last executing test programs:

31.603383217s ago: executing program 0 (id=2528):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40016002)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$sock(r5, &(0x7f00000008c0)={&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x9ea, @empty, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}], 0x18}, 0x4008000)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x3, 0x2}, 0x80, &(0x7f0000000500)}, 0x8014)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="110000000000000000000000bf7e3a65b1c1c11412590654b067540e8eb4e5b0422ce9b744f6db4eaf59a8c348e6fe9a78d0586568df0660e25401a9a42f28a3d7d7224f23ef24628a254ca22984cb016ba424218bf09f778d13f1d3927e1af6de90d2c7a8e4a9dd6c96b5d7d93108d1b33517566c3a0925a24e9f187707abcaa53cda6bf4e2e840741b7d7cfee147bf9e37e4326f8d7c3f9b1fdf141dcd298e00b829897bf6a2ee781c958feca8e635cf745ed43bacf0b310546ba9a62c6368e4cc519a94f4154db0639f04ab782be02e5c09b789bd9425cdcaeb084e275640a92e49", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0xf8, 0x0, 0x0, 0x0, 0x7fef, 0x10092, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x8, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.783687602s ago: executing program 0 (id=2537):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x600, 0x1a, 0x0, 0x1c)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043008000a8001600040001", 0x37}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="000000000000000018410000ffffffff00000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001980)=""/4096, 0x40f00, 0x6, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x6, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[r6, r4, r9, r4], &(0x7f0000000b40)=[{0x0, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x3, 0x10, 0x6}, {0x4, 0x5, 0x7, 0x1}, {0x2, 0x2, 0xb, 0xa}, {0x3, 0x1, 0xb, 0x8}], 0x10, 0xfffffffe}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

5.618940972s ago: executing program 3 (id=2590):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x22)
socket$kcm(0x10, 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x600}, 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, r6, 0x4, 0x2, 0x1}, 0x50)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="8a0000000b000000040000000400000000000000afebfa9202b20946eec810b7e808bc", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/28], 0x50)
socket$kcm(0x2, 0x3, 0x2)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)

5.284248502s ago: executing program 0 (id=2591):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000000)="ed7d849f80260c0464b147c69f543f14915f19dff6510ba4b122e97bc95aa680661bef85174e901aeff06442092bfedb18534e548eff7e88959ab08298b2f2b73c652098c7096ec0fa347d2e0d2f5a7421b0af560931631aec5a1d94b8d27d6dc183a99dd48a59d9cb68a21cab4e6d5ba316f2c5ad91fd9e1000d1bf1183fb0c92e2670937def224e32c38c39e91b1b1367619352c3f1e563d", &(0x7f00000007c0)=""/4096, &(0x7f00000000c0)="917c0908756fd5c0cac226fa0e57578c86dcc0f7aead8b33982fecfd9ba019237eb8a0ec227ac391c39cf6f33bb6d0e8947f00b00f192a54dd6302f0d7a2aadc46b8a8efebaa4e63f722b9e09aeb8842f0ed3d7c9cff8964d6980a211f6bf1b8928346acee018187350e0a4190483a2d3b52d5d7135ccc96d36004cc21491e92498c7837fa08fddb6d16de80684fad9aa17f2c66f74bfa69bac7e80b1c0da7b54c740d39ce42fd193c33a24f9c1f1a7854499ed335edb7e6455fc2ea8c628de28819ebca2921c161d9c26d342f6a4659ac63c76834767bdfb14c3bdb3628c94f5b74749b17222c37baa22513d8c064d83d2ed46fe0b1dc7e95f12f", &(0x7f0000000280)="a8e6256592bcfa189f5e5e560caa51433b16f19ef54188ca929866a9370534bc481af6643de70d2e5f8d11adb46eb124963dd2631bafcd46baefc578bf55f720af4558b8b7be646d108718212557ee9f35fcbb16b79f15bb", 0xb, r0, 0x4}, 0x38)

