296] openvswitch: netlink: Key type 29 is not supported
[  370.464752][T11317] netlink: 'syz.2.1851': attribute type 11 has an invalid length.
[  370.489265][T11317] netlink: 'syz.2.1851': attribute type 2 has an invalid length.
[  370.501459][T11317] netlink: 168704 bytes leftover after parsing attributes in process `syz.2.1851'.
[  371.189199][T11328] openvswitch: netlink: Key type 29 is not supported
[  371.441473][ T5772] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18
[  371.592856][T11344] netlink: 'syz.0.1860': attribute type 11 has an invalid length.
[  371.611583][T11344] netlink: 'syz.0.1860': attribute type 2 has an invalid length.
[  372.137297][T11364] openvswitch: netlink: Key type 29 is not supported
[  373.264115][T11395] openvswitch: netlink: Key type 29 is not supported
[  374.992546][T11431] __nla_validate_parse: 11 callbacks suppressed
[  374.992566][T11431] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1889'.
[  375.381549][T11443] validate_nla: 3 callbacks suppressed
[  375.381601][T11443] netlink: 'syz.3.1896': attribute type 21 has an invalid length.
[  375.421543][T11443] IPv6: NLM_F_CREATE should be specified when creating new route
[  375.429583][T11443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  375.437040][T11443] IPv6: NLM_F_CREATE should be set when creating new route
[  375.444386][T11443] IPv6: NLM_F_CREATE should be set when creating new route
[  375.451658][T11443] IPv6: NLM_F_CREATE should be set when creating new route
[  375.616533][T11453] netlink: 'syz.0.1898': attribute type 13 has an invalid length.
[  375.629569][T11453] netlink: 'syz.0.1898': attribute type 58 has an invalid length.
[  375.637640][T11453] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1898'.
[  375.673671][T11453] netlink: 'syz.0.1898': attribute type 33 has an invalid length.
[  375.701182][T11453] netlink: 'syz.0.1898': attribute type 3 has an invalid length.
[  375.709272][T11453] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1898'.
[  375.829518][T11460] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1901'.
[  375.840473][T11461] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1899'.
[  375.915153][T11463] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1902'.
[  375.926162][T11463] openvswitch: netlink: Key type 29 is not supported
[  376.602788][T11482] netlink: 'syz.0.1908': attribute type 41 has an invalid length.
[  377.194281][T11489] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  377.227277][T11489] netlink: 'syz.2.1911': attribute type 3 has an invalid length.
[  377.244788][T11489] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1911'.
[  377.356443][T11491] FAULT_INJECTION: forcing a failure.
[  377.356443][T11491] name failslab, interval 1, probability 0, space 0, times 0
[  377.381596][T11491] CPU: 0 PID: 11491 Comm: syz.1.1912 Not tainted syzkaller #0
[  377.389117][T11491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.399210][T11491] Call Trace:
[  377.402501][T11491]  <TASK>
[  377.405447][T11491]  dump_stack_lvl+0x18c/0x250
[  377.410144][T11491]  ? show_regs_print_info+0x20/0x20
[  377.415356][T11491]  ? load_image+0x420/0x420
[  377.419883][T11491]  ? __might_sleep+0xe0/0xe0
[  377.424535][T11491]  ? __lock_acquire+0x7d80/0x7d80
[  377.429582][T11491]  should_fail_ex+0x394/0x4c0
[  377.434281][T11491]  should_failslab+0x9/0x20
[  377.438806][T11491]  slab_pre_alloc_hook+0x59/0x300
[  377.443852][T11491]  ? tomoyo_encode+0x2ad/0x570
[  377.448667][T11491]  ? tomoyo_encode+0x2ad/0x570
[  377.453437][T11491]  __kmem_cache_alloc_node+0x53/0x250
[  377.458821][T11491]  ? tomoyo_encode+0x2ad/0x570
[  377.463592][T11491]  __kmalloc+0xa7/0x240
[  377.467763][T11491]  tomoyo_encode+0x2ad/0x570
[  377.472376][T11491]  tomoyo_realpath_from_path+0x57c/0x5c0
[  377.478029][T11491]  tomoyo_path_number_perm+0x248/0x5e0
[  377.483498][T11491]  ? tomoyo_path_number_perm+0x217/0x5e0
[  377.489156][T11491]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  377.494657][T11491]  ? __fget_files+0x28/0x460
[  377.499277][T11491]  security_file_ioctl+0x70/0xa0
[  377.504232][T11491]  __se_sys_ioctl+0x48/0x170
[  377.508843][T11491]  do_syscall_64+0x55/0xb0
[  377.513266][T11491]  ? clear_bhb_loop+0x40/0x90
[  377.517949][T11491]  ? clear_bhb_loop+0x40/0x90
[  377.522637][T11491]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  377.528567][T11491] RIP: 0033:0x7fb688f9e0d9
[  377.532987][T11491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.552603][T11491] RSP: 002b:00007fb689e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  377.561024][T11491] RAX: ffffffffffffffda RBX: 00007fb689225fa0 RCX: 00007fb688f9e0d9
[  377.568996][T11491] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000034
[  377.576974][T11491] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  377.585048][T11491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  377.593238][T11491] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  377.601232][T11491]  </TASK>
[  377.652412][T11491] ERROR: Out of memory at tomoyo_realpath_from_path.
[  377.871121][T11509] netlink: 'syz.0.1918': attribute type 1 has an invalid length.
[  377.879891][T11509] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1918'.
[  378.419156][T11523] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1923'.
[  378.532032][T11532] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1928'.
[  378.595675][T11536] netlink: 'syz.0.1929': attribute type 10 has an invalid length.
[  378.604156][T11536] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  378.855688][T11540] FAULT_INJECTION: forcing a failure.
[  378.855688][T11540] name failslab, interval 1, probability 0, space 0, times 0
[  378.897748][T11540] CPU: 0 PID: 11540 Comm: syz.0.1930 Not tainted syzkaller #0
[  378.905279][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  378.915451][T11540] Call Trace:
[  378.918746][T11540]  <TASK>
[  378.921693][T11540]  dump_stack_lvl+0x18c/0x250
[  378.926435][T11540]  ? show_regs_print_info+0x20/0x20
[  378.931660][T11540]  ? load_image+0x420/0x420
[  378.936197][T11540]  ? __might_sleep+0xe0/0xe0
[  378.940856][T11540]  ? __lock_acquire+0x7d80/0x7d80
[  378.945899][T11540]  should_fail_ex+0x394/0x4c0
[  378.950626][T11540]  should_failslab+0x9/0x20
[  378.955254][T11540]  slab_pre_alloc_hook+0x59/0x300
[  378.960311][T11540]  ? __lock_acquire+0x7d80/0x7d80
[  378.965437][T11540]  ? kvmalloc_node+0x70/0x180
[  378.970153][T11540]  ? kvmalloc_node+0x70/0x180
[  378.974866][T11540]  __kmem_cache_alloc_node+0x53/0x250
[  378.980450][T11540]  ? __schedule_delayed_monitor_work+0x200/0x200
[  378.986834][T11540]  ? kvmalloc_node+0x70/0x180
[  378.991545][T11540]  __kmalloc_node+0xa6/0x240
[  378.996443][T11540]  kvmalloc_node+0x70/0x180
[  379.000990][T11540]  bpf_test_run_xdp_live+0x1c2/0x1b30
[  379.006404][T11540]  ? 0xffffffffa00044c0
[  379.010589][T11540]  ? 0xffffffffa00044c0
[  379.014770][T11540]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  379.020699][T11540]  ? xdp_convert_md_to_buff+0x330/0x330
[  379.026308][T11540]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  379.032607][T11540]  ? xdp_convert_md_to_buff+0x5b/0x330
[  379.038101][T11540]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  379.043505][T11540]  ? __lock_acquire+0x7d80/0x7d80
[  379.048647][T11540]  ? dev_put+0x80/0x80
[  379.052763][T11540]  ? dev_put+0x80/0x80
[  379.056893][T11540]  bpf_prog_test_run+0x31f/0x390
[  379.061864][T11540]  __sys_bpf+0x49d/0x890
[  379.066130][T11540]  ? bpf_link_show_fdinfo+0x390/0x390
[  379.071541][T11540]  ? lock_chain_count+0x20/0x20
[  379.076418][T11540]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  379.082463][T11540]  __x64_sys_bpf+0x7c/0x90
[  379.086908][T11540]  do_syscall_64+0x55/0xb0
[  379.091354][T11540]  ? clear_bhb_loop+0x40/0x90
[  379.096064][T11540]  ? clear_bhb_loop+0x40/0x90
[  379.100774][T11540]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  379.106722][T11540] RIP: 0033:0x7f3b8fd9e0d9
[  379.111164][T11540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.130886][T11540] RSP: 002b:00007f3b90c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  379.139338][T11540] RAX: ffffffffffffffda RBX: 00007f3b90025fa0 RCX: 00007f3b8fd9e0d9
[  379.147351][T11540] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  379.155353][T11540] RBP: 00007f3b90c76090 R08: 0000000000000000 R09: 0000000000000000
[  379.163359][T11540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  379.171361][T11540] R13: 00007f3b90026038 R14: 00007f3b90025fa0 R15: 00007ffcb5f494a8
[  379.179549][T11540]  </TASK>
[  379.358596][T11551] netlink: 'syz.3.1934': attribute type 21 has an invalid length.
[  379.385600][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  379.392217][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  380.362771][T11580] __nla_validate_parse: 4 callbacks suppressed
[  380.362790][T11580] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1944'.
[  380.720366][T11597] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1951'.
[  381.483110][T11620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  381.543393][T11620] validate_nla: 3 callbacks suppressed
[  381.543439][T11620] netlink: 'syz.1.1960': attribute type 9 has an invalid length.
[  381.564634][T11620] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1960'.
[  381.742804][T11625] netlink: 'syz.1.1960': attribute type 9 has an invalid length.
[  381.751860][T11625] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1960'.
[  381.754134][T11628] netlink: 'syz.0.1963': attribute type 10 has an invalid length.
[  381.784800][T11628] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  381.792866][T11628] bridge0: port 3(netdevsim0) entered blocking state
[  381.799914][T11628] bridge0: port 3(netdevsim0) entered disabled state
[  381.808289][T11628] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  384.607163][T11720] netlink: 'syz.1.2001': attribute type 9 has an invalid length.
[  384.618184][T11720] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2001'.
[  385.649808][T11756] FAULT_INJECTION: forcing a failure.
[  385.649808][T11756] name failslab, interval 1, probability 0, space 0, times 0
[  385.665870][T11756] CPU: 1 PID: 11756 Comm: syz.1.2014 Not tainted syzkaller #0
[  385.673354][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  385.683421][T11756] Call Trace:
[  385.686721][T11756]  <TASK>
[  385.689734][T11756]  dump_stack_lvl+0x18c/0x250
[  385.694500][T11756]  ? show_regs_print_info+0x20/0x20
[  385.699804][T11756]  ? load_image+0x420/0x420
[  385.704327][T11756]  ? __might_sleep+0xe0/0xe0
[  385.708945][T11756]  ? __lock_acquire+0x7d80/0x7d80
[  385.713977][T11756]  should_fail_ex+0x394/0x4c0
[  385.718696][T11756]  should_failslab+0x9/0x20
[  385.723277][T11756]  slab_pre_alloc_hook+0x59/0x300
[  385.728309][T11756]  ? __get_vm_area_node+0x125/0x370
[  385.733519][T11756]  __kmem_cache_alloc_node+0x53/0x250
[  385.738932][T11756]  ? __get_vm_area_node+0x125/0x370
[  385.744486][T11756]  kmalloc_node_trace+0x26/0xe0
[  385.749369][T11756]  __get_vm_area_node+0x125/0x370
[  385.754502][T11756]  __vmalloc_node_range+0x36f/0x1320
[  385.759785][T11756]  ? netlink_sendmsg+0x602/0xbf0
[  385.764729][T11756]  ? netlink_insert+0x1094/0x1390
[  385.769754][T11756]  ? netlink_insert+0x2ba/0x1390
[  385.774701][T11756]  ? free_vm_area+0x50/0x50
[  385.779206][T11756]  ? netlink_sendmsg+0x602/0xbf0
[  385.784148][T11756]  vmalloc+0x79/0x90
[  385.788036][T11756]  ? netlink_sendmsg+0x602/0xbf0
[  385.792965][T11756]  netlink_sendmsg+0x602/0xbf0
[  385.797723][T11756]  ? netlink_getsockopt+0x590/0x590
[  385.802907][T11756]  ? apparmor_socket_sendmsg+0x8e/0x330
[  385.808463][T11756]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  385.813746][T11756]  ? security_socket_sendmsg+0x80/0xa0
[  385.819199][T11756]  ? netlink_getsockopt+0x590/0x590
[  385.824408][T11756]  ____sys_sendmsg+0x61b/0x980
[  385.829257][T11756]  ? __asan_memset+0x22/0x40
[  385.833855][T11756]  ? __sys_sendmsg_sock+0x30/0x30
[  385.838865][T11756]  ? __import_iovec+0x5f2/0x850
[  385.844060][T11756]  ? import_iovec+0x73/0xa0
[  385.848555][T11756]  ___sys_sendmsg+0x2a6/0x360
[  385.853312][T11756]  ? lockdep_hardirqs_on+0x98/0x150
[  385.858504][T11756]  ? __sys_sendmsg+0x2b0/0x2b0
[  385.863468][T11756]  ? __lock_acquire+0x7d80/0x7d80
[  385.868530][T11756]  __se_sys_sendmsg+0x1d0/0x2c0
[  385.873467][T11756]  ? __x64_sys_sendmsg+0x80/0x80
[  385.878450][T11756]  ? lockdep_hardirqs_on+0x98/0x150
[  385.883671][T11756]  do_syscall_64+0x55/0xb0
[  385.888104][T11756]  ? clear_bhb_loop+0x40/0x90
[  385.892888][T11756]  ? clear_bhb_loop+0x40/0x90
[  385.897708][T11756]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  385.903753][T11756] RIP: 0033:0x7fb688f9e0d9
[  385.908180][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.927988][T11756] RSP: 002b:00007fb689e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  385.936749][T11756] RAX: ffffffffffffffda RBX: 00007fb689225fa0 RCX: 00007fb688f9e0d9
[  385.944819][T11756] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  385.952787][T11756] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  385.960853][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  385.968962][T11756] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  385.977046][T11756]  </TASK>
[  385.990184][T11756] syz.1.2014: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  386.009061][T11756] CPU: 0 PID: 11756 Comm: syz.1.2014 Not tainted syzkaller #0
[  386.016569][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  386.026768][T11756] Call Trace:
[  386.030073][T11756]  <TASK>
[  386.033026][T11756]  dump_stack_lvl+0x18c/0x250
[  386.037740][T11756]  ? show_regs_print_info+0x20/0x20
[  386.042968][T11756]  ? load_image+0x420/0x420
[  386.047509][T11756]  ? __rcu_read_unlock+0x7c/0xd0
[  386.052485][T11756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  386.059065][T11756]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  386.065600][T11756]  warn_alloc+0x246/0x340
[  386.069963][T11756]  ? __get_vm_area_node+0x125/0x370
[  386.075197][T11756]  ? zone_watermark_ok_safe+0x230/0x230
[  386.081363][T11756]  ? rcu_is_watching+0x15/0xb0
[  386.086300][T11756]  ? __get_vm_area_node+0x356/0x370
[  386.091543][T11756]  __vmalloc_node_range+0x394/0x1320
[  386.096888][T11756]  ? netlink_insert+0x1094/0x1390
[  386.101941][T11756]  ? netlink_insert+0x2ba/0x1390
[  386.107060][T11756]  ? free_vm_area+0x50/0x50
[  386.111605][T11756]  ? netlink_sendmsg+0x602/0xbf0
[  386.117028][T11756]  vmalloc+0x79/0x90
[  386.120964][T11756]  ? netlink_sendmsg+0x602/0xbf0
[  386.126006][T11756]  netlink_sendmsg+0x602/0xbf0
[  386.130806][T11756]  ? netlink_getsockopt+0x590/0x590
[  386.136102][T11756]  ? apparmor_socket_sendmsg+0x8e/0x330
[  386.141660][T11756]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  386.146946][T11756]  ? security_socket_sendmsg+0x80/0xa0
[  386.152400][T11756]  ? netlink_getsockopt+0x590/0x590
[  386.157711][T11756]  ____sys_sendmsg+0x61b/0x980
[  386.162496][T11756]  ? __asan_memset+0x22/0x40
[  386.167105][T11756]  ? __sys_sendmsg_sock+0x30/0x30
[  386.172128][T11756]  ? __import_iovec+0x5f2/0x850
[  386.176992][T11756]  ? import_iovec+0x73/0xa0
[  386.181527][T11756]  ___sys_sendmsg+0x2a6/0x360
[  386.186215][T11756]  ? lockdep_hardirqs_on+0x98/0x150
[  386.191498][T11756]  ? __sys_sendmsg+0x2b0/0x2b0
[  386.196299][T11756]  ? __lock_acquire+0x7d80/0x7d80
[  386.201406][T11756]  __se_sys_sendmsg+0x1d0/0x2c0
[  386.206291][T11756]  ? __x64_sys_sendmsg+0x80/0x80
[  386.211252][T11756]  ? lockdep_hardirqs_on+0x98/0x150
[  386.216483][T11756]  do_syscall_64+0x55/0xb0
[  386.220929][T11756]  ? clear_bhb_loop+0x40/0x90
[  386.225622][T11756]  ? clear_bhb_loop+0x40/0x90
[  386.230316][T11756]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.236219][T11756] RIP: 0033:0x7fb688f9e0d9
[  386.240715][T11756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.260763][T11756] RSP: 002b:00007fb689e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.269190][T11756] RAX: ffffffffffffffda RBX: 00007fb689225fa0 RCX: 00007fb688f9e0d9
[  386.277300][T11756] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  386.285304][T11756] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  386.293369][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  386.301440][T11756] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  386.310129][T11756]  </TASK>
[  386.327555][T11756] Mem-Info:
[  386.332278][T11756] active_anon:7148 inactive_anon:0 isolated_anon:0
[  386.332278][T11756]  active_file:18602 inactive_file:40073 isolated_file:0
[  386.332278][T11756]  unevictable:768 dirty:377 writeback:0
[  386.332278][T11756]  slab_reclaimable:10642 slab_unreclaimable:91775
[  386.332278][T11756]  mapped:24714 shmem:1361 pagetables:569
[  386.332278][T11756]  sec_pagetables:0 bounce:0
[  386.332278][T11756]  kernel_misc_reclaimable:0
[  386.332278][T11756]  free:1344751 free_pcp:12449 free_cma:0
[  386.379659][T11756] Node 0 active_anon:28592kB inactive_anon:0kB active_file:74408kB inactive_file:160096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98856kB dirty:1508kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10412kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no
[  386.412917][T11756] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  386.445068][T11756] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.477946][T11756] lowmem_reserve[]: 0 2521 2522 2522 2522
[  386.484276][T11756] Node 0 DMA32 free:1480148kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:28656kB inactive_anon:0kB active_file:74408kB inactive_file:159260kB unevictable:1536kB writepending:1508kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:26080kB local_pcp:14768kB free_cma:0kB
[  386.516649][T11756] lowmem_reserve[]: 0 0 0 0 0
[  386.522350][T11756] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.549649][T11756] lowmem_reserve[]: 0 0 0 0 0
[  386.565995][T11756] Node 1 Normal free:3883496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23744kB local_pcp:13120kB free_cma:0kB
[  386.599865][T11756] lowmem_reserve[]: 0 0 0 0 0
[  386.605106][T11756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  386.619158][T11756] Node 0 DMA32: 3*4kB (ME) 425*8kB (UE) 1184*16kB (UM) 1008*32kB (UME) 326*64kB (UM) 139*128kB (UME) 82*256kB (UM) 30*512kB (ME) 15*1024kB (UM) 10*2048kB (UME) 321*4096kB (M) = 1480276kB
[  386.678882][T11756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  386.698085][T11756] Node 1 Normal: 268*4kB (UME) 63*8kB (UME) 48*16kB (UME) 88*32kB (UME) 31*64kB (UME) 8*128kB (UE) 0*256kB 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 945*4096kB (M) = 3883496kB
[  386.718347][T11756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  386.728710][T11756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.738878][T11756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  386.756621][T11756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.766693][T11756] 60036 total pagecache pages
[  386.775414][T11756] 0 pages in swap cache
[  386.779856][T11756] Free swap  = 124996kB
[  386.784625][T11756] Total swap = 124996kB
[  386.788956][T11756] 2097051 pages RAM
[  386.798596][T11756] 0 pages HighMem/MovableOnly
[  386.803841][T11756] 416958 pages reserved
[  386.808267][T11756] 0 pages cma reserved
[  387.278717][T11783] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2026'.
[  388.353799][T11810] netlink: 'syz.0.2035': attribute type 9 has an invalid length.
[  388.362626][T11810] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2035'.
[  388.604639][T11819] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2039'.
[  389.901448][T11850] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2049'.
[  390.604290][T11870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2057'.
[  390.628674][T11870] openvswitch: netlink: Key type 29 is not supported
[  390.735351][T11871] netlink: 'syz.2.2053': attribute type 3 has an invalid length.
[  390.763664][T11871] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2053'.
[  390.899036][T11881] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2060'.
[  391.600449][T11906] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2068'.
[  391.671610][T11906] openvswitch: netlink: Key type 29 is not supported
[  391.784970][T11910] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2070'.
[  392.897694][T11940] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2080'.
[  392.993520][T11942] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2081'.
[  393.011994][T11942] openvswitch: netlink: Key type 29 is not supported
[  393.558671][T11954] netlink: 'syz.1.2086': attribute type 10 has an invalid length.
[  393.570451][T11954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2086'.
[  393.580663][T11954] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  394.558214][T11977] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2092'.
[  394.686548][T11979] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2093'.
[  394.696538][T11979] openvswitch: netlink: Key type 29 is not supported
[  396.322198][T12011] netlink: 'syz.2.2102': attribute type 9 has an invalid length.
[  396.331143][T12011] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2102'.
[  396.655318][T12016] FAULT_INJECTION: forcing a failure.
[  396.655318][T12016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  396.742060][T12016] CPU: 1 PID: 12016 Comm: syz.1.2104 Not tainted syzkaller #0
[  396.749762][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  396.759860][T12016] Call Trace:
[  396.763158][T12016]  <TASK>
[  396.766110][T12016]  dump_stack_lvl+0x18c/0x250
[  396.770906][T12016]  ? show_regs_print_info+0x20/0x20
[  396.776128][T12016]  ? load_image+0x420/0x420
[  396.780746][T12016]  ? __might_fault+0xaa/0x120
[  396.785457][T12016]  ? __lock_acquire+0x7d80/0x7d80
[  396.790604][T12016]  ? unix_ioctl+0x259/0x6b0
[  396.795186][T12016]  should_fail_ex+0x394/0x4c0
[  396.799897][T12016]  _copy_from_user+0x2f/0xe0
[  396.804531][T12016]  sock_do_ioctl+0x190/0x310
[  396.809365][T12016]  ? sock_show_fdinfo+0xb0/0xb0
[  396.814666][T12016]  sock_ioctl+0x5be/0x7e0
[  396.819135][T12016]  ? sock_poll+0x3e0/0x3e0
[  396.823605][T12016]  ? bpf_lsm_file_ioctl+0x9/0x10
[  396.828575][T12016]  ? security_file_ioctl+0x80/0xa0
[  396.833739][T12016]  ? sock_poll+0x3e0/0x3e0
[  396.838191][T12016]  __se_sys_ioctl+0xfd/0x170
[  396.842821][T12016]  do_syscall_64+0x55/0xb0
[  396.847264][T12016]  ? clear_bhb_loop+0x40/0x90
[  396.851975][T12016]  ? clear_bhb_loop+0x40/0x90
[  396.856685][T12016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  396.862621][T12016] RIP: 0033:0x7fb688f9e0d9
[  396.867062][T12016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  396.886955][T12016] RSP: 002b:00007fb689e87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  396.895399][T12016] RAX: ffffffffffffffda RBX: 00007fb689225fa0 RCX: 00007fb688f9e0d9
[  396.903394][T12016] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000034
[  396.911389][T12016] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  396.919469][T12016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  396.927539][T12016] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  396.935542][T12016]  </TASK>
[  396.985764][T12019] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2105'.
[  397.021716][T12019] openvswitch: netlink: Key type 29 is not supported
[  398.027388][T12048] netlink: 'syz.3.2115': attribute type 10 has an invalid length.
[  398.036860][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'.
[  398.047745][T12048] netlink: 'syz.3.2115': attribute type 10 has an invalid length.
[  398.055664][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2115'.
[  398.287664][T12053] netlink: 'syz.3.2116': attribute type 9 has an invalid length.
[  398.297124][T12053] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2116'.
[  398.352621][T12056] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2117'.
[  398.373938][T12056] openvswitch: netlink: Key type 29 is not supported
[  400.379044][T12089] netlink: 'syz.2.2131': attribute type 5 has an invalid length.
[  400.419082][T12093] netlink: 'syz.1.2132': attribute type 9 has an invalid length.
[  400.429839][T12093] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2132'.
[  401.133763][T12118] netlink: 'syz.3.2141': attribute type 3 has an invalid length.
[  401.149906][T12118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2141'.
[  401.567841][T12127] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2145'.
[  401.598834][T12127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.928412][T12141] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2149'.
[  401.939020][T12141] openvswitch: netlink: Key type 29 is not supported
[  402.910496][T12163] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2156'.
[  403.095482][T12169] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2159'.
[  403.105585][T12169] openvswitch: netlink: Key type 29 is not supported
[  403.214107][T12171] netlink: 'syz.3.2160': attribute type 5 has an invalid length.
[  403.862418][T12184] sctp: [Deprecated]: syz.1.2165 (pid 12184) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.862418][T12184] Use struct sctp_sack_info instead
[  403.934432][T12184] netlink: 'syz.1.2165': attribute type 27 has an invalid length.
[  403.979343][T12184] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2165'.
[  405.109268][T12203] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2170'.
[  405.152045][T12203] openvswitch: netlink: Key type 29 is not supported
[  406.182679][T12232] sock: sock_timestamping_bind_phc: sock not bind to device
[  406.287048][T12231] syzkaller0: entered promiscuous mode
[  406.293232][T12231] syzkaller0: entered allmulticast mode
[  406.435983][T12238] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2184'.
[  406.456210][T12238] openvswitch: netlink: Key type 29 is not supported
[  409.061892][T12275] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2196'.
[  409.071584][T12275] openvswitch: netlink: Key type 29 is not supported
[  409.436072][T12287] netlink: 'syz.3.2202': attribute type 5 has an invalid length.
[  409.535660][T12287] syzkaller0: entered promiscuous mode
[  409.541196][T12287] syzkaller0: entered allmulticast mode
[  409.561037][T12288] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  411.755916][T12288] netlink: 'syz.2.2201': attribute type 29 has an invalid length.
[  411.905834][T12308] netlink: 'syz.0.2208': attribute type 39 has an invalid length.
[  412.167833][T12306] delete_channel: no stack
[  412.422518][T12325] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2214'.
[  412.753541][T12333] netlink: 'syz.2.2225': attribute type 2 has an invalid length.
[  412.762219][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2225'.
[  412.777554][T12333] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  414.883721][T12347] FAULT_INJECTION: forcing a failure.
[  414.883721][T12347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.952686][T12347] CPU: 1 PID: 12347 Comm: syz.0.2221 Not tainted syzkaller #0
[  414.960219][T12347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  414.970324][T12347] Call Trace:
[  414.973634][T12347]  <TASK>
[  414.976609][T12347]  dump_stack_lvl+0x18c/0x250
[  414.981409][T12347]  ? show_regs_print_info+0x20/0x20
[  414.986651][T12347]  ? load_image+0x420/0x420
[  414.991298][T12347]  ? __might_fault+0xaa/0x120
[  414.996013][T12347]  ? __lock_acquire+0x7d80/0x7d80
[  415.001138][T12347]  should_fail_ex+0x394/0x4c0
[  415.005945][T12347]  _copy_from_iter+0x1cd/0x1290
[  415.010830][T12347]  ? copyout_mc+0x70/0x70
[  415.015185][T12347]  ? __virt_addr_valid+0x10c/0x380
[  415.020455][T12347]  ? __virt_addr_valid+0x10c/0x380
[  415.025604][T12347]  ? __virt_addr_valid+0x10c/0x380
[  415.030860][T12347]  ? __check_object_size+0x4fc/0xa40
[  415.036401][T12347]  sctp_user_addto_chunk+0x84/0x220
[  415.041841][T12347]  sctp_datamsg_from_user+0x74d/0xee0
[  415.047469][T12347]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  415.052894][T12347]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  415.058756][T12347]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  415.064776][T12347]  ? __local_bh_enable_ip+0x13a/0x1c0
[  415.070182][T12347]  ? _local_bh_enable+0xa0/0xa0
[  415.075143][T12347]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  415.080981][T12347]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  415.087000][T12347]  ? sctp_sendmsg_check_sflags+0x18d/0x2d0
[  415.092847][T12347]  sctp_sendmsg+0x1afa/0x27b0
[  415.097691][T12347]  ? sctp_getsockopt+0xb60/0xb60
[  415.103198][T12347]  ? aa_af_perm+0x330/0x330
[  415.107916][T12347]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  415.114904][T12347]  ? sock_rps_record_flow+0x19/0x3f0
[  415.120421][T12347]  ? inet_sendmsg+0x7e/0x2a0
[  415.125051][T12347]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  415.130367][T12347]  ? inet_send_prepare+0x250/0x250
[  415.135533][T12347]  ____sys_sendmsg+0x61b/0x980
[  415.140472][T12347]  ? __asan_memset+0x22/0x40
[  415.145182][T12347]  ? __sys_sendmsg_sock+0x30/0x30
[  415.150225][T12347]  ? __import_iovec+0x5f2/0x850
[  415.155110][T12347]  ? import_iovec+0x73/0xa0
[  415.159662][T12347]  ___sys_sendmsg+0x2a6/0x360
[  415.164369][T12347]  ? get_pid_task+0x20/0x1e0
[  415.169086][T12347]  ? __sys_sendmsg+0x2b0/0x2b0
[  415.173921][T12347]  ? __lock_acquire+0x7d80/0x7d80
[  415.179097][T12347]  __se_sys_sendmsg+0x1d0/0x2c0
[  415.184028][T12347]  ? __x64_sys_sendmsg+0x80/0x80
[  415.189010][T12347]  ? lockdep_hardirqs_on+0x98/0x150
[  415.194337][T12347]  do_syscall_64+0x55/0xb0
[  415.198800][T12347]  ? clear_bhb_loop+0x40/0x90
[  415.203612][T12347]  ? clear_bhb_loop+0x40/0x90
[  415.208434][T12347]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  415.214382][T12347] RIP: 0033:0x7f3b8fd9e0d9
[  415.218817][T12347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.238570][T12347] RSP: 002b:00007f3b90c76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  415.247110][T12347] RAX: ffffffffffffffda RBX: 00007f3b90025fa0 RCX: 00007f3b8fd9e0d9
[  415.255110][T12347] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  415.263313][T12347] RBP: 00007f3b90c76090 R08: 0000000000000000 R09: 0000000000000000
[  415.271405][T12347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  415.279399][T12347] R13: 00007f3b90026038 R14: 00007f3b90025fa0 R15: 00007ffcb5f494a8
[  415.287506][T12347]  </TASK>
[  415.868050][T12349] netlink: 'syz.2.2219': attribute type 3 has an invalid length.
[  415.876163][T12349] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2219'.
[  415.979948][T12355] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2224'.
[  416.056080][T12358] netlink: 'syz.2.2223': attribute type 39 has an invalid length.
[  416.363829][T12370] syzkaller1: tun_chr_ioctl cmd 1074025677
[  416.369861][T12370] syzkaller1: Linktype set failed because interface is up
[  416.392768][   T23] syzkaller1: tun_net_xmit 90
[  416.559770][T12376] netlink: 'syz.2.2233': attribute type 29 has an invalid length.
[  416.568339][T12376] netlink: 'syz.2.2233': attribute type 29 has an invalid length.
[  416.579740][T12376] netlink: 'syz.2.2233': attribute type 29 has an invalid length.
[  416.589675][T12376] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2233'.
[  416.600565][T12376] netlink: 'syz.2.2233': attribute type 29 has an invalid length.
[  417.033236][T12382] netlink: 'syz.1.2234': attribute type 3 has an invalid length.
[  417.071384][T12382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2234'.
[  417.218381][T12389] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2237'.
[  417.536546][T12398] netlink: 'syz.1.2241': attribute type 39 has an invalid length.
[  417.825895][T12409] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2246'.
[  417.835520][T12409] openvswitch: netlink: Key type 29 is not supported
[  417.994320][T12413] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2248'.
[  418.405100][T12423] netlink: 'syz.0.2250': attribute type 3 has an invalid length.
[  418.444175][T12423] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2250'.
[  418.644819][T12431] netlink: 'syz.3.2254': attribute type 3 has an invalid length.
[  418.655925][T12431] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2254'.
[  418.804351][T12433] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  418.819446][T12436] netlink: 209560 bytes leftover after parsing attributes in process `syz.2.2257'.