5.14425318s ago: executing program 0 (id=2593):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x15, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d858952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a8b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r3, 0x100}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r7, <r10=>0xffffffffffffffff}, 0xff8d)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r10, <r11=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000680)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000280)='syzkaller\x00', 0x36, 0x30, &(0x7f00000002c0)=""/48, 0x40f00, 0x2d, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000400)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xd, 0xc, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r6, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, r7], 0x0, 0x10, 0x40}, 0x94)
r12 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r12, 0x6, 0x18, &(0x7f0000000600), 0x4)

4.788604471s ago: executing program 1 (id=2595):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000e80)="a8", 0x1}], 0x1}, 0x20000000)
ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @remote})

4.742530785s ago: executing program 0 (id=2596):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0xfffffffc}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

4.64408377s ago: executing program 3 (id=2597):
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.606663732s ago: executing program 0 (id=2599):
r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e33e363a4b1"})
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x3, 0xe6, 0x6, 0xb5, 0x0, 0x8d, 0x4c600, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0x1, @perf_config_ext={0x3, 0x5}, 0x100, 0x7, 0xffffffff, 0x1, 0x7, 0xfffffff9, 0x0, 0x0, 0x8, 0x0, 0x2}, r0, 0x6, r2, 0x2)
sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20040840)
recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x10140)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x7, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x3, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x18)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4f3e, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x2, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x6, 0x4, 0xfffff26d, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff0806632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0x3)

4.587768204s ago: executing program 1 (id=2600):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x600, 0x1a, 0x0, 0x1c)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043008000a8001600040001", 0x37}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="000000000000000018410000ffffffff00000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001980)=""/4096, 0x40f00, 0x6, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x6, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[r6, r4, r9, r4], &(0x7f0000000b40)=[{0x0, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x3, 0x10, 0x6}, {0x4, 0x5, 0x7, 0x1}, {0x2, 0x2, 0xb, 0xa}, {0x3, 0x1, 0xb, 0x8}], 0x10, 0xfffffffe}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

4.462353141s ago: executing program 2 (id=2601):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x8, 0x2014}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x10)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/238, 0xee}, {0x0}], 0x2}, 0x10002)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x7f, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[], 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001500000008000000400000"], 0x50)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.168598569s ago: executing program 1 (id=2602):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r3 = socket$kcm(0xa, 0x2, 0x73)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup/syz0\x00', 0x1ff)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='1-2:', @ANYRESOCT=0x0], 0x31)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/254, 0xfe}, {&(0x7f0000003100)=""/4059, 0xfdb}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}], 0x7}, 0x40012100)

1.529631158s ago: executing program 3 (id=2603):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x8, 0x2014}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair(0x22, 0x2, 0x21, &(0x7f00000000c0))
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x2, 0x0, 0x5a, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1ff, 0x16}, 0x0, 0x0, 0x0, 0x2, 0xffffffffffefbbfe, 0xe, 0x1, 0x0, 0xfffffffe, 0x0, 0x1bffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

1.428069984s ago: executing program 1 (id=2604):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf14b)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9, 0x5, 0x8000, 0xfff7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0xa002)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000400)}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0xfffff034}, {0x6, 0x1, 0x1, 0x40}]})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x204)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.427502934s ago: executing program 2 (id=2605):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000200"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
close(r0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.109033883s ago: executing program 2 (id=2606):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a4000140027c0000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = gettid() (async)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f0000000640)="962c3ae040cd34ebd10acccaf1b72b32ae0cb6e9da93b964621ba89b943a623c5388b669dd41074e24c9bcea0069f33fe070ff9d11900643b327034ab6ac6ce1f9fdcdb2c5177080b3208ce9a203616547e563bca2c17252c13b73e2d9ed924e663fbe5f2d6e2ba574ae4237c3db8762cc077a9458bc2177d1055ae926d731b38681499f943017366b637045c3cb231c045d8a4983f90db99a", &(0x7f0000000700)=""/189, 0x4}, 0x20) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48)
perf_event_open(&(0x7f0000000ac0)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r11) (async)
socketpair(0xa, 0x3, 0x96e4, &(0x7f00000004c0)) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex=r12, 0x37, 0x1, 0x3, &(0x7f00000007c0)=[0x0], 0x1, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001"], 0xa0}, 0x4004881)