[  419.113273][T12449] team0: Device veth1_macvtap failed to register rx_handler
[  419.243684][T12450] team0: entered promiscuous mode
[  419.259153][T12450] team_slave_1: entered promiscuous mode
[  419.275948][T12450] geneve1: entered promiscuous mode
[  419.293689][T12450] bond0: entered promiscuous mode
[  419.309050][T12450] bond_slave_1: entered promiscuous mode
[  419.336677][T12450] bridge0: entered promiscuous mode
[  419.358885][T12450] team0: entered allmulticast mode
[  419.375981][T12450] team_slave_1: entered allmulticast mode
[  419.407615][T12450] geneve1: entered allmulticast mode
[  419.437121][T12450] bond0: entered allmulticast mode
[  419.453375][T12450] bond_slave_1: entered allmulticast mode
[  419.471208][T12450] bridge0: entered allmulticast mode
[  419.506853][T12450] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  421.637006][T12503] __nla_validate_parse: 5 callbacks suppressed
[  421.637028][T12503] netlink: 209560 bytes leftover after parsing attributes in process `syz.3.2281'.
[  422.553753][T12510] validate_nla: 5 callbacks suppressed
[  422.553789][T12510] netlink: 'syz.1.2279': attribute type 3 has an invalid length.
[  422.655831][T12510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2279'.
[  423.230321][T12530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2288'.
[  424.202219][T12549] netlink: 'syz.3.2293': attribute type 10 has an invalid length.
[  424.241443][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2293'.
[  424.268696][T12549] team0: entered promiscuous mode
[  424.279805][T12549] team_slave_1: entered promiscuous mode
[  424.311790][T12549] bond0: entered promiscuous mode
[  424.332659][T12549] bond_slave_0: entered promiscuous mode
[  424.338593][T12549] bond_slave_1: entered promiscuous mode
[  424.371731][T12549] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  424.395212][T12549] hsr_slave_0: entered promiscuous mode
[  424.411911][T12549] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  424.431824][T12549] team0: entered allmulticast mode
[  424.443246][T12549] team_slave_1: entered allmulticast mode
[  424.463322][T12549] bond0: entered allmulticast mode
[  424.485058][T12549] bond_slave_0: entered allmulticast mode
[  424.500963][T12549] bond_slave_1: entered allmulticast mode
[  424.521127][T12549] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  424.541570][T12549] hsr_slave_0: entered allmulticast mode
[  424.571489][T12549] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  424.601092][T12549] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  425.331569][T12564] FAULT_INJECTION: forcing a failure.
[  425.331569][T12564] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  425.346420][T12564] CPU: 1 PID: 12564 Comm: syz.1.2297 Not tainted syzkaller #0
[  425.353931][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  425.365136][T12564] Call Trace:
[  425.368435][T12564]  <TASK>
[  425.371393][T12564]  dump_stack_lvl+0x18c/0x250
[  425.376105][T12564]  ? show_regs_print_info+0x20/0x20
[  425.381335][T12564]  ? load_image+0x420/0x420
[  425.385968][T12564]  ? __lock_acquire+0x7d80/0x7d80
[  425.391379][T12564]  ? snprintf+0xe9/0x140
[  425.395673][T12564]  should_fail_ex+0x394/0x4c0
[  425.400693][T12564]  _copy_to_user+0x2f/0xa0
[  425.401844][T12567] FAULT_INJECTION: forcing a failure.
[  425.401844][T12567] name failslab, interval 1, probability 0, space 0, times 0
[  425.405122][T12564]  simple_read_from_buffer+0xe7/0x150
[  425.405172][T12564]  proc_fail_nth_read+0x1e8/0x260
[  425.405201][T12564]  ? proc_fault_inject_write+0x360/0x360
[  425.434441][T12564]  ? fsnotify_perm+0x271/0x5e0
[  425.439427][T12564]  ? proc_fault_inject_write+0x360/0x360
[  425.445112][T12564]  vfs_read+0x298/0x990
[  425.449310][T12564]  ? kernel_read+0x1e0/0x1e0
[  425.454268][T12564]  ? __fget_files+0x28/0x460
[  425.458880][T12564]  ? __fget_files+0x3fc/0x460
[  425.463593][T12564]  ? __fdget_pos+0x2a3/0x330
[  425.468279][T12564]  ? ksys_read+0x74/0x260
[  425.472836][T12564]  ksys_read+0x151/0x260
[  425.477377][T12564]  ? vfs_write+0x9a0/0x9a0
[  425.481825][T12564]  ? lockdep_hardirqs_on+0x98/0x150
[  425.487330][T12564]  do_syscall_64+0x55/0xb0
[  425.491791][T12564]  ? clear_bhb_loop+0x40/0x90
[  425.496481][T12564]  ? clear_bhb_loop+0x40/0x90
[  425.501265][T12564]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.507615][T12564] RIP: 0033:0x7fb688f5e90e
[  425.512056][T12564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  425.531934][T12564] RSP: 002b:00007fb689e86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  425.540440][T12564] RAX: ffffffffffffffda RBX: 00007fb689e876c0 RCX: 00007fb688f5e90e
[  425.548499][T12564] RDX: 000000000000000f RSI: 00007fb689e870a0 RDI: 0000000000000003
[  425.556469][T12564] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  425.564457][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.572434][T12564] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  425.580446][T12564]  </TASK>
[  425.591726][T12567] CPU: 1 PID: 12567 Comm: syz.3.2298 Not tainted syzkaller #0
[  425.599417][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  425.609678][T12567] Call Trace:
[  425.610469][T12561] netlink: 'syz.2.2295': attribute type 3 has an invalid length.
[  425.612964][T12567]  <TASK>
[  425.612977][T12567]  dump_stack_lvl+0x18c/0x250
[  425.613005][T12567]  ? show_regs_print_info+0x20/0x20
[  425.613023][T12567]  ? load_image+0x420/0x420
[  425.613050][T12567]  ? __might_sleep+0xe0/0xe0
[  425.613072][T12567]  ? __lock_acquire+0x7d80/0x7d80
[  425.613090][T12567]  ? trace_contention_end+0x39/0xe0
[  425.613114][T12567]  should_fail_ex+0x394/0x4c0
[  425.613140][T12567]  should_failslab+0x9/0x20
[  425.613165][T12567]  slab_pre_alloc_hook+0x59/0x300
[  425.613190][T12567]  ? mutex_lock_nested+0x20/0x20
[  425.673277][T12567]  ? rxrpc_lookup_local+0x57f/0x1700
[  425.678759][T12567]  __kmem_cache_alloc_node+0x53/0x250
[  425.684232][T12567]  ? rxrpc_lookup_local+0x57f/0x1700
[  425.689547][T12567]  kmalloc_trace+0x2a/0xe0
[  425.693993][T12567]  rxrpc_lookup_local+0x57f/0x1700
[  425.699118][T12567]  ? rxrpc_local_dont_fragment+0x70/0x70
[  425.704839][T12567]  ? lock_chain_count+0x20/0x20
[  425.709703][T12567]  ? __local_bh_enable_ip+0x13a/0x1c0
[  425.715182][T12567]  ? lockdep_hardirqs_on+0x98/0x150
[  425.720387][T12567]  ? __local_bh_enable_ip+0x13a/0x1c0
[  425.725836][T12567]  ? _local_bh_enable+0xa0/0xa0
[  425.730679][T12567]  ? do_raw_spin_unlock+0x121/0x230
[  425.735885][T12567]  rxrpc_sendmsg+0x2f3/0x5b0
[  425.740652][T12567]  ? rxrpc_getsockopt+0x150/0x150
[  425.745692][T12567]  ____sys_sendmsg+0x61b/0x980
[  425.750649][T12567]  ? __sys_sendmsg_sock+0x30/0x30
[  425.755682][T12567]  ? __import_iovec+0x3fa/0x850
[  425.760898][T12567]  ? import_iovec+0x73/0xa0
[  425.765490][T12567]  ___sys_sendmsg+0x2a6/0x360
[  425.770797][T12567]  ? get_pid_task+0x20/0x1e0
[  425.775583][T12567]  ? __sys_sendmsg+0x2b0/0x2b0
[  425.780375][T12567]  ? __lock_acquire+0x7d80/0x7d80
[  425.785423][T12567]  __se_sys_sendmsg+0x1d0/0x2c0
[  425.790365][T12567]  ? __x64_sys_sendmsg+0x80/0x80
[  425.795392][T12567]  ? lockdep_hardirqs_on+0x98/0x150
[  425.800607][T12567]  do_syscall_64+0x55/0xb0
[  425.805108][T12567]  ? clear_bhb_loop+0x40/0x90
[  425.809879][T12567]  ? clear_bhb_loop+0x40/0x90
[  425.814603][T12567]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  425.820500][T12567] RIP: 0033:0x7f1f0139e0d9
[  425.824914][T12567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.844639][T12567] RSP: 002b:00007f1f02339028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.853069][T12567] RAX: ffffffffffffffda RBX: 00007f1f01625fa0 RCX: 00007f1f0139e0d9
[  425.861069][T12567] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  425.869208][T12567] RBP: 00007f1f02339090 R08: 0000000000000000 R09: 0000000000000000
[  425.877357][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.885499][T12567] R13: 00007f1f01626038 R14: 00007f1f01625fa0 R15: 00007ffe3eb387a8
[  425.893566][T12567]  </TASK>
[  425.901622][T12561] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2295'.
[  426.566976][T12579] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  426.589082][T12579] syzkaller0: entered promiscuous mode
[  426.595259][T12579] syzkaller0: entered allmulticast mode
[  428.386342][T12597] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2307'.
[  428.545899][T12607] netlink: 'syz.2.2309': attribute type 10 has an invalid length.
[  428.560430][T12608] FAULT_INJECTION: forcing a failure.
[  428.560430][T12608] name failslab, interval 1, probability 0, space 0, times 0
[  428.573133][T12607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2309'.
[  428.573267][T12607] team0: entered promiscuous mode
[  428.588337][T12607] team_slave_1: entered promiscuous mode
[  428.598656][T12607] bond0: entered promiscuous mode
[  428.604125][T12607] bond_slave_1: entered promiscuous mode
[  428.610196][T12607] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  428.619070][T12607] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  428.628489][T12607] team0: entered allmulticast mode
[  428.634050][T12607] team_slave_1: entered allmulticast mode
[  428.640163][T12607] bond0: entered allmulticast mode
[  428.646442][T12608] CPU: 1 PID: 12608 Comm: syz.0.2310 Not tainted syzkaller #0
[  428.653938][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  428.664018][T12608] Call Trace:
[  428.667407][T12608]  <TASK>
[  428.670370][T12608]  dump_stack_lvl+0x18c/0x250
[  428.675168][T12608]  ? show_regs_print_info+0x20/0x20
[  428.680495][T12608]  ? load_image+0x420/0x420
[  428.685139][T12608]  ? __might_sleep+0xe0/0xe0
[  428.689763][T12608]  ? __lock_acquire+0x7d80/0x7d80
[  428.694821][T12608]  should_fail_ex+0x394/0x4c0
[  428.699545][T12608]  should_failslab+0x9/0x20
[  428.704080][T12608]  slab_pre_alloc_hook+0x59/0x300
[  428.709144][T12608]  ? sk_prot_alloc+0xe7/0x210
[  428.713858][T12608]  ? sk_prot_alloc+0xe7/0x210
[  428.718569][T12608]  __kmem_cache_alloc_node+0x53/0x250
[  428.724072][T12608]  ? sk_prot_alloc+0xe7/0x210
[  428.728797][T12608]  __kmalloc+0xa7/0x240
[  428.732995][T12608]  sk_prot_alloc+0xe7/0x210
[  428.737539][T12608]  ? sk_alloc+0x24/0x350
[  428.741814][T12608]  sk_alloc+0x3a/0x350
[  428.745917][T12608]  ? bpf_ctx_init+0x154/0x190
[  428.750627][T12608]  bpf_prog_test_run_skb+0x371/0x18f0
[  428.756113][T12608]  ? __fget_files+0x28/0x460
[  428.761405][T12608]  ? __fget_files+0x3fc/0x460
[  428.766448][T12608]  ? cpu_online+0x60/0x60
[  428.770775][T12608]  bpf_prog_test_run+0x31f/0x390
[  428.775802][T12608]  __sys_bpf+0x49d/0x890
[  428.780046][T12608]  ? bpf_link_show_fdinfo+0x390/0x390
[  428.785425][T12608]  ? lock_chain_count+0x20/0x20
[  428.790624][T12608]  __x64_sys_bpf+0x7c/0x90
[  428.795048][T12608]  do_syscall_64+0x55/0xb0
[  428.799464][T12608]  ? clear_bhb_loop+0x40/0x90
[  428.804158][T12608]  ? clear_bhb_loop+0x40/0x90
[  428.808867][T12608]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  428.814955][T12608] RIP: 0033:0x7f3b8fd9e0d9
[  428.819621][T12608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.839323][T12608] RSP: 002b:00007f3b90c76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  428.847739][T12608] RAX: ffffffffffffffda RBX: 00007f3b90025fa0 RCX: 00007f3b8fd9e0d9
[  428.855704][T12608] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  428.863954][T12608] RBP: 00007f3b90c76090 R08: 0000000000000000 R09: 0000000000000000
[  428.871924][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.879905][T12608] R13: 00007f3b90026038 R14: 00007f3b90025fa0 R15: 00007ffcb5f494a8
[  428.888062][T12608]  </TASK>
[  428.891349][T12607] bond_slave_1: entered allmulticast mode
[  428.897213][T12607] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  428.904374][T12607] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  428.913042][T12607] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  429.571141][T12619] netlink: 'syz.1.2322': attribute type 21 has an invalid length.
[  429.580626][T12619] netlink: 'syz.1.2322': attribute type 1 has an invalid length.
[  429.670699][T12621] netlink: 'syz.3.2314': attribute type 3 has an invalid length.
[  429.679339][T12621] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2314'.
[  430.647655][T12654] FAULT_INJECTION: forcing a failure.
[  430.647655][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  430.663098][T12654] CPU: 0 PID: 12654 Comm: syz.1.2326 Not tainted syzkaller #0
[  430.670681][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  430.680775][T12654] Call Trace:
[  430.684060][T12654]  <TASK>
[  430.686984][T12654]  dump_stack_lvl+0x18c/0x250
[  430.691757][T12654]  ? show_regs_print_info+0x20/0x20
[  430.696949][T12654]  ? load_image+0x420/0x420
[  430.701465][T12654]  ? __might_fault+0xaa/0x120
[  430.706146][T12654]  ? __lock_acquire+0x7d80/0x7d80
[  430.711205][T12654]  should_fail_ex+0x394/0x4c0
[  430.715884][T12654]  _copy_from_iter+0x1cd/0x1290
[  430.720733][T12654]  ? rcu_is_watching+0x15/0xb0
[  430.725509][T12654]  ? copyout_mc+0x70/0x70
[  430.729865][T12654]  ? __virt_addr_valid+0x10c/0x380
[  430.735060][T12654]  ? __virt_addr_valid+0x10c/0x380
[  430.740168][T12654]  ? __virt_addr_valid+0x10c/0x380
[  430.745281][T12654]  ? __check_object_size+0x4fc/0xa40
[  430.750564][T12654]  netlink_sendmsg+0x76b/0xbf0
[  430.755413][T12654]  ? netlink_getsockopt+0x590/0x590
[  430.760615][T12654]  ? apparmor_socket_sendmsg+0x8e/0x330
[  430.766180][T12654]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  430.771672][T12654]  ? security_socket_sendmsg+0x80/0xa0
[  430.777182][T12654]  ? netlink_getsockopt+0x590/0x590
[  430.782632][T12654]  ____sys_sendmsg+0x61b/0x980
[  430.787410][T12654]  ? __asan_memset+0x22/0x40
[  430.792092][T12654]  ? __sys_sendmsg_sock+0x30/0x30
[  430.797110][T12654]  ? __import_iovec+0x5f2/0x850
[  430.801963][T12654]  ? import_iovec+0x73/0xa0
[  430.806648][T12654]  ___sys_sendmsg+0x2a6/0x360
[  430.811678][T12654]  ? get_pid_task+0x20/0x1e0
[  430.816275][T12654]  ? __sys_sendmsg+0x2b0/0x2b0
[  430.821133][T12654]  ? __lock_acquire+0x7d80/0x7d80
[  430.826263][T12654]  __se_sys_sendmsg+0x1d0/0x2c0
[  430.831130][T12654]  ? __x64_sys_sendmsg+0x80/0x80
[  430.836316][T12654]  ? lockdep_hardirqs_on+0x98/0x150
[  430.841694][T12654]  do_syscall_64+0x55/0xb0
[  430.846112][T12654]  ? clear_bhb_loop+0x40/0x90
[  430.850782][T12654]  ? clear_bhb_loop+0x40/0x90
[  430.855457][T12654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  430.861351][T12654] RIP: 0033:0x7fb688f9e0d9
[  430.865761][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.885372][T12654] RSP: 002b:00007fb689e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  430.893782][T12654] RAX: ffffffffffffffda RBX: 00007fb689225fa0 RCX: 00007fb688f9e0d9
[  430.901752][T12654] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000003
[  430.909887][T12654] RBP: 00007fb689e87090 R08: 0000000000000000 R09: 0000000000000000
[  430.917938][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  430.925909][T12654] R13: 00007fb689226038 R14: 00007fb689225fa0 R15: 00007ffe56ce1658
[  430.933905][T12654]  </TASK>
[  431.011895][T12656] netlink: 'syz.2.2327': attribute type 21 has an invalid length.
[  431.020177][T12656] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  431.244831][T12665] netlink: 'syz.2.2331': attribute type 15 has an invalid length.
[  431.271199][T12665] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2331'.
[  431.333224][T12661] netlink: 'syz.0.2328': attribute type 3 has an invalid length.
[  431.351499][T12661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2328'.
[  431.672701][T12683] FAULT_INJECTION: forcing a failure.
[  431.672701][T12683] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  431.708586][T12683] CPU: 0 PID: 12683 Comm: syz.2.2336 Not tainted syzkaller #0
[  431.716119][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  431.726230][T12683] Call Trace:
[  431.729612][T12683]  <TASK>
[  431.732573][T12683]  dump_stack_lvl+0x18c/0x250
[  431.737307][T12683]  ? show_regs_print_info+0x20/0x20
[  431.742618][T12683]  ? load_image+0x420/0x420
[  431.747261][T12683]  ? __might_fault+0xaa/0x120
[  431.751980][T12683]  ? __lock_acquire+0x7d80/0x7d80
[  431.757144][T12683]  ? __virt_addr_valid+0x10c/0x380
[  431.762304][T12683]  should_fail_ex+0x394/0x4c0
[  431.767116][T12683]  _copy_from_user+0x2f/0xe0
[  431.771807][T12683]  ____sys_sendmsg+0x329/0x980
[  431.776621][T12683]  ? __sys_sendmsg_sock+0x30/0x30
[  431.781683][T12683]  ? __import_iovec+0x3fa/0x850
[  431.786581][T12683]  ? import_iovec+0x73/0xa0
[  431.791144][T12683]  ___sys_sendmsg+0x2a6/0x360
[  431.795874][T12683]  ? __sys_sendmsg+0x2b0/0x2b0
[  431.800703][T12683]  ? trace_call_bpf+0xc3/0x6c0
[  431.805534][T12683]  __se_sys_sendmsg+0x1d0/0x2c0
[  431.810457][T12683]  ? perf_trace_preemptirq_template+0x269/0x330
[  431.816929][T12683]  ? __x64_sys_sendmsg+0x80/0x80
[  431.821922][T12683]  ? lockdep_hardirqs_on+0x98/0x150
[  431.827180][T12683]  do_syscall_64+0x55/0xb0
[  431.831630][T12683]  ? clear_bhb_loop+0x40/0x90
[  431.836339][T12683]  ? clear_bhb_loop+0x40/0x90
[  431.841051][T12683]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  431.847073][T12683] RIP: 0033:0x7f375659e0d9
[  431.851524][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.871168][T12683] RSP: 002b:00007f37547f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.879622][T12683] RAX: ffffffffffffffda RBX: 00007f3756825fa0 RCX: 00007f375659e0d9
[  431.887884][T12683] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003
[  431.895884][T12683] RBP: 00007f37547f6090 R08: 0000000000000000 R09: 0000000000000000
[  431.903972][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.912058][T12683] R13: 00007f3756826038 R14: 00007f3756825fa0 R15: 00007ffd2dc09dd8
[  431.920112][T12683]  </TASK>
[  432.182311][T12688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2338'.
[  432.557042][T12696] netlink: 'syz.3.2340': attribute type 21 has an invalid length.
[  432.583063][T12698] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2341'.
[  432.592152][T12696] netlink: 'syz.3.2340': attribute type 1 has an invalid length.
[  432.592911][T12698] openvswitch: netlink: Key type 29 is not supported
[  433.400676][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  433.412024][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  433.424128][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  433.444858][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  433.456280][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  433.465060][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  433.960749][T12715] chnl_net:caif_netlink_parms(): no params data found
[  433.989335][T12729] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2351'.
[  434.002634][T12729] openvswitch: netlink: Key type 29 is not supported
[  434.225956][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.255179][T12715] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.262866][T12715] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.270288][T12715] bridge_slave_0: entered allmulticast mode
[  434.286443][T12715] bridge_slave_0: entered promiscuous mode
[  434.318132][T12715] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.345958][T12715] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.357018][T12715] bridge_slave_1: entered allmulticast mode
[  434.371062][T12715] bridge_slave_1: entered promiscuous mode
[  434.414628][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.648077][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.729996][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.777541][T12715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.843405][T12715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.950622][T12715] team0: Port device team_slave_0 added
[  435.074565][T12715] team0: Port device team_slave_1 added
[  435.192952][T12715] batman_adv: batadv0: Adding interface: batadv_slave_0
[  435.200043][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.307132][T12715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  435.348412][T12715] batman_adv: batadv0: Adding interface: batadv_slave_1
[  435.370410][T12715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  435.441417][T12715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  435.532003][ T5082] Bluetooth: hci4: command tx timeout
[  435.867862][T12715] hsr_slave_0: entered promiscuous mode
[  435.894073][T12715] hsr_slave_1: entered promiscuous mode
[  437.016288][T12787] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2361'.
[  437.027095][T12787] openvswitch: netlink: Key type 29 is not supported
[  437.316782][T12791] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2369'.
[  437.368410][T12791] openvswitch: netlink: Key type 29 is not supported
[  437.611732][ T5082] Bluetooth: hci4: command tx timeout
[  437.985622][T12715] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  438.070416][   T41] bond0: (slave wlan1): Releasing backup interface
[  438.120487][T12715] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  438.167972][T12715] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  438.187632][T12715] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  438.342387][   T41] veth1_vlan: left promiscuous mode
[  438.537799][   T41] team0 (unregistering): Port device geneve1 removed
[  438.848467][   T41] team0 (unregistering): Port device hsr_slave_0 removed
[  438.967367][   T41] team0 (unregistering): Port device team_slave_1 removed
[  439.011148][   T41] team0 (unregistering): Port device team_slave_0 removed
[  439.053922][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  439.304776][   T41] team0 (unregistering): Port device bond0 removed
[  439.338882][   T41] bond0 (unregistering): Released all slaves
[  439.389380][T12824] netlink: 'syz.2.2366': attribute type 30 has an invalid length.
[  439.590659][T12837] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2371'.
[  439.660315][T12837] openvswitch: netlink: Key type 29 is not supported
[  439.716383][ T5082] Bluetooth: hci4: command tx timeout
[  439.733293][T12715] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.756387][T12715] 8021q: adding VLAN 0 to HW filter on device team0
[  439.772745][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.779944][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.839029][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.846260][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.997686][T12715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  440.606782][T12715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.657293][T12873] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2379'.
[  440.671546][T12873] openvswitch: netlink: Key type 29 is not supported
[  440.815252][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  440.823089][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  441.772264][ T5082] Bluetooth: hci4: command tx timeout
[  441.824085][T12715] veth0_vlan: entered promiscuous mode
[  441.864421][T12882] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2380'.
[  442.035079][T12715] veth1_vlan: entered promiscuous mode
[  442.277097][T12715] veth0_macvtap: entered promiscuous mode
[  442.309177][T12715] veth1_macvtap: entered promiscuous mode
[  442.405373][T12715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.440865][T12715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.464761][T12715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.474851][T12715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.485465][T12715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.496594][T12715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.718360][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.746926][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  442.797153][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  442.810909][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.021743][T12938] FAULT_INJECTION: forcing a failure.
[  443.021743][T12938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.035896][T12938] CPU: 1 PID: 12938 Comm: syz.1.2343 Not tainted syzkaller #0
[  443.043403][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  443.053937][T12938] Call Trace:
[  443.057278][T12938]  <TASK>
[  443.060328][T12938]  dump_stack_lvl+0x18c/0x250
[  443.065130][T12938]  ? show_regs_print_info+0x20/0x20
[  443.070464][T12938]  ? load_image+0x420/0x420
[  443.075060][T12938]  ? __lock_acquire+0x7d80/0x7d80
[  443.080119][T12938]  ? lockdep_hardirqs_on+0x98/0x150
[  443.085455][T12938]  should_fail_ex+0x394/0x4c0
[  443.090376][T12938]  _copy_to_user+0x2f/0xa0
[  443.095052][T12938]  simple_read_from_buffer+0xe7/0x150
[  443.100553][T12938]  proc_fail_nth_read+0x1e8/0x260
[  443.105626][T12938]  ? proc_fault_inject_write+0x360/0x360
[  443.111496][T12938]  ? fsnotify_perm+0x271/0x5e0
[  443.116739][T12938]  ? proc_fault_inject_write+0x360/0x360
[  443.123192][T12938]  vfs_read+0x298/0x990
[  443.127396][T12938]  ? kernel_read+0x1e0/0x1e0
[  443.132198][T12938]  ? __fget_files+0x28/0x460
[  443.136826][T12938]  ? __fget_files+0x3fc/0x460
[  443.141653][T12938]  ? __fdget_pos+0x2a3/0x330
[  443.146724][T12938]  ? ksys_read+0x74/0x260
[  443.151096][T12938]  ksys_read+0x151/0x260
[  443.155502][T12938]  ? vfs_write+0x9a0/0x9a0
[  443.160051][T12938]  ? lockdep_hardirqs_on+0x98/0x150
[  443.165289][T12938]  do_syscall_64+0x55/0xb0
[  443.169743][T12938]  ? clear_bhb_loop+0x40/0x90
[  443.174535][T12938]  ? clear_bhb_loop+0x40/0x90
[  443.179262][T12938]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  443.185188][T12938] RIP: 0033:0x7f8cc695e90e
[  443.189629][T12938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  443.209530][T12938] RSP: 002b:00007f8cc77fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  443.218161][T12938] RAX: ffffffffffffffda RBX: 00007f8cc77fd6c0 RCX: 00007f8cc695e90e
[  443.226200][T12938] RDX: 000000000000000f RSI: 00007f8cc77fd0a0 RDI: 000000000000000d
[  443.234399][T12938] RBP: 00007f8cc77fd090 R08: 0000000000000000 R09: 0000000000000000
[  443.242592][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.250942][T12938] R13: 00007f8cc6c26038 R14: 00007f8cc6c25fa0 R15: 00007fff8f58ca38
[  443.258962][T12938]  </TASK>
[  443.387064][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.394912][T12950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  443.403361][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.410939][T12950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  444.653146][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  444.663642][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  444.673394][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  444.693217][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  444.722012][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  444.732996][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  444.802569][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.986039][T12971] netlink: 'syz.1.2395': attribute type 3 has an invalid length.
[  445.042494][T12971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2395'.
[  445.214224][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.219732][T12980] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2397'.
[  445.374616][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.440570][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode
[  445.470535][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode
[  445.497766][   T12] team0: Port device netdevsim0 removed
[  445.513021][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.809340][   T12] tipc: Left network mode
[  445.860599][T12966] chnl_net:caif_netlink_parms(): no params data found
[  446.823590][ T5772] Bluetooth: hci0: command tx timeout
[  446.878984][T12966] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.888282][T12966] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.897961][T12966] bridge_slave_0: entered allmulticast mode
[  446.919978][T12966] bridge_slave_0: entered promiscuous mode
[  446.938391][ T5772] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8
[  446.987186][T12966] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.022660][T12966] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.032285][T12966] bridge_slave_1: entered allmulticast mode
[  447.047584][T12966] bridge_slave_1: entered promiscuous mode
[  447.110848][T13080] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2406'.
[  447.121708][T13080] openvswitch: netlink: Key type 29 is not supported
[  447.276604][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.339503][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.648433][T13090] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2408'.
[  447.687668][T12966] team0: Port device team_slave_0 added
[  447.724631][T12966] team0: Port device team_slave_1 added
[  448.069127][T13094] netlink: 'syz.3.2407': attribute type 3 has an invalid length.
[  448.077753][T13094] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2407'.
[  448.109909][T13097] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2410'.
[  448.189427][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.213576][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.273854][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.291156][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.299534][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.326914][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.430812][T13110] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2415'.
[  448.469450][T13112] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2416'.
[  448.471417][T13110] openvswitch: netlink: Key type 29 is not supported
[  448.638644][T12966] hsr_slave_0: entered promiscuous mode
[  448.665760][T12966] hsr_slave_1: entered promiscuous mode
[  448.687591][T12966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.711799][T12966] Cannot create hsr debugfs directory
[  448.901769][ T5772] Bluetooth: hci0: command tx timeout
[  449.151834][   T12] bond0: (slave wlan1): Releasing backup interface
[  449.189674][   T12] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode
[  449.221363][   T12] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode
[  449.340212][T13135] netlink: 'syz.3.2419': attribute type 3 has an invalid length.
[  449.369270][T13135] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2419'.
[  449.388924][T13134] netlink: 'syz.0.2417': attribute type 3 has an invalid length.
[  449.404063][T13134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2417'.
[  449.805717][   T12] bridge0: port 3(dummy0) entered disabled state
[  449.834694][   T12] bridge_slave_1: left allmulticast mode
[  449.845724][   T12] bridge_slave_1: left promiscuous mode
[  449.857486][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.908239][   T12] veth1_macvtap: left promiscuous mode
[  449.916501][   T12] veth1_vlan: left promiscuous mode
[  450.141815][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2425'.
[  450.950234][   T12] team_slave_1 (unregistering): left promiscuous mode
[  450.957963][   T12] team_slave_1 (unregistering): left allmulticast mode
[  450.975288][   T12] team0 (unregistering): Port device team_slave_1 removed
[  450.982879][ T5772] Bluetooth: hci0: command tx timeout
[  451.232908][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  451.263707][   T12] bond_slave_1 (unregistering): left promiscuous mode
[  451.270738][   T12] bond_slave_1 (unregistering): left allmulticast mode
[  451.935875][   T12] bond0 (unregistering): left promiscuous mode
[  451.948211][   T12] bond0 (unregistering): left allmulticast mode
[  451.961236][   T12] team0 (unregistering): Port device bond0 removed
[  452.015549][   T12] bond0 (unregistering): Released all slaves
[  452.231380][T13158] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2425'.
[  452.242108][T13172] netlink: 'syz.3.2429': attribute type 3 has an invalid length.
[  452.249873][T13172] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2429'.
[  452.969151][T12966] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  453.003926][T12966] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  453.027335][T12966] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  453.051675][ T5772] Bluetooth: hci0: command tx timeout
[  453.061415][T12966] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  453.265872][T12966] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.325784][T12966] 8021q: adding VLAN 0 to HW filter on device team0
[  453.350260][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.357471][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.438266][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.445928][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.824979][T13209] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2435'.
[  453.843419][T13209] openvswitch: netlink: Key type 29 is not supported
[  454.057224][T12966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.207376][T12966] veth0_vlan: entered promiscuous mode
[  454.258895][T12966] veth1_vlan: entered promiscuous mode
[  454.316276][T13226] netlink: 'syz.1.2437': attribute type 3 has an invalid length.
[  454.355849][T13226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2437'.
[  454.487222][T12966] veth0_macvtap: entered promiscuous mode
[  454.551482][T12966] veth1_macvtap: entered promiscuous mode
[  454.643197][T12966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.676824][T12966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.725778][T12966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.753167][T12966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.781361][T12966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.790469][T12966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  455.014444][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.061926][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.143172][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.165545][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.419512][T13260] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2446'.
[  455.464801][T13260] openvswitch: netlink: Key type 29 is not supported
[  456.267460][T13283] netlink: 'syz.2.2449': attribute type 3 has an invalid length.
[  456.331890][T13283] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2449'.
[  457.119852][T13313] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2456'.
[  457.151680][T13313] openvswitch: netlink: Key type 29 is not supported
[  457.426895][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.454899][T13323] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.492283][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.532811][T13323] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.996421][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  458.013313][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  458.021835][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  458.035013][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  458.044101][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  458.052419][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  458.204492][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.310119][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.402537][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.427094][T13340] chnl_net:caif_netlink_parms(): no params data found
[  458.497337][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  458.509853][   T12] bridge0: port 3(netdevsim0) entered disabled state
[  458.527428][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.619831][T13340] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.628098][T13340] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.635878][T13340] bridge_slave_0: entered allmulticast mode
[  458.644957][T13340] bridge_slave_0: entered promiscuous mode
[  458.661794][T13340] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.669498][T13340] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.677008][T13340] bridge_slave_1: entered allmulticast mode
[  458.684660][T13340] bridge_slave_1: entered promiscuous mode
[  458.730495][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.784964][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.870197][T13340] team0: Port device team_slave_0 added
[  458.898463][T13340] team0: Port device team_slave_1 added
[  458.946167][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.953325][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.980543][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.093155][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.107828][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.144352][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.176058][T13354] can: request_module (can-proto-4) failed.
[  459.351790][T13340] hsr_slave_0: entered promiscuous mode
[  459.358840][T13340] hsr_slave_1: entered promiscuous mode
[  459.365964][T13340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  459.376612][T13340] Cannot create hsr debugfs directory
[  459.666288][T13366] netlink: 'syz.3.2463': attribute type 3 has an invalid length.
[  459.721624][T13366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2463'.
[  459.737996][T13373] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2467'.