1.000676599s ago: executing program 1 (id=2607):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600033582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0)
socket$kcm(0x2, 0x3, 0x106)
perf_event_open(&(0x7f0000000380)={0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cgroup.kill\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000300)='GPL\x00'}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x40)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000047c0)=""/4039, 0xfc7}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000700)=""/239, 0xef}], 0x6}, 0xbf9d5a5a4c2f3718)
sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
recvmsg$kcm(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)

942.287633ms ago: executing program 3 (id=2608):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x4, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x3, 0x3, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000180)=[{0x2, 0x4, 0x9, 0xa}], 0x10, 0x1}, 0x94)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000380)=@xdp={0x2c, 0x6, r1, 0x32}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)="5f64cb794c14ccb09e26bbf5df46c24e592c025ca4cc4b4aee43eb0b20f3130f055a4f79a805eeafbbfe98706946613544a11f923e34aa5f7afdb0231b7c36aff50590716a1a2dab111a5cc9c41d449ccfe73b9333c3a25e8a33b9bf90d48de734a86befed321db1ce4bd61dc27abedb5f6e4200b0da0ea202a565911ff6b3ee3bacb61cd9a1cf0cd55eee8c0a8cf67a3c38b44a4dc801a0bab1c330629235f85673e5128891b26bb9c695cb64dea8a4c57db2f7144dfdb35472a6fd24011e72fe73644eb562d25e87278e60f2fd4c24be544d8ff8153611814eff1869a85e2832b5223a26d2a047a473224b6f0d00", 0xef}, {&(0x7f0000000500)}, {&(0x7f0000000540)="9b982217126ed71cac339089aec32a9c677127fe593b13c40c032eb6cc0ed859cb122d53028a92323481d833d4168d4c2f141b58143c103e2ac2df2e54311f333573c1661950c9c993ec00eb7db27b0a600b729d03afffb6939f3d7ac20967a7a341b893273237fd00ee2e33e2e15ce22847f5926eee3e16cee013cadd48a2327989c5c2b4766dc3698476796bd4098a62512b40855f32cd534dbe8ba2d4447357168aac2419b7ff8bed684ad7e82a80803281c590b17f57a44737b5e405f2fcd705181f4b487af4a64743b1487a36eae10a9010d08eb05ed849dd22a5d462569f251480c5b190126dd8d872ec516e0da72600", 0xf3}, {&(0x7f0000000640)="746de6c66920602ce937ada5825638a47869d53f1a041c1f238196ee95e692240b64043cc25e674f11081e998ce2d11122a90814b70565918ccfb7c983638a1d7c86", 0x42}, {&(0x7f00000006c0)="df0999fe118c24192ac64c996945e9f01490bfe64d0e1f09f89e52202f39d7cac4a49056e51394ab1a4e3893c44682fea2463b567c7354dfdf4f1c117ebf4f475b353e86282d7336397d7a0f3129dde66d1a56f0a7202944c45a24e0b3259fc91798fd123e34c1cc28f1a97aae040243c31b143f5fa00228a408eeddd44328bd50866a1cee22dfbd", 0x88}, {&(0x7f0000000780)="4254e58b7be020d4f2241a88d464f6690bf5b281a6b2f4482b10f8830c357662aea612c6848ad8c1ad0326abfa726e52bb1d09e7151027379f370f48e0b2a471a406a2de1cdd0672b57ae9195e48ec", 0x4f}, {&(0x7f0000000800)="12790598b71434717e4943088c8f480d83773b35c3b50473da7d21b47031041ff52dd30c52f58aa106c84ad263a38624e561773d0144bfd0b2d3c98c4d11bca76a90b6d63c19b281e531371b66756ecc63ca617988ce", 0x56}], 0x7, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x1010000000000000}}], 0x18}, 0xc000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/57, 0x39}, {&(0x7f0000000a40)=""/27, 0x1b}, {&(0x7f0000000a80)=""/94, 0x5e}, {&(0x7f0000000b00)=""/238, 0xee}, {&(0x7f0000000c00)=""/37, 0x25}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}], 0x20}, 0x33d2b673c6263cc2)
r4 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000d80)={r4, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000d40)='syzkaller\x00'}, 0x30)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0), 0x8)