[  459.772463][T13373] openvswitch: netlink: Key type 29 is not supported
[  460.092284][ T5082] Bluetooth: hci2: command tx timeout
[  461.140735][T13410] netlink: 'syz.1.2474': attribute type 10 has an invalid length.
[  461.207706][T13410] team0: Device hsr_slave_0 failed to register rx_handler
[  461.290227][T13414] netlink: 'syz.3.2476': attribute type 3 has an invalid length.
[  461.329402][T13414] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2476'.
[  461.400423][T13423] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2478'.
[  461.444908][   T12] hsr_slave_0: left promiscuous mode
[  461.448619][T13423] openvswitch: netlink: Key type 29 is not supported
[  461.470226][   T12] hsr_slave_1: left promiscuous mode
[  461.490492][   T12] hsr0: left allmulticast mode
[  461.504200][   T12] bridge0: port 1(hsr0) entered disabled state
[  461.522404][   T12] bridge_slave_1: left allmulticast mode
[  461.528139][   T12] bridge_slave_1: left promiscuous mode
[  461.535152][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.584574][   T12] veth1_macvtap: left promiscuous mode
[  461.594383][   T12] veth0_macvtap: left promiscuous mode
[  461.607946][   T12] veth1_vlan: left promiscuous mode
[  461.869433][   T12] geneve1 (unregistering): left promiscuous mode
[  461.876707][   T12] geneve1 (unregistering): left allmulticast mode
[  461.888270][   T12] team0 (unregistering): Port device geneve1 removed
[  462.171601][ T5082] Bluetooth: hci2: command tx timeout
[  462.341358][   T12] team_slave_1 (unregistering): left promiscuous mode
[  462.348494][   T12] team_slave_1 (unregistering): left allmulticast mode
[  462.358145][   T12] team0 (unregistering): Port device team_slave_1 removed
[  462.441482][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.450895][   T12] bond_slave_1 (unregistering): left promiscuous mode
[  462.457829][   T12] bond_slave_1 (unregistering): left allmulticast mode
[  462.678870][   T12] bond0 (unregistering): left promiscuous mode
[  462.685112][   T12] bridge0 (unregistering): left promiscuous mode
[  462.691596][   T12] bond0 (unregistering): left allmulticast mode
[  462.697970][   T12] bridge0 (unregistering): left allmulticast mode
[  462.706014][   T12] team0 (unregistering): Port device bond0 removed
[  462.737844][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  462.747322][   T12] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  462.758919][   T12] bond0 (unregistering): Released all slaves
[  462.824590][T13419] netlink: 'syz.2.2477': attribute type 21 has an invalid length.
[  462.832712][T13419] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2477'.
[  463.027270][T13340] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  463.078441][T13340] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  463.110611][T13340] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  463.137513][T13340] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  463.486904][T13459] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2487'.
[  463.496696][T13340] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.547882][T13459] openvswitch: netlink: Key type 29 is not supported
[  463.572534][T13340] 8021q: adding VLAN 0 to HW filter on device team0
[  463.655780][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.662988][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.685226][T13456] netlink: 'syz.2.2486': attribute type 3 has an invalid length.
[  463.694443][T13456] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2486'.
[  463.732538][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.739741][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  464.027265][T13480] FAULT_INJECTION: forcing a failure.
[  464.027265][T13480] name failslab, interval 1, probability 0, space 0, times 0
[  464.041892][T13480] CPU: 1 PID: 13480 Comm: syz.3.2491 Not tainted syzkaller #0
[  464.049480][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.059558][T13480] Call Trace:
[  464.062863][T13480]  <TASK>
[  464.065832][T13480]  dump_stack_lvl+0x18c/0x250
[  464.070713][T13480]  ? show_regs_print_info+0x20/0x20
[  464.076143][T13480]  ? load_image+0x420/0x420
[  464.080683][T13480]  ? __might_sleep+0xe0/0xe0
[  464.085569][T13480]  ? __lock_acquire+0x7d80/0x7d80
[  464.090715][T13480]  ? mark_lock+0x94/0x320
[  464.095179][T13480]  should_fail_ex+0x394/0x4c0
[  464.099883][T13480]  should_failslab+0x9/0x20
[  464.104541][T13480]  slab_pre_alloc_hook+0x59/0x300
[  464.109689][T13480]  ? page_pool_create+0x71/0x5c0
[  464.114977][T13480]  __kmem_cache_alloc_node+0x53/0x250
[  464.120538][T13480]  ? page_pool_create+0x71/0x5c0
[  464.125600][T13480]  kmalloc_node_trace+0x26/0xe0
[  464.130476][T13480]  page_pool_create+0x71/0x5c0
[  464.135375][T13480]  __veth_napi_enable_range+0x198/0x700
[  464.141044][T13480]  ? __skb_frag_ref+0x1c0/0x1c0
[  464.146147][T13480]  ? netif_napi_add_weight+0x890/0xba0
[  464.151928][T13480]  veth_napi_enable_range+0xd0/0x150
[  464.157260][T13480]  veth_set_features+0x1c8/0x2a0
[  464.162321][T13480]  __netdev_update_features+0x957/0x1790
[  464.168503][T13480]  ? dev_xdp_attach+0x1030/0x1030
[  464.174247][T13480]  ? __might_fault+0xaa/0x120
[  464.179147][T13480]  ? __lock_acquire+0x7d80/0x7d80
[  464.184293][T13480]  ? aa_get_newest_label+0xfd/0x5c0
[  464.190527][T13480]  ? __might_fault+0xaa/0x120
[  464.195602][T13480]  ? __might_fault+0xc6/0x120
[  464.200318][T13480]  ? __might_fault+0xaa/0x120
[  464.205242][T13480]  ethtool_set_one_feature+0x2a8/0x2f0
[  464.210737][T13480]  ? apparmor_capable+0x137/0x1a0
[  464.215875][T13480]  ? ethtool_get_one_feature+0x280/0x280
[  464.221542][T13480]  ? security_capable+0x89/0xb0
[  464.226424][T13480]  dev_ethtool+0xfd7/0x18d0
[  464.230964][T13480]  ? ethtool_get_module_eeprom_call+0x170/0x170
[  464.237271][T13480]  ? __lock_acquire+0x7d80/0x7d80
[  464.242569][T13480]  ? lockdep_hardirqs_on+0x98/0x150
[  464.247779][T13480]  ? full_name_hash+0x92/0xe0
[  464.252914][T13480]  ? dev_load+0x21/0x1f0
[  464.258053][T13480]  dev_ioctl+0x392/0x1140
[  464.262667][T13480]  sock_do_ioctl+0x239/0x310
[  464.267789][T13480]  ? sock_show_fdinfo+0xb0/0xb0
[  464.272741][T13480]  sock_ioctl+0x5be/0x7e0
[  464.277425][T13480]  ? sock_poll+0x3e0/0x3e0
[  464.281964][T13480]  ? bpf_lsm_file_ioctl+0x9/0x10
[  464.287665][T13480]  ? security_file_ioctl+0x80/0xa0
[  464.293697][T13480]  ? sock_poll+0x3e0/0x3e0
[  464.298171][T13480]  __se_sys_ioctl+0xfd/0x170
[  464.302802][T13480]  do_syscall_64+0x55/0xb0
[  464.307309][T13480]  ? clear_bhb_loop+0x40/0x90
[  464.312242][T13480]  ? clear_bhb_loop+0x40/0x90
[  464.317174][T13480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  464.323068][T13480] RIP: 0033:0x7f1f0139e0d9
[  464.327487][T13480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.347094][T13480] RSP: 002b:00007f1f02339028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  464.355561][T13480] RAX: ffffffffffffffda RBX: 00007f1f01625fa0 RCX: 00007f1f0139e0d9
[  464.363565][T13480] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d
[  464.371534][T13480] RBP: 00007f1f02339090 R08: 0000000000000000 R09: 0000000000000000
[  464.379536][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.388039][T13480] R13: 00007f1f01626038 R14: 00007f1f01625fa0 R15: 00007ffe3eb387a8
[  464.396417][T13480]  </TASK>
[  464.400491][ T5082] Bluetooth: hci2: command tx timeout
[  464.409901][T13480] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9
[  464.837196][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.944674][T13504] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2497'.
[  465.011489][T13504] openvswitch: netlink: Key type 29 is not supported
[  465.106152][T13505] netlink: 'syz.3.2498': attribute type 3 has an invalid length.
[  465.115779][T13505] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2498'.
[  465.206049][T13340] veth0_vlan: entered promiscuous mode
[  465.254677][T13340] veth1_vlan: entered promiscuous mode
[  465.410722][T13340] veth0_macvtap: entered promiscuous mode
[  465.446707][T13340] veth1_macvtap: entered promiscuous mode
[  466.124770][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.154762][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.186109][T13340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.221435][T13340] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.230370][T13340] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.269173][T13340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.379961][T13542] netlink: 'syz.1.2503': attribute type 22 has an invalid length.
[  466.407457][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'.
[  466.419591][ T5082] Bluetooth: hci2: command tx timeout
[  466.666592][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.697356][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.848289][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.848779][T13549] netlink: 'syz.3.2502': attribute type 3 has an invalid length.
[  466.875863][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.929868][T13549] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2502'.
[  467.189596][T13567] netlink: 'syz.3.2510': attribute type 16 has an invalid length.
[  467.204201][T13567] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2510'.
[  467.281192][T13571] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2511'.
[  467.319330][T13572] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2511'.
[  467.694298][T13580] netlink: 'syz.2.2508': attribute type 3 has an invalid length.
[  467.755050][T13580] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2508'.
[  468.249382][T13600] netlink: 'syz.2.2516': attribute type 10 has an invalid length.
[  468.279103][T13600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2516'.
[  468.320195][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  468.338393][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  468.343613][T13600] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  468.383182][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  468.392558][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  468.401360][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  468.409674][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  468.589985][T13613] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2519'.
[  468.642782][T13613] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.897117][T13613] bridge_slave_0 (unregistering): left allmulticast mode
[  468.995682][T13613] bridge_slave_0 (unregistering): left promiscuous mode
[  469.036103][T13613] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.137878][T13621] netlink: 'syz.0.2518': attribute type 3 has an invalid length.
[  469.148096][T13621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2518'.
[  469.531218][T13630] FAULT_INJECTION: forcing a failure.
[  469.531218][T13630] name failslab, interval 1, probability 0, space 0, times 0
[  469.569857][T13631] wlan0: mtu greater than device maximum
[  469.576905][T13630] CPU: 0 PID: 13630 Comm: syz.2.2523 Not tainted syzkaller #0
[  469.584432][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  469.594540][T13630] Call Trace:
[  469.597856][T13630]  <TASK>
[  469.600855][T13630]  dump_stack_lvl+0x18c/0x250
[  469.605581][T13630]  ? trace_event_raw_event_lock+0x240/0x240
[  469.611703][T13630]  ? show_regs_print_info+0x20/0x20
[  469.617031][T13630]  ? load_image+0x420/0x420
[  469.621581][T13630]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  469.627651][T13630]  should_fail_ex+0x394/0x4c0
[  469.632508][T13630]  should_failslab+0x9/0x20
[  469.637062][T13630]  slab_pre_alloc_hook+0x59/0x300
[  469.642152][T13630]  kmem_cache_alloc+0x5a/0x2c0
[  469.647035][T13630]  ? __nf_conntrack_alloc+0x93/0x370
[  469.652499][T13630]  __nf_conntrack_alloc+0x93/0x370
[  469.657707][T13630]  init_conntrack+0x166/0xe20
[  469.662450][T13630]  ? early_drop+0x7f0/0x7f0
[  469.667045][T13630]  ? nf_conntrack_find_get+0x670/0x670
[  469.672647][T13630]  ? __siphash_unaligned+0x25c/0x3d0
[  469.678270][T13630]  nf_conntrack_in+0xc29/0x15b0
[  469.683236][T13630]  ? nf_ct_pernet+0x270/0x270
[  469.687964][T13630]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  469.694174][T13630]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  469.700405][T13630]  ? nf_hook_slow+0xd2/0x200
[  469.705075][T13630]  ? __sanitizer_cov_trace_switch+0x90/0xe0
[  469.711108][T13630]  ? ipv4_conntrack_local+0x123/0x200
[  469.716700][T13630]  ? ipv4_conntrack_in+0x20/0x20
[  469.721681][T13630]  nf_hook_slow+0xbd/0x200
[  469.726164][T13630]  ? nf_hook+0x390/0x390
[  469.730668][T13630]  nf_hook+0x228/0x390
[  469.734803][T13630]  ? nf_hook+0xa2/0x390
[  469.738997][T13630]  ? __ip_local_out+0x5f0/0x5f0
[  469.743902][T13630]  ? nf_hook+0x390/0x390
[  469.748475][T13630]  ? csum_partial+0x241/0x2c0
[  469.753224][T13630]  ? ip_fast_csum+0x1ee/0x2b0
[  469.758013][T13630]  __ip_local_out+0x4db/0x5f0
[  469.762738][T13630]  ? nf_hook+0x390/0x390
[  469.767046][T13630]  ip_send_skb+0x4c/0x1d0
[  469.771433][T13630]  udp_send_skb+0xa7d/0x1440
[  469.776255][T13630]  udp_sendmsg+0x1b23/0x23d0
[  469.780945][T13630]  ? udp_sendmsg+0x23d0/0x23d0
[  469.785774][T13630]  ? udp_cmsg_send+0x350/0x350
[  469.790616][T13630]  ? __lock_acquire+0x7d80/0x7d80
[  469.795896][T13630]  ? trace_call_bpf+0xc3/0x6c0
[  469.800800][T13630]  udpv6_sendmsg+0x7a1/0x2350
[  469.805918][T13630]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  469.811914][T13630]  ? trace_event_raw_event_lock+0x240/0x240
[  469.817860][T13630]  ? udp_v6_early_demux+0xf90/0xf90
[  469.823138][T13630]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  469.829222][T13630]  ? __local_bh_enable_ip+0x13a/0x1c0
[  469.834737][T13630]  ? _local_bh_enable+0xa0/0xa0
[  469.839912][T13630]  ? inet_send_prepare+0x1ae/0x250
[  469.845081][T13630]  ? inet_send_prepare+0x1ae/0x250
[  469.850333][T13630]  ? inet6_sendmsg+0x5f/0xd0
[  469.854958][T13630]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  469.860207][T13630]  ____sys_sendmsg+0x61b/0x980
[  469.865055][T13630]  ? __sys_sendmsg_sock+0x30/0x30
[  469.870206][T13630]  ? __import_iovec+0x3fa/0x850
[  469.875176][T13630]  ? import_iovec+0x73/0xa0
[  469.879845][T13630]  ___sys_sendmsg+0x2a6/0x360
[  469.884683][T13630]  ? __sys_sendmsg+0x2b0/0x2b0
[  469.889674][T13630]  ? ktime_get+0x7f/0x280
[  469.894225][T13630]  __se_sys_sendmsg+0x1d0/0x2c0
[  469.899154][T13630]  ? __x64_sys_sendmsg+0x80/0x80
[  469.904207][T13630]  ? lockdep_hardirqs_on+0x98/0x150
[  469.909584][T13630]  do_syscall_64+0x55/0xb0
[  469.914145][T13630]  ? clear_bhb_loop+0x40/0x90
[  469.918874][T13630]  ? clear_bhb_loop+0x40/0x90
[  469.923774][T13630]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  469.929710][T13630] RIP: 0033:0x7f9fff79e0d9
[  469.934174][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.954007][T13630] RSP: 002b:00007fa0006de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  469.962570][T13630] RAX: ffffffffffffffda RBX: 00007f9fffa25fa0 RCX: 00007f9fff79e0d9
[  469.970856][T13630] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000009
[  469.978870][T13630] RBP: 00007fa0006de090 R08: 0000000000000000 R09: 0000000000000000
[  469.987058][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.995094][T13630] R13: 00007f9fffa26038 R14: 00007f9fffa25fa0 R15: 00007ffe7afdc238
[  470.003256][T13630]  </TASK>
[  470.350269][T13605] chnl_net:caif_netlink_parms(): no params data found
[  470.460191][T13640] netlink: 'syz.0.2524': attribute type 3 has an invalid length.
[  470.476822][T13640] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2524'.
[  470.562475][T13605] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.569666][T13605] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.581093][ T5082] Bluetooth: hci1: command tx timeout
[  470.615879][T13605] bridge_slave_0: entered allmulticast mode
[  470.627118][T13605] bridge_slave_0: entered promiscuous mode
[  470.662605][T13605] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.669768][T13605] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.684535][T13605] bridge_slave_1: entered allmulticast mode
[  470.693111][T13605] bridge_slave_1: entered promiscuous mode
[  470.749629][T13605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.764982][T13605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.860177][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.880420][T13664] FAULT_INJECTION: forcing a failure.
[  470.880420][T13664] name failslab, interval 1, probability 0, space 0, times 0
[  470.896981][T13660] netlink: 'syz.2.2531': attribute type 10 has an invalid length.
[  470.906021][T13664] CPU: 0 PID: 13664 Comm: syz.1.2532 Not tainted syzkaller #0
[  470.913615][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  470.923877][T13664] Call Trace:
[  470.927200][T13664]  <TASK>
[  470.929402][T13660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  470.930164][T13664]  dump_stack_lvl+0x18c/0x250
[  470.947274][T13664]  ? show_regs_print_info+0x20/0x20
[  470.952510][T13664]  ? load_image+0x420/0x420
[  470.957060][T13664]  ? __might_sleep+0xe0/0xe0
[  470.961691][T13664]  ? __lock_acquire+0x7d80/0x7d80
[  470.966859][T13664]  ? __asan_memset+0x22/0x40
[  470.971569][T13664]  should_fail_ex+0x394/0x4c0
[  470.976336][T13664]  should_failslab+0x9/0x20
[  470.980880][T13664]  slab_pre_alloc_hook+0x59/0x300
[  470.985937][T13664]  ? kasan_set_track+0x5f/0x70
[  470.990916][T13664]  ? __kthread_create_on_node+0x116/0x3d0
[  470.996761][T13664]  __kmem_cache_alloc_node+0x53/0x250
[  471.002166][T13664]  ? __kthread_create_on_node+0x116/0x3d0
[  471.007996][T13664]  kmalloc_trace+0x2a/0xe0
[  471.012525][T13664]  ? __cpu_map_entry_free+0x730/0x730
[  471.018041][T13664]  __kthread_create_on_node+0x116/0x3d0
[  471.023748][T13664]  ? kthread_create_on_node+0x140/0x140
[  471.029319][T13664]  ? __asan_memset+0x22/0x40
[  471.034008][T13664]  ? __cpu_map_entry_free+0x730/0x730
[  471.039389][T13664]  ? __cpu_map_entry_free+0x730/0x730
[  471.044787][T13664]  kthread_create_on_node+0xec/0x140
[  471.050084][T13664]  ? lockdep_softirqs_off+0x440/0x440
[  471.055469][T13664]  ? tsk_fork_get_node+0x70/0x70
[  471.060419][T13664]  ? __init_swait_queue_head+0xa8/0x140
[  471.065974][T13664]  cpu_map_update_elem+0xb94/0xf20
[  471.071105][T13664]  ? cpu_map_lookup_elem+0x1a0/0x1a0
[  471.076489][T13664]  ? __virt_addr_valid+0x10c/0x380
[  471.081615][T13664]  ? __virt_addr_valid+0x10c/0x380
[  471.086748][T13664]  bpf_map_update_value+0x120/0x710
[  471.092058][T13664]  map_update_elem+0x586/0x710
[  471.096836][T13664]  __sys_bpf+0x6b5/0x890
[  471.101088][T13664]  ? bpf_link_show_fdinfo+0x390/0x390
[  471.106475][T13664]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  471.112641][T13664]  __x64_sys_bpf+0x7c/0x90
[  471.117172][T13664]  do_syscall_64+0x55/0xb0
[  471.121612][T13664]  ? clear_bhb_loop+0x40/0x90
[  471.126342][T13664]  ? clear_bhb_loop+0x40/0x90
[  471.131036][T13664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  471.137639][T13664] RIP: 0033:0x7f8cc699e0d9
[  471.142066][T13664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.161802][T13664] RSP: 002b:00007f8cc77fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  471.170316][T13664] RAX: ffffffffffffffda RBX: 00007f8cc6c25fa0 RCX: 00007f8cc699e0d9
[  471.178304][T13664] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002
[  471.186635][T13664] RBP: 00007f8cc77fd090 R08: 0000000000000000 R09: 0000000000000000
[  471.194608][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.202679][T13664] R13: 00007f8cc6c26038 R14: 00007f8cc6c25fa0 R15: 00007fff8f58ca38
[  471.210697][T13664]  </TASK>
[  471.218312][T13605] team0: Port device team_slave_0 added
[  471.229965][T13605] team0: Port device team_slave_1 added
[  471.265923][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.309880][T13605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.318186][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.352670][T13605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.425406][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.506620][T13605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.519227][T13605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.556442][T13605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.049640][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  472.064112][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  472.084110][   T11] team0: Port device netdevsim0 removed
[  472.092522][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.218696][T13605] hsr_slave_0: entered promiscuous mode
[  472.258694][T13605] hsr_slave_1: entered promiscuous mode
[  472.281611][T13605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.289270][T13605] Cannot create hsr debugfs directory
[  472.296458][T13689] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2539'.
[  472.652936][ T5082] Bluetooth: hci1: command tx timeout
[  472.695971][T13695] bridge_slave_1: left allmulticast mode
[  472.711708][T13695] bridge_slave_1: left promiscuous mode
[  472.735643][T13695] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.776280][T13695] bridge_slave_0: left allmulticast mode
[  472.799992][T13695] bridge_slave_0: left promiscuous mode
[  472.821801][T13695] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.034865][T13703] netlink: 'syz.2.2546': attribute type 21 has an invalid length.
[  473.102338][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.965763][T13718] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2550'.
[  474.017083][T13723] netlink: 'syz.2.2550': attribute type 3 has an invalid length.
[  474.042714][T13723] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2550'.
[  474.594639][T13745] netlink: 'syz.2.2555': attribute type 21 has an invalid length.
[  474.606887][T13745] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2555'.
[  474.620622][T13745] netlink: 'syz.2.2555': attribute type 4 has an invalid length.
[  474.630354][T13745] netlink: 'syz.2.2555': attribute type 5 has an invalid length.
[  474.639202][T13745] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2555'.
[  474.685422][T13749] netlink: 'syz.2.2555': attribute type 10 has an invalid length.
[  474.729015][T13749] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  474.732147][ T5082] Bluetooth: hci1: command tx timeout
[  474.786415][T13752] netlink: 'syz.1.2557': attribute type 21 has an invalid length.
[  474.796308][T13605] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  474.799091][T13752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  474.841356][T13605] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  474.851999][T13605] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  474.873325][T13605] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  475.256175][T13605] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.291537][T13605] 8021q: adding VLAN 0 to HW filter on device team0
[  475.345299][   T11] bond0: (slave wlan1): Releasing backup interface
[  475.366496][   T11] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode
[  475.397843][   T11] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode
[  475.447365][T13042] bridge0: port 1(bridge_slave_0) entered blocking state
[  475.454821][T13042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  475.495108][T13042] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.502394][T13042] bridge0: port 2(bridge_slave_1) entered forwarding state
[  475.677171][   T11] bridge_slave_1: left allmulticast mode
[  475.704267][   T11] bridge_slave_1: left promiscuous mode
[  475.721199][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.770864][   T11] veth1_macvtap: left promiscuous mode
[  475.790391][   T11] veth0_macvtap: left promiscuous mode
[  475.800658][   T11] veth1_vlan: left promiscuous mode
[  475.821055][   T11] veth0_vlan: left promiscuous mode
[  476.812970][ T5082] Bluetooth: hci1: command tx timeout
[  488.835274][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  488.846243][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  488.855797][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  488.867127][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  488.876223][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  488.884278][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  490.971640][ T5772] Bluetooth: hci3: command tx timeout
[  491.440248][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  491.449766][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  491.460010][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  491.469392][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  491.483806][ T5082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  491.492228][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  491.511765][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  491.526976][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  491.547902][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  491.558456][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  491.567860][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  491.576084][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  493.051511][ T5777] Bluetooth: hci3: command tx timeout
[  493.531476][ T5777] Bluetooth: hci5: command tx timeout
[  493.611471][ T5777] Bluetooth: hci6: command tx timeout
[  495.131631][ T5777] Bluetooth: hci3: command tx timeout
[  495.611506][ T5777] Bluetooth: hci5: command tx timeout
[  495.691451][ T5777] Bluetooth: hci6: command tx timeout
[  497.212739][ T5777] Bluetooth: hci3: command tx timeout
[  497.691430][ T5777] Bluetooth: hci5: command tx timeout
[  497.771838][ T5777] Bluetooth: hci6: command tx timeout
[  499.781554][ T5777] Bluetooth: hci5: command tx timeout
[  499.851389][ T5777] Bluetooth: hci6: command tx timeout
[  502.264756][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  502.271139][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  528.402050][ T5082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  528.412601][ T5082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  528.421392][ T5082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  528.429390][ T5082] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  528.437547][ T5082] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  528.444998][ T5082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  530.491645][ T5777] Bluetooth: hci7: command tx timeout
[  532.581588][ T5777] Bluetooth: hci7: command tx timeout
[  534.651596][ T5777] Bluetooth: hci7: command tx timeout
[  536.741458][ T5777] Bluetooth: hci7: command tx timeout
[  548.867039][ T5082] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  548.876204][ T5082] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  548.885462][ T5082] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  548.895134][ T5082] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  548.903755][ T5082] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  548.911123][ T5082] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  550.971451][ T5777] Bluetooth: hci8: command tx timeout
[  551.976820][ T5082] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  551.986670][ T5082] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  551.996673][ T5082] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  552.012038][ T5772] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  552.013117][T13819] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  552.022485][ T5772] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  552.032731][T13819] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  552.035020][ T5772] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  552.042363][T13819] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  552.049702][ T5772] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  552.063148][ T5772] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  552.077290][ T5772] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  553.061459][ T5772] Bluetooth: hci8: command tx timeout
[  554.093110][ T5772] Bluetooth: hci10: command tx timeout
[  554.093136][ T5082] Bluetooth: hci9: command tx timeout
[  555.131435][ T5772] Bluetooth: hci8: command tx timeout
[  556.171533][ T5772] Bluetooth: hci9: command tx timeout
[  556.171538][ T5082] Bluetooth: hci10: command tx timeout
[  557.211499][ T5772] Bluetooth: hci8: command tx timeout
[  558.251539][ T5772] Bluetooth: hci9: command tx timeout
[  558.257067][ T5082] Bluetooth: hci10: command tx timeout
[  560.331518][ T5777] Bluetooth: hci9: command tx timeout
[  560.337039][ T5082] Bluetooth: hci10: command tx timeout
[  560.655619][ T5082] Bluetooth: hci4: command 0x0406 tx timeout
[  563.698432][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  563.704888][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  570.891575][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  581.131437][ T5082] Bluetooth: hci2: command 0x0406 tx timeout
[  589.404779][ T5777] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  589.416735][ T5777] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  589.425924][ T5777] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  589.435860][ T5777] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  589.444487][ T5777] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  589.453271][ T5777] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  591.371488][ T5772] Bluetooth: hci1: command 0x0406 tx timeout
[  591.531552][ T5082] Bluetooth: hci11: command tx timeout
[  593.611461][ T5082] Bluetooth: hci11: command tx timeout
[  595.691615][ T5082] Bluetooth: hci11: command tx timeout
[  597.771447][ T5082] Bluetooth: hci11: command tx timeout
[  608.936271][ T5772] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  608.949983][ T5772] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  608.959298][ T5772] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  608.970343][ T5772] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  608.979280][ T5772] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  608.987005][ T5772] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  611.051492][ T5772] Bluetooth: hci12: command tx timeout
[  611.852765][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[  612.055233][ T5772] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  612.066339][ T5772] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  612.080558][ T5772] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  612.093753][ T5772] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  612.101877][ T5772] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  612.109468][ T5772] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  612.138892][ T5777] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  612.153837][ T5777] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  612.165292][ T5777] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  612.175200][ T5777] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  612.184068][ T5777] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  612.192834][ T5777] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  613.131485][ T5777] Bluetooth: hci12: command tx timeout
[  614.181575][ T5777] Bluetooth: hci13: command tx timeout
[  614.261582][ T5777] Bluetooth: hci14: command tx timeout
[  615.211531][ T5777] Bluetooth: hci12: command tx timeout
[  616.251442][ T5777] Bluetooth: hci13: command tx timeout
[  616.331419][ T5777] Bluetooth: hci14: command tx timeout
[  616.975012][ T5777] Bluetooth: hci6: command 0x0406 tx timeout
[  616.981117][ T5777] Bluetooth: hci5: command 0x0406 tx timeout
[  617.301480][ T5772] Bluetooth: hci12: command tx timeout
[  618.341408][ T5772] Bluetooth: hci13: command tx timeout
[  618.421437][ T5772] Bluetooth: hci14: command tx timeout
[  620.411479][ T5772] Bluetooth: hci13: command tx timeout
[  620.491378][ T5772] Bluetooth: hci14: command tx timeout
[  625.135852][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  625.143584][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  626.414249][   T28] INFO: task kworker/u4:1:12 blocked for more than 143 seconds.
[  626.422100][   T28]       Not tainted syzkaller #0
[  626.427041][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  626.438932][   T28] task:kworker/u4:1    state:D stack:21160 pid:12    ppid:2      flags:0x00004000
[  626.448288][   T28] Workqueue: ipv6_addrconf addrconf_dad_work
[  626.454804][   T28] Call Trace:
[  626.458112][   T28]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  626.461580][   T28]  __schedule+0x15ae/0x4660
[  626.466181][   T28]  ? asan.module_dtor+0x20/0x20
[  626.471401][   T28]  ? __mutex_lock+0x66e/0xc80
[  626.477123][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  626.482794][   T28]  ? kthread_data+0x4f/0xc0
[  626.487358][   T28]  ? wq_worker_sleeping+0x63/0x240
[  626.492764][   T28]  schedule+0xbd/0x170
[  626.497056][   T28]  schedule_preempt_disabled+0x13/0x20
[  626.502871][   T28]  __mutex_lock+0x673/0xc80
[  626.507421][   T28]  ? __mutex_lock+0x4d2/0xc80
[  626.512253][   T28]  ? addrconf_dad_work+0xce/0x1550
[  626.517408][   T28]  ? mutex_lock_nested+0x20/0x20
[  626.523064][   T28]  addrconf_dad_work+0xce/0x1550
[  626.528131][   T28]  ? ipv6_get_saddr_eval+0xee0/0xee0
[  626.533487][   T28]  ? read_lock_is_recursive+0x20/0x20
[  626.538901][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  626.546104][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.551949][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.558013][   T28]  process_scheduled_works+0xa60/0x1600
[  626.564449][   T28]  ? worker_attach_to_pool+0x370/0x370
[  626.570412][   T28]  ? assign_work+0x3cc/0x5d0
[  626.609197][   T28]  worker_thread+0xa5e/0xfe0
[  626.614325][   T28]  kthread+0x2fa/0x390
[  626.618442][   T28]  ? pr_cont_work+0x550/0x550
[  626.624229][   T28]  ? kthread_blkcg+0xd0/0xd0
[  626.628882][   T28]  ret_from_fork+0x48/0x80
[  626.633838][   T28]  ? kthread_blkcg+0xd0/0xd0
[  626.638577][   T28]  ret_from_fork_asm+0x11/0x20
[  626.644133][   T28]  </TASK>
[  626.647331][   T28] INFO: task kworker/u4:7:1092 blocked for more than 143 seconds.
[  626.658628][   T28]       Not tainted syzkaller #0
[  626.665667][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  626.674493][   T28] task:kworker/u4:7    state:D stack:22096 pid:1092  ppid:2      flags:0x00004000
[  626.683882][   T28] Workqueue: events_unbound linkwatch_event
[  626.689849][   T28] Call Trace:
[  626.693307][   T28]  <TASK>
[  626.696380][   T28]  __schedule+0x15ae/0x4660
[  626.701052][   T28]  ? asan.module_dtor+0x20/0x20
[  626.706037][   T28]  ? __mutex_lock+0x66e/0xc80
[  626.710878][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  626.716453][   T28]  ? kthread_data+0x4f/0xc0
[  626.721014][   T28]  ? wq_worker_sleeping+0x63/0x240
[  626.726254][   T28]  schedule+0xbd/0x170
[  626.730367][   T28]  schedule_preempt_disabled+0x13/0x20
[  626.736077][   T28]  __mutex_lock+0x673/0xc80
[  626.740668][   T28]  ? __mutex_lock+0x4d2/0xc80
[  626.745541][   T28]  ? linkwatch_event+0xe/0x60
[  626.750259][   T28]  ? mutex_lock_nested+0x20/0x20
[  626.756087][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  626.762645][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.768426][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.774455][   T28]  linkwatch_event+0xe/0x60
[  626.779123][   T28]  process_scheduled_works+0xa60/0x1600
[  626.785028][   T28]  ? worker_attach_to_pool+0x370/0x370
[  626.790565][   T28]  ? assign_work+0x3cc/0x5d0
[  626.795306][   T28]  worker_thread+0xa5e/0xfe0
[  626.800054][   T28]  ? _raw_spin_unlock+0x40/0x40
[  626.805035][   T28]  ? __kthread_parkme+0x71/0x1c0
[  626.810033][   T28]  kthread+0x2fa/0x390
[  626.814222][   T28]  ? pr_cont_work+0x550/0x550
[  626.818943][   T28]  ? kthread_blkcg+0xd0/0xd0
[  626.823629][   T28]  ret_from_fork+0x48/0x80
[  626.828086][   T28]  ? kthread_blkcg+0xd0/0xd0
[  626.832926][   T28]  ret_from_fork_asm+0x11/0x20
[  626.837886][   T28]  </TASK>
[  626.841059][   T28] INFO: task kworker/0:4:12926 blocked for more than 143 seconds.