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000e40)={0x4, &(0x7f0000000e00)=[{0xa826, 0x5, 0x47, 0x80000000}, {0x9, 0x1, 0x1f, 0x8000}, {0xfff2, 0x8, 0x0, 0x703}, {0x9, 0x81, 0x9, 0x4}]})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x104)
r6 = perf_event_open(&(0x7f0000000e80)={0x0, 0x80, 0x9, 0x4, 0x80, 0x18, 0x0, 0x2, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x35a5, 0x1, @perf_config_ext={0x8, 0x6}, 0x1, 0x8001, 0x5, 0x8, 0x5, 0x6, 0x9, 0x0, 0x2, 0x0, 0x1}, r3, 0xb, r5, 0xb)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f00), 0x2, 0x0)
perf_event_open(&(0x7f0000000f40)={0x5, 0x80, 0x1, 0x2, 0x9, 0x80, 0x0, 0x101, 0x4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffff81, 0x2, @perf_config_ext={0x6, 0x7}, 0x80, 0x2, 0x5, 0x9, 0x4, 0x400, 0x3, 0x0, 0x5, 0x0, 0xe}, r4, 0x5, r5, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xcad5)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001040)={{r5}, &(0x7f0000000fc0), &(0x7f0000001000)='%pB    \x00'}, 0x20)
r8 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$sock(r5, &(0x7f0000001300)={&(0x7f0000001080)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x2, 0x3, 0x2, 0x2}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)="9250b40dbfb21d9b3dfec8f3254ec8b16b8c3b2cab4ea3acf089007193da8b6b882b6b879f0931da7d4f3807f579188817afc902972c2a1b3e488861fd5cb2c43965863de8e4947d2dbc0a320d55f3b06eea82f5bba18ed2ebe981144dfd919d9f01ed23f620f0d7b62604d1cd640aee8ab375886b0b9dd85d780aef2955cb7df896fd0a4abb411de722f217b1af17eddf98970edc59851a52a02111440f3b690dfc0ec6d1272962", 0xa8}, {&(0x7f00000011c0)="1f658037df1fca8c8fb8f207754ece4cc994366828dc621a62aab89b4d27a45773dcf348cd7f8fddce5d017b9a1c03192a0bbb2467ad22180e83d1bfb07e45587b733a3a99f836f14736e2a69b1ac9b4f4869fd881a26becefc72188d6e66f9985b4f006e74b196ad28086b549281d07d773dffbae182c0a4baaaa375e8f27c330ac7919d89474f28668e7b3079802759d1a82ebbf2add0ec79171b9bcea119072ef9475", 0xa4}], 0x2, &(0x7f00000012c0)=[@txtime={{0x18, 0x1, 0x3d, 0x100000001}}], 0x18}, 0xd1)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001340)={<r9=>r5})
close(r9)
unlink(&(0x7f0000001380)='./file0\x00')
recvmsg$kcm(r9, &(0x7f0000001900)={&(0x7f00000013c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001440)=""/144, 0x90}, {&(0x7f0000001500)=""/33, 0x21}, {&(0x7f0000001540)=""/182, 0xb6}, {&(0x7f0000001600)=""/20, 0x14}, {&(0x7f0000001640)=""/131, 0x83}, {&(0x7f0000001700)=""/196, 0xc4}, {&(0x7f0000001800)=""/25, 0x19}], 0x7, &(0x7f00000018c0)=""/14, 0xe}, 0x100)
write$cgroup_subtree(r7, &(0x7f0000001940)={[{0x2d, 'rlimit'}, {0x0, 'rdma'}]}, 0xe)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001980)={r8})
ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000019c0)={0x0, 0x4, [@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @random="9de555f2ae02"]})
r10 = openat$cgroup_ro(r5, &(0x7f0000001a00)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001a80)=@generic={&(0x7f0000001a40)='./file0\x00', r10}, 0x18)
socketpair(0x1, 0x80000, 0xb2, &(0x7f0000001ac0))

937.060684ms ago: executing program 2 (id=2609):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x3c, 0x1, 0x1, [<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x2160)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008110e00f80ecdb4cb9f207c804a018000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000600))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c000000850000000700000095", @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRES32=r5], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x27, 0xdc0, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0xd, 0x1, 0x2, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
r10 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4)
sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)