[  626.849122][   T28]       Not tainted syzkaller #0
[  626.854198][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  626.862943][   T28] task:kworker/0:4     state:D stack:24904 pid:12926 ppid:2      flags:0x00004000
[  626.872846][   T28] Workqueue: events switchdev_deferred_process_work
[  626.879693][   T28] Call Trace:
[  626.883067][   T28]  <TASK>
[  626.886025][   T28]  __schedule+0x15ae/0x4660
[  626.890593][   T28]  ? mark_lock+0x94/0x320
[  626.895716][   T28]  ? asan.module_dtor+0x20/0x20
[  626.900632][   T28]  ? __lock_acquire+0x7d80/0x7d80
[  626.905784][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  626.911075][   T28]  schedule+0xbd/0x170
[  626.915383][   T28]  schedule_preempt_disabled+0x13/0x20
[  626.921089][   T28]  __mutex_lock+0x673/0xc80
[  626.925888][   T28]  ? __mutex_lock+0x4d2/0xc80
[  626.930611][   T28]  ? switchdev_deferred_process_work+0xe/0x20
[  626.936777][   T28]  ? mutex_lock_nested+0x20/0x20
[  626.941938][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  626.947210][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.953178][   T28]  ? process_scheduled_works+0x975/0x1600
[  626.958932][   T28]  switchdev_deferred_process_work+0xe/0x20
[  626.965022][   T28]  process_scheduled_works+0xa60/0x1600
[  626.970758][   T28]  ? worker_attach_to_pool+0x370/0x370
[  626.976337][   T28]  ? assign_work+0x3cc/0x5d0
[  626.981362][   T28]  worker_thread+0xa5e/0xfe0
[  626.985989][   T28]  ? _raw_spin_unlock+0x40/0x40
[  626.990886][   T28]  ? __kthread_parkme+0x71/0x1c0
[  626.996045][   T28]  kthread+0x2fa/0x390
[  627.000234][   T28]  ? pr_cont_work+0x550/0x550
[  627.004999][   T28]  ? kthread_blkcg+0xd0/0xd0
[  627.009855][   T28]  ret_from_fork+0x48/0x80
[  627.014404][   T28]  ? kthread_blkcg+0xd0/0xd0
[  627.019038][   T28]  ret_from_fork_asm+0x11/0x20
[  627.024050][   T28]  </TASK>
[  627.027174][   T28] INFO: task syz-executor:13605 blocked for more than 143 seconds.
[  627.035145][   T28]       Not tainted syzkaller #0
[  627.040120][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  627.048905][   T28] task:syz-executor    state:D stack:21736 pid:13605 ppid:1      flags:0x00004004
[  627.058170][   T28] Call Trace:
[  627.061687][   T28]  <TASK>
[  627.064636][   T28]  __schedule+0x15ae/0x4660
[  627.069370][   T28]  ? asan.module_dtor+0x20/0x20
[  627.074435][   T28]  ? __mutex_lock+0x66e/0xc80
[  627.079350][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  627.084946][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  627.091234][   T28]  schedule+0xbd/0x170
[  627.095467][   T28]  schedule_preempt_disabled+0x13/0x20
[  627.100955][   T28]  __mutex_lock+0x673/0xc80
[  627.105549][   T28]  ? __mutex_lock+0x4d2/0xc80
[  627.110246][   T28]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  627.115488][   T28]  ? mutex_lock_nested+0x20/0x20
[  627.120476][   T28]  rtnetlink_rcv_msg+0x7ed/0xf90
[  627.125501][   T28]  ? rtnetlink_rcv_msg+0x220/0xf90
[  627.130651][   T28]  ? rtnetlink_bind+0x80/0x80
[  627.135529][   T28]  ? mark_lock+0x94/0x320
[  627.140003][   T28]  ? __lock_acquire+0x1262/0x7d80
[  627.145432][   T28]  ? mark_lock+0x94/0x320
[  627.149807][   T28]  ? mark_lock+0x94/0x320
[  627.154543][   T28]  ? __lock_acquire+0x1262/0x7d80
[  627.159614][   T28]  ? kmalloc_reserve+0x95/0x240
[  627.164573][   T28]  ? verify_lock_unused+0x140/0x140
[  627.169820][   T28]  ? verify_lock_unused+0x140/0x140
[  627.175545][   T28]  netlink_rcv_skb+0x235/0x4c0
[  627.180558][   T28]  ? rtnetlink_bind+0x80/0x80
[  627.185384][   T28]  ? netlink_ack+0x1160/0x1160
[  627.190286][   T28]  ? __lock_acquire+0x7d80/0x7d80
[  627.195593][   T28]  ? net_generic+0x1e/0x240
[  627.200401][   T28]  ? netlink_deliver_tap+0x2e/0x1b0
[  627.205919][   T28]  netlink_unicast+0x7b1/0x930
[  627.210758][   T28]  netlink_sendmsg+0x8d0/0xbf0
[  627.215845][   T28]  ? netlink_getsockopt+0x590/0x590
[  627.221091][   T28]  ? apparmor_socket_sendmsg+0x8e/0x330
[  627.226938][   T28]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  627.232736][   T28]  ? security_socket_sendmsg+0x80/0xa0
[  627.238258][   T28]  __sys_sendto+0x4a9/0x6b0
[  627.243028][   T28]  ? __ia32_sys_getpeername+0x90/0x90
[  627.248485][   T28]  ? slab_free_freelist_hook+0x130/0x1a0
[  627.254292][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  627.260405][   T28]  ? __fput+0x67e/0x940
[  627.264689][   T28]  ? lock_chain_count+0x20/0x20
[  627.269672][   T28]  __x64_sys_sendto+0xde/0xf0
[  627.274763][   T28]  do_syscall_64+0x55/0xb0
[  627.279416][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.284479][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.289209][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.295430][   T28] RIP: 0033:0x7f346f15e90e
[  627.299972][   T28] RSP: 002b:00007ffdeee81d18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  627.308524][   T28] RAX: ffffffffffffffda RBX: 0000555593f6c500 RCX: 00007f346f15e90e
[  627.316756][   T28] RDX: 0000000000000020 RSI: 00007f346ff54670 RDI: 0000000000000003
[  627.324913][   T28] RBP: 0000000000000001 R08: 00007ffdeee81d94 R09: 000000000000000c
[  627.332935][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  627.341006][   T28] R13: 0000000000000000 R14: 00007f346ff54670 R15: 0000000000000000
[  627.349092][   T28]  </TASK>
[  627.352235][   T28] INFO: task syz.0.2549:13712 blocked for more than 144 seconds.
[  627.359975][   T28]       Not tainted syzkaller #0
[  627.364981][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  627.373814][   T28] task:syz.0.2549      state:D stack:22760 pid:13712 ppid:13340  flags:0x00004006
[  627.383816][   T28] Call Trace:
[  627.387127][   T28]  <TASK>
[  627.390099][   T28]  __schedule+0x15ae/0x4660
[  627.394913][   T28]  ? asan.module_dtor+0x20/0x20
[  627.399892][   T28]  ? __mutex_lock+0x66e/0xc80
[  627.404655][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  627.410166][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  627.416525][   T28]  schedule+0xbd/0x170
[  627.420626][   T28]  schedule_preempt_disabled+0x13/0x20
[  627.426223][   T28]  __mutex_lock+0x673/0xc80
[  627.430932][   T28]  ? __mutex_lock+0x4d2/0xc80
[  627.435815][   T28]  ? fib_net_exit_batch+0x20/0x90
[  627.440985][   T28]  ? mutex_lock_nested+0x20/0x20
[  627.446028][   T28]  ? _raw_spin_unlock+0x28/0x40
[  627.450919][   T28]  fib_net_exit_batch+0x20/0x90
[  627.455945][   T28]  ? fib_net_exit+0x70/0x70
[  627.460564][   T28]  setup_net+0x85a/0xa20
[  627.465073][   T28]  ? copy_net_ns+0x5d0/0x5d0
[  627.469684][   T28]  ? down_read_killable+0x1d0/0x340
[  627.474953][   T28]  copy_net_ns+0x35e/0x5d0
[  627.479580][   T28]  create_new_namespaces+0x3ce/0x700
[  627.485314][   T28]  ? copy_namespaces+0x5c/0x4a0
[  627.490216][   T28]  copy_namespaces+0x42a/0x4a0
[  627.495061][   T28]  copy_process+0x16f6/0x3da0
[  627.499784][   T28]  ? copy_process+0x98e/0x3da0
[  627.505225][   T28]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  627.511250][   T28]  ? __pidfd_prepare+0x140/0x140
[  627.516339][   T28]  kernel_clone+0x24b/0x8a0
[  627.520911][   T28]  ? create_io_thread+0x190/0x190
[  627.526085][   T28]  __x64_sys_clone+0x1b7/0x230
[  627.530904][   T28]  ? __ia32_sys_vfork+0x140/0x140
[  627.536096][   T28]  ? lock_chain_count+0x20/0x20
[  627.541032][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  627.547187][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  627.552492][   T28]  do_syscall_64+0x55/0xb0
[  627.556945][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.561829][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.566706][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.572703][   T28] RIP: 0033:0x7f906019e0d9
[  627.577157][   T28] RSP: 002b:00007f906110ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  627.586040][   T28] RAX: ffffffffffffffda RBX: 00007f9060425fa0 RCX: 00007f906019e0d9
[  627.594092][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600
[  627.602379][   T28] RBP: 00007f9060235024 R08: 0000000000000000 R09: 0000000000000000
[  627.610405][   T28] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  627.618904][   T28] R13: 00007f9060426038 R14: 00007f9060425fa0 R15: 00007ffd697e7818
[  627.627078][   T28]  </TASK>
[  627.630141][   T28] INFO: task syz.1.2561:13777 blocked for more than 144 seconds.
[  627.638040][   T28]       Not tainted syzkaller #0
[  627.643251][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  627.652036][   T28] task:syz.1.2561      state:D stack:26760 pid:13777 ppid:12715  flags:0x00004004
[  627.661376][   T28] Call Trace:
[  627.664667][   T28]  <TASK>
[  627.667658][   T28]  __schedule+0x15ae/0x4660
[  627.672267][   T28]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.678401][   T28]  ? asan.module_dtor+0x20/0x20
[  627.683625][   T28]  ? __mutex_lock+0x66e/0xc80
[  627.688339][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  627.694591][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  627.700781][   T28]  schedule+0xbd/0x170
[  627.704935][   T28]  schedule_preempt_disabled+0x13/0x20
[  627.710440][   T28]  __mutex_lock+0x673/0xc80
[  627.715074][   T28]  ? __mutex_lock+0x4d2/0xc80
[  627.719806][   T28]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  627.725164][   T28]  ? mutex_lock_nested+0x20/0x20
[  627.730251][   T28]  rtnetlink_rcv_msg+0x7ed/0xf90
[  627.735300][   T28]  ? rtnetlink_rcv_msg+0x220/0xf90
[  627.740460][   T28]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  627.746486][   T28]  ? rtnetlink_bind+0x80/0x80
[  627.751186][   T28]  ? perf_trace_preemptirq_template+0x269/0x330
[  627.757556][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  627.763647][   T28]  ? lock_chain_count+0x20/0x20
[  627.768537][   T28]  ? __local_bh_enable_ip+0x13a/0x1c0
[  627.773997][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  627.779229][   T28]  ? __local_bh_enable_ip+0x13a/0x1c0
[  627.784681][   T28]  ? _local_bh_enable+0xa0/0xa0
[  627.790201][   T28]  ? __dev_queue_xmit+0x275/0x3630
[  627.795505][   T28]  ? __dev_queue_xmit+0x1bc2/0x3630
[  627.800868][   T28]  ? __dev_queue_xmit+0x275/0x3630
[  627.806179][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  627.812224][   T28]  ? lock_chain_count+0x20/0x20
[  627.817264][   T28]  ? ref_tracker_free+0x686/0x830
[  627.822502][   T28]  ? __kasan_kmalloc_large+0x8b/0xa0
[  627.827837][   T28]  netlink_rcv_skb+0x235/0x4c0
[  627.832845][   T28]  ? rtnetlink_bind+0x80/0x80
[  627.837544][   T28]  ? netlink_ack+0x1160/0x1160
[  627.842386][   T28]  ? __lock_acquire+0x7d80/0x7d80
[  627.847433][   T28]  ? netlink_deliver_tap+0x2e/0x1b0
[  627.852812][   T28]  netlink_unicast+0x7b1/0x930
[  627.857994][   T28]  netlink_sendmsg+0x8d0/0xbf0
[  627.863058][   T28]  ? netlink_getsockopt+0x590/0x590
[  627.868627][   T28]  ? apparmor_socket_sendmsg+0x8e/0x330
[  627.874372][   T28]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  627.879692][   T28]  ? security_socket_sendmsg+0x80/0xa0
[  627.885211][   T28]  sock_write_iter+0x2dc/0x420
[  627.890160][   T28]  ? sock_read_iter+0x3f0/0x3f0
[  627.895142][   T28]  ? common_file_perm+0x198/0x1f0
[  627.900232][   T28]  vfs_write+0x474/0x9a0
[  627.904576][   T28]  ? file_end_write+0x250/0x250
[  627.909547][   T28]  ? __fget_files+0x3fc/0x460
[  627.914419][   T28]  ? __fdget_pos+0x1d8/0x330
[  627.919043][   T28]  ? ksys_write+0x74/0x260
[  627.923568][   T28]  ksys_write+0x151/0x260
[  627.927949][   T28]  ? __ia32_sys_read+0x90/0x90
[  627.932826][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  627.938061][   T28]  do_syscall_64+0x55/0xb0
[  627.942811][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.947508][   T28]  ? clear_bhb_loop+0x40/0x90
[  627.952260][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  627.958180][   T28] RIP: 0033:0x7f8cc699e0d9
[  627.962677][   T28] RSP: 002b:00007f8cc77dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  627.971205][   T28] RAX: ffffffffffffffda RBX: 00007f8cc6c26090 RCX: 00007f8cc699e0d9
[  627.979296][   T28] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000007
[  627.987363][   T28] RBP: 00007f8cc6a35024 R08: 0000000000000000 R09: 0000000000000000
[  627.995649][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.003714][   T28] R13: 00007f8cc6c26128 R14: 00007f8cc6c26090 R15: 00007fff8f58ca38
[  628.011897][   T28]  </TASK>
[  628.014968][   T28] INFO: task syz.1.2561:13783 blocked for more than 144 seconds.
[  628.022824][   T28]       Not tainted syzkaller #0
[  628.027796][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  628.036588][   T28] task:syz.1.2561      state:D stack:26344 pid:13783 ppid:12715  flags:0x00004004
[  628.046423][   T28] Call Trace:
[  628.049730][   T28]  <TASK>
[  628.052893][   T28]  __schedule+0x15ae/0x4660
[  628.057431][   T28]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  628.064142][   T28]  ? asan.module_dtor+0x20/0x20
[  628.069027][   T28]  ? __mutex_lock+0x66e/0xc80
[  628.073857][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  628.079355][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  628.085949][   T28]  schedule+0xbd/0x170
[  628.090073][   T28]  schedule_preempt_disabled+0x13/0x20
[  628.095880][   T28]  __mutex_lock+0x673/0xc80
[  628.100758][   T28]  ? __mutex_lock+0x4d2/0xc80
[  628.105690][   T28]  ? rtnetlink_rcv_msg+0x7ed/0xf90
[  628.110890][   T28]  ? mutex_lock_nested+0x20/0x20
[  628.116145][   T28]  rtnetlink_rcv_msg+0x7ed/0xf90
[  628.121206][   T28]  ? rtnetlink_rcv_msg+0x220/0xf90
[  628.126503][   T28]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  628.132463][   T28]  ? rtnetlink_bind+0x80/0x80
[  628.137323][   T28]  ? perf_trace_preemptirq_template+0x269/0x330
[  628.143753][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  628.149757][   T28]  ? lock_chain_count+0x20/0x20
[  628.154740][   T28]  ? __local_bh_enable_ip+0x13a/0x1c0
[  628.160143][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  628.165575][   T28]  ? __local_bh_enable_ip+0x13a/0x1c0
[  628.170995][   T28]  ? _local_bh_enable+0xa0/0xa0
[  628.175921][   T28]  ? __dev_queue_xmit+0x275/0x3630
[  628.181328][   T28]  ? __dev_queue_xmit+0x1bc2/0x3630
[  628.186656][   T28]  ? __dev_queue_xmit+0x275/0x3630
[  628.191880][   T28]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  628.198074][   T28]  ? lock_chain_count+0x20/0x20
[  628.203111][   T28]  ? ref_tracker_free+0x686/0x830
[  628.208254][   T28]  ? __kasan_kmalloc_large+0x8b/0xa0
[  628.213706][   T28]  netlink_rcv_skb+0x235/0x4c0
[  628.218506][   T28]  ? rtnetlink_bind+0x80/0x80
[  628.223290][   T28]  ? netlink_ack+0x1160/0x1160
[  628.228092][   T28]  ? __lock_acquire+0x7d80/0x7d80
[  628.233240][   T28]  ? netlink_deliver_tap+0x2e/0x1b0
[  628.238485][   T28]  netlink_unicast+0x7b1/0x930
[  628.243450][   T28]  netlink_sendmsg+0x8d0/0xbf0
[  628.248254][   T28]  ? netlink_getsockopt+0x590/0x590
[  628.253809][   T28]  ? apparmor_socket_sendmsg+0x8e/0x330
[  628.259520][   T28]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  628.265111][   T28]  ? security_socket_sendmsg+0x80/0xa0
[  628.270615][   T28]  sock_write_iter+0x2dc/0x420
[  628.275658][   T28]  ? sock_read_iter+0x3f0/0x3f0
[  628.280642][   T28]  ? common_file_perm+0x198/0x1f0
[  628.285856][   T28]  vfs_write+0x474/0x9a0
[  628.290142][   T28]  ? file_end_write+0x250/0x250
[  628.295093][   T28]  ? __fget_files+0x3fc/0x460
[  628.299992][   T28]  ? __fdget_pos+0x1d8/0x330
[  628.304746][   T28]  ? ksys_write+0x74/0x260
[  628.309240][   T28]  ksys_write+0x151/0x260
[  628.313862][   T28]  ? __ia32_sys_read+0x90/0x90
[  628.318686][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  628.324032][   T28]  do_syscall_64+0x55/0xb0
[  628.328470][   T28]  ? clear_bhb_loop+0x40/0x90
[  628.333345][   T28]  ? clear_bhb_loop+0x40/0x90
[  628.338072][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.344057][   T28] RIP: 0033:0x7f8cc699e0d9
[  628.348492][   T28] RSP: 002b:00007f8cc77bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  628.357038][   T28] RAX: ffffffffffffffda RBX: 00007f8cc6c26180 RCX: 00007f8cc699e0d9
[  628.365176][   T28] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000008
[  628.373338][   T28] RBP: 00007f8cc6a35024 R08: 0000000000000000 R09: 0000000000000000
[  628.381946][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.389941][   T28] R13: 00007f8cc6c26218 R14: 00007f8cc6c26180 R15: 00007fff8f58ca38
[  628.398116][   T28]  </TASK>
[  628.401352][   T28] INFO: task syz.2.2563:13781 blocked for more than 145 seconds.