825.28093ms ago: executing program 3 (id=2610):
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xff8}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@caif=@dbg, 0x80, 0x0}, 0x10000)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040), 0x4)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
close(r2)
r3 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x218, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4004081)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0xb3503436ddae298)
recvmsg$kcm(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)

295.512542ms ago: executing program 2 (id=2611):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
socket$kcm(0xa, 0x2, 0x73)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x600, 0x1a, 0x0, 0x1c)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043008000a8001600040001", 0x37}], 0x1}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000004000000000000000c000000184400000200000000000000000000007d06", @ANYRES32, @ANYBLOB="00800000010000001814000006366cd33eee6abda21e1bea3b7195b4255307d4ef8b2c0d04492c87f101dc2c0b69be7839999bb30a21601a603d79b193ebd03f81ac13bd33d08d13be32d9eede68748719fab2365b5afb14d65c20fca34670685f6b41742351e7b17ec340408fab5b74b4ca57cc14c450c9bd2533541b73925f7a06c44ed1850aba6613061cd51e86323591ca0b9a0ba5fe9ea6a0c0bd18f8137ab92ac88358b9a1d9bc9bc432f1e70263fb46411220aca54b4153e5d0e185366a6e2800714f715a0a097a57cb13e017625c6589ecc31f1fdd45afa96897c587b812571cb0308e47f2eeecdb3197b2aff1c42a652b375d67a53d9d2ec672b69b539c67380c3414e99ceb9e8dca77988d207409576bbf8c909c5677da4d04d4af43636ecb2efc4d06207741ff11ef67234e6a62b894d8b1fc3be443f2d69ece417f141a36cc5fab53b55f39aa3415f940b701b8403b2a5dfed1ca8e2620e3dcaa5ea4b6292bf2824a416ad2d9a02c16ca41c57c6a7f3fa0c6d3d6031cbabc2e4b816a63b9237856a2d7e4583362520ab28bddfce1bfb44e1862436ad5d9048811a970f7f77aa422d646b2831a798f22d38c52ae8f1f0b1e4b6fe6c2907a7a", @ANYRES32=r0, @ANYBLOB="000000000000000018410000ffffffff00000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000001980)=""/4096, 0x40f00, 0x6, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x6, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b00)=[r6, r4, r9, r4], &(0x7f0000000b40)=[{0x0, 0x3, 0x9, 0x8}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x3, 0x10, 0x6}, {0x4, 0x5, 0x7, 0x1}, {0x2, 0x2, 0xb, 0xa}, {0x3, 0x1, 0xb, 0x8}], 0x10, 0xfffffffe}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33)

56.199876ms ago: executing program 3 (id=2612):
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

995.41µs ago: executing program 1 (id=2613):
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) (fail_nth: 10)

0s ago: executing program 2 (id=2614):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
close(r5)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, 0x0, 0x0)
close(r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x29)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}, 0x20004004)
r8 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)
sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4)
recvmsg$kcm(r8, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r7, r7}, 0xc)

kernel console output (not intermixed with test programs):