[  628.409100][   T28]       Not tainted syzkaller #0
[  628.414308][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  628.423146][   T28] task:syz.2.2563      state:D stack:25064 pid:13781 ppid:12966  flags:0x00004004
[  628.432450][   T28] Call Trace:
[  628.435759][   T28]  <TASK>
[  628.438710][   T28]  __schedule+0x15ae/0x4660
[  628.443367][   T28]  ? asan.module_dtor+0x20/0x20
[  628.448251][   T28]  ? __mutex_lock+0x66e/0xc80
[  628.453011][   T28]  ? __mutex_trylock_common+0x8a/0x270
[  628.458498][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  628.464819][   T28]  schedule+0xbd/0x170
[  628.468924][   T28]  schedule_preempt_disabled+0x13/0x20
[  628.474475][   T28]  __mutex_lock+0x673/0xc80
[  628.479142][   T28]  ? __mutex_lock+0x4d2/0xc80
[  628.483880][   T28]  ? wext_ioctl_dispatch+0x106/0x650
[  628.489389][   T28]  ? mutex_lock_nested+0x20/0x20
[  628.494673][   T28]  ? dev_load+0x21/0x1f0
[  628.498999][   T28]  ? dev_load+0x21/0x1f0
[  628.504077][   T28]  wext_ioctl_dispatch+0x106/0x650
[  628.509381][   T28]  ? __lock_acquire+0x7d80/0x7d80
[  628.514652][   T28]  ? wext_ioctl_dispatch+0x650/0x650
[  628.519984][   T28]  ? iw_handler_get_private+0x1f0/0x1f0
[  628.525856][   T28]  ? wext_handle_ioctl+0x1e0/0x1e0
[  628.531181][   T28]  ? __might_fault+0xaa/0x120
[  628.536150][   T28]  ? __might_fault+0xc6/0x120
[  628.540912][   T28]  ? __might_fault+0xaa/0x120
[  628.545889][   T28]  wext_handle_ioctl+0x118/0x1e0
[  628.551213][   T28]  ? call_commit_handler+0xf0/0xf0
[  628.556500][   T28]  sock_ioctl+0x15d/0x7e0
[  628.561055][   T28]  ? sock_poll+0x3e0/0x3e0
[  628.565597][   T28]  ? bpf_lsm_file_ioctl+0x9/0x10
[  628.570594][   T28]  ? security_file_ioctl+0x80/0xa0
[  628.575907][   T28]  ? sock_poll+0x3e0/0x3e0
[  628.580348][   T28]  __se_sys_ioctl+0xfd/0x170
[  628.585027][   T28]  do_syscall_64+0x55/0xb0
[  628.589571][   T28]  ? clear_bhb_loop+0x40/0x90
[  628.594339][   T28]  ? clear_bhb_loop+0x40/0x90
[  628.599063][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  628.605410][   T28] RIP: 0033:0x7f9fff79e0d9
[  628.609858][   T28] RSP: 002b:00007fa0006de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  628.619029][   T28] RAX: ffffffffffffffda RBX: 00007f9fffa25fa0 RCX: 00007f9fff79e0d9
[  628.627437][   T28] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000007
[  628.635600][   T28] RBP: 00007f9fff835024 R08: 0000000000000000 R09: 0000000000000000
[  628.643924][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.652102][   T28] R13: 00007f9fffa26038 R14: 00007f9fffa25fa0 R15: 00007ffe7afdc238
[  628.660203][   T28]  </TASK>
[  628.663339][   T28] 
[  628.663339][   T28] Showing all locks held in the system:
[  628.671131][   T28] 4 locks held by kworker/u4:0/11:
[  628.676327][   T28]  #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.687335][   T28]  #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.698385][   T28]  #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  628.708196][   T28]  #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa00
[  628.718473][   T28] 3 locks held by kworker/u4:1/12:
[  628.723757][   T28]  #0: ffff88814ccca138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.735502][   T28]  #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.748414][   T28]  #2: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550
[  628.758492][   T28] 1 lock held by khungtaskd/28:
[  628.763514][   T28]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  628.774065][   T28] 2 locks held by kworker/1:1/42:
[  628.779141][   T28]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.792124][   T28]  #1: ffffc90000b2fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.805227][   T28] 3 locks held by kworker/u4:7/1092:
[  628.810841][   T28]  #0: ffff888017c71938 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.824296][   T28]  #1: ffffc900045b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.835380][   T28]  #2: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  628.845420][   T28] 2 locks held by getty/5530:
[  628.850136][   T28]  #0: ffff88802cab70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  628.860013][   T28]  #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  628.870263][   T28] 3 locks held by kworker/0:3/5806:
[  628.875507][   T28]  #0: ffff888017c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.888052][   T28]  #1: ffffc900047c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.899294][   T28]  #2: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90
[  628.909135][   T28] 3 locks held by kworker/0:4/12926:
[  628.914898][   T28]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.927036][   T28]  #1: ffffc90004737d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  628.938283][   T28]  #2: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  628.949069][   T28] 1 lock held by syz-executor/13605:
[  628.954654][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  628.964289][   T28] 2 locks held by syz.0.2549/13712:
[  628.969517][   T28]  #0: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x342/0x5d0
[  628.979012][   T28]  #1: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x20/0x90
[  628.988421][   T28] 1 lock held by syz.1.2561/13777:
[  628.993593][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.003202][   T28] 1 lock held by syz.1.2561/13783:
[  629.008334][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.018009][   T28] 1 lock held by syz.2.2563/13781:
[  629.023205][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x106/0x650
[  629.032909][   T28] 1 lock held by syz-executor/13786:
[  629.038293][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.048197][   T28] 1 lock held by syz-executor/13791:
[  629.053572][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.063118][   T28] 1 lock held by syz-executor/13793:
[  629.068426][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.077941][   T28] 1 lock held by syz-executor/13804:
[  629.083486][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.093100][   T28] 1 lock held by syz-executor/13809:
[  629.098406][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.108005][   T28] 1 lock held by syz-executor/13814:
[  629.113447][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.123174][   T28] 1 lock held by syz-executor/13817:
[  629.128485][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.138027][   T28] 1 lock held by syz-executor/13833:
[  629.143421][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.153103][   T28] 1 lock held by syz-executor/13837:
[  629.158435][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.176796][   T28] 1 lock held by syz-executor/13842:
[  629.182210][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.191710][   T28] 1 lock held by syz-executor/13844:
[  629.197019][   T28]  #0: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90
[  629.206584][   T28] 2 locks held by dhcpcd/13850:
[  629.211648][   T28]  #0: ffff8880683ac130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  629.221730][   T28]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  629.232746][   T28] 2 locks held by dhcpcd/13851:
[  629.237606][   T28]  #0: ffff888078744130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  629.247675][   T28]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  629.258641][   T28] 1 lock held by dhcpcd/13852:
[  629.263667][   T28]  #0: ffff88806c4fa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  629.273475][   T28] 
[  629.275863][   T28] =============================================
[  629.275863][   T28] 
[  629.285500][   T28] NMI backtrace for cpu 0
[  629.289870][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  629.297208][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.307358][   T28] Call Trace:
[  629.310687][   T28]  <TASK>
[  629.313722][   T28]  dump_stack_lvl+0x18c/0x250
[  629.318436][   T28]  ? __wake_up_klogd+0xd9/0x100
[  629.323427][   T28]  ? show_regs_print_info+0x20/0x20
[  629.328651][   T28]  ? load_image+0x420/0x420
[  629.333301][   T28]  nmi_cpu_backtrace+0x3a6/0x3e0
[  629.338550][   T28]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  629.345261][   T28]  ? load_image+0x420/0x420
[  629.349785][   T28]  ? wq_watchdog_touch+0xef/0x170
[  629.354848][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  629.360947][   T28]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  629.366945][   T28]  watchdog+0xf59/0xfa0
[  629.371125][   T28]  ? watchdog+0x1e1/0xfa0
[  629.375485][   T28]  kthread+0x2fa/0x390
[  629.379561][   T28]  ? hungtask_pm_notify+0x50/0x50
[  629.385224][   T28]  ? kthread_blkcg+0xd0/0xd0
[  629.389906][   T28]  ret_from_fork+0x48/0x80
[  629.394326][   T28]  ? kthread_blkcg+0xd0/0xd0
[  629.398920][   T28]  ret_from_fork_asm+0x11/0x20
[  629.403866][   T28]  </TASK>
[  629.407515][   T28] Sending NMI from CPU 0 to CPUs 1:
[  629.412974][    C1] NMI backtrace for cpu 1
[  629.412985][    C1] CPU: 1 PID: 5126 Comm: klogd Not tainted syzkaller #0
[  629.413001][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.413010][    C1] RIP: 0010:memset_orig+0x4a/0xac
[  629.413038][    C1] Code: 75 6c 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 <48> 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00
[  629.413052][    C1] RSP: 0018:ffffc9000327f568 EFLAGS: 00000202
[  629.413065][    C1] RAX: ffffffffffffffff RBX: ffffea0001169e00 RCX: 0000000000000001
[  629.413077][    C1] RDX: 0000000000001000 RSI: 00000000000000ff RDI: ffffed1008b4ff80
[  629.413087][    C1] RBP: 0000000000000003 R08: dffffc0000000000 R09: 0000000000000000
[  629.413098][    C1] R10: ffffed1008b4f000 R11: fffffbfff223daa6 R12: ffff888045a78000
[  629.413109][    C1] R13: 0000000000000008 R14: dffffc0000000001 R15: 0000000000000000
[  629.413119][    C1] FS:  00007f91b799cc80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  629.413132][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  629.413143][    C1] CR2: 0000558a72b75660 CR3: 000000002e379000 CR4: 00000000003506e0
[  629.413157][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  629.413165][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  629.413175][    C1] Call Trace:
[  629.413180][    C1]  <TASK>
[  629.413185][    C1]  free_unref_page_prepare+0x21c/0x8f0
[  629.413206][    C1]  free_unref_page+0x32/0x2e0
[  629.413221][    C1]  __unfreeze_partials+0x1cf/0x210
[  629.413240][    C1]  put_cpu_partial+0x17c/0x250
[  629.413254][    C1]  ? put_cpu_partial+0x6e/0x250
[  629.413271][    C1]  __slab_free+0x319/0x400
[  629.413286][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  629.413308][    C1]  ? _raw_spin_unlock+0x40/0x40
[  629.413331][    C1]  qlist_free_all+0x75/0xd0
[  629.413353][    C1]  kasan_quarantine_reduce+0x143/0x160
[  629.413375][    C1]  __kasan_slab_alloc+0x22/0x80
[  629.413393][    C1]  slab_post_alloc_hook+0x6a/0x4d0
[  629.413418][    C1]  kmem_cache_alloc_node+0x1af/0x310
[  629.413440][    C1]  ? __alloc_skb+0x103/0x2c0
[  629.413458][    C1]  __alloc_skb+0x103/0x2c0
[  629.413475][    C1]  alloc_skb_with_frags+0xcd/0x7a0
[  629.413501][    C1]  ? __x64_sys_syslog+0x7c/0x90
[  629.413518][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.413538][    C1]  ? aa_label_sk_perm+0x500/0x6a0
[  629.413560][    C1]  sock_alloc_send_pskb+0x883/0x9a0
[  629.413591][    C1]  ? sock_kzfree_s+0x50/0x50
[  629.413610][    C1]  ? do_raw_spin_lock+0x11f/0x2b0
[  629.413631][    C1]  ? __rwlock_init+0x150/0x150
[  629.413652][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  629.413673][    C1]  unix_dgram_sendmsg+0x5a9/0x16e0
[  629.413715][    C1]  ? aa_af_perm+0x330/0x330
[  629.413735][    C1]  ? unix_dgram_poll+0x680/0x680
[  629.413750][    C1]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  629.413776][    C1]  ? apparmor_socket_sendmsg+0x8e/0x330
[  629.413793][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  629.413812][    C1]  ? security_socket_sendmsg+0x80/0xa0
[  629.413828][    C1]  __sys_sendto+0x4a9/0x6b0
[  629.413844][    C1]  ? __ia32_sys_getpeername+0x90/0x90
[  629.413872][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  629.413891][    C1]  ? lock_chain_count+0x20/0x20
[  629.413911][    C1]  __x64_sys_sendto+0xde/0xf0
[  629.413927][    C1]  do_syscall_64+0x55/0xb0
[  629.413943][    C1]  ? clear_bhb_loop+0x40/0x90
[  629.413959][    C1]  ? clear_bhb_loop+0x40/0x90
[  629.413975][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.413991][    C1] RIP: 0033:0x7f91b7aec407
[  629.414003][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  629.414015][    C1] RSP: 002b:00007ffe23871a90 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  629.414030][    C1] RAX: ffffffffffffffda RBX: 00007f91b799cc80 RCX: 00007f91b7aec407
[  629.414041][    C1] RDX: 000000000000008b RSI: 00007ffe23871bd0 RDI: 0000000000000003
[  629.414050][    C1] RBP: 00007ffe23872000 R08: 0000000000000000 R09: 0000000000000000
[  629.414060][    C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe23872018
[  629.414070][    C1] R13: 00007ffe23871bd0 R14: 0000000000000070 R15: 00007ffe23871bd0
[  629.414088][    C1]  </TASK>
[  629.420517][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  629.844917][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  629.852108][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.862151][   T28] Call Trace:
[  629.865687][   T28]  <TASK>
[  629.868608][   T28]  dump_stack_lvl+0x18c/0x250
[  629.873286][   T28]  ? show_regs_print_info+0x20/0x20
[  629.878475][   T28]  ? load_image+0x420/0x420
[  629.883030][   T28]  panic+0x2ca/0x720
[  629.886926][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  629.891428][   T28]  ? __irq_work_queue_local+0x13a/0x3b0
[  629.896979][   T28]  ? preempt_schedule_thunk+0x1a/0x30
[  629.902347][   T28]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  629.908514][   T28]  watchdog+0xf98/0xfa0
[  629.912681][   T28]  ? watchdog+0x1e1/0xfa0
[  629.917006][   T28]  kthread+0x2fa/0x390
[  629.921068][   T28]  ? hungtask_pm_notify+0x50/0x50
[  629.926089][   T28]  ? kthread_blkcg+0xd0/0xd0
[  629.930697][   T28]  ret_from_fork+0x48/0x80
[  629.935107][   T28]  ? kthread_blkcg+0xd0/0xd0
[  629.939697][   T28]  ret_from_fork_asm+0x11/0x20
[  629.944468][   T28]  </TASK>
[  629.947766][   T28] Kernel Offset: disabled
[  629.952190][   T28] Rebooting in 86400 seconds..