? nf_ct_ext_add+0x1ab/0x440
[  719.038574][T11734]  ? nf_ct_ext_add+0x1ab/0x440
[  719.043464][T11734]  __kmem_cache_alloc_node+0x53/0x250
[  719.048951][T11734]  ? nf_ct_ext_add+0x1ab/0x440
[  719.053729][T11734]  __kmalloc_node_track_caller+0xa2/0x230
[  719.059748][T11734]  krealloc+0x86/0x120
[  719.063814][T11734]  nf_ct_ext_add+0x1ab/0x440
[  719.068404][T11734]  init_conntrack+0x69c/0xf10
[  719.073219][T11734]  ? early_drop+0x7f0/0x7f0
[  719.077907][T11734]  ? nf_conntrack_find_get+0x650/0x650
[  719.083458][T11734]  ? __local_bh_enable_ip+0x13a/0x1c0
[  719.088828][T11734]  ? __siphash_unaligned+0x22e/0x3a0
[  719.094302][T11734]  nf_conntrack_in+0xc06/0x15c0
[  719.099263][T11734]  ? nf_ct_pernet+0x270/0x270
[  719.103946][T11734]  ? ipt_do_table+0x2c1/0x15e0
[  719.108732][T11734]  ? __local_bh_enable_ip+0x13a/0x1c0
[  719.114273][T11734]  ? read_lock_is_recursive+0x20/0x20
[  719.119669][T11734]  ? ipv4_conntrack_defrag+0x29d/0x5a0
[  719.125227][T11734]  ? ipv4_conntrack_local+0x123/0x200
[  719.130603][T11734]  ? ipv4_conntrack_in+0x20/0x20
[  719.135622][T11734]  nf_hook_slow+0xbd/0x200
[  719.140045][T11734]  ? nf_hook+0x390/0x390
[  719.144462][T11734]  nf_hook+0x228/0x390
[  719.148529][T11734]  ? nf_hook+0xa2/0x390
[  719.152678][T11734]  ? __ip_local_out+0x5f0/0x5f0
[  719.157706][T11734]  ? nf_hook+0x390/0x390
[  719.162016][T11734]  ? __asan_memset+0x22/0x40
[  719.166603][T11734]  ? ip_fast_csum+0x1ee/0x2b0
[  719.171362][T11734]  __ip_local_out+0x4db/0x5f0
[  719.176392][T11734]  ? nf_hook+0x390/0x390
[  719.180680][T11734]  ip_local_out+0x2a/0x130
[  719.185295][T11734]  iptunnel_xmit+0x4f0/0x920
[  719.189900][T11734]  ip_tunnel_xmit+0x1cbc/0x2410
[  719.194793][T11734]  ? ip4_dst_hoplimit+0x2d0/0x2d0
[  719.199891][T11734]  ? validate_xmit_xfrm+0xbc/0x12c0
[  719.205096][T11734]  ? gre_build_header+0x25b/0x990
[  719.210142][T11734]  ipgre_xmit+0x7a6/0xb20
[  719.214593][T11734]  dev_hard_start_xmit+0x246/0x740
[  719.219805][T11734]  __dev_queue_xmit+0x1ac2/0x36b0
[  719.224831][T11734]  ? __dev_queue_xmit+0x26b/0x36b0
[  719.230074][T11734]  ? netdev_core_pick_tx+0x340/0x340
[  719.235361][T11734]  ? skb_release_data+0x1cf/0x800
[  719.240491][T11734]  ? pskb_expand_head+0xbfe/0x1230
[  719.245777][T11734]  __bpf_tx_skb+0x189/0x250
[  719.250293][T11734]  bpf_clone_redirect+0x30f/0x4a0
[  719.255330][T11734]  bpf_prog_208b094576c80b22+0x5e/0x63
[  719.260971][T11734]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  719.267044][T11734]  ? preempt_schedule+0xc0/0xd0
[  719.271978][T11734]  ? bpf_test_run+0x174/0x870
[  719.276650][T11734]  ? preempt_schedule_common+0x82/0xc0
[  719.282147][T11734]  ? schedule_preempt_disabled+0x20/0x20
[  719.287774][T11734]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  719.293753][T11734]  ? lockdep_softirqs_on+0x580/0x580
[  719.299029][T11734]  ? lock_chain_count+0x20/0x20
[  719.303963][T11734]  ? preempt_schedule_thunk+0x1a/0x30
[  719.309388][T11734]  ? __local_bh_disable_ip+0x108/0x1a0
[  719.314837][T11734]  ? __cant_sleep+0x220/0x220
[  719.319521][T11734]  ? __local_bh_enable_ip+0x14b/0x1c0
[  719.325067][T11734]  ? _local_bh_enable+0xa0/0xa0
[  719.329923][T11734]  ? bpf_test_timer_continue+0x135/0x380
[  719.335555][T11734]  ? bpf_test_run+0x174/0x870
[  719.340396][T11734]  bpf_test_run+0x2df/0x870
[  719.344988][T11734]  ? bpf_test_run+0x174/0x870
[  719.349825][T11734]  ? convert___skb_to_skb+0x590/0x590
[  719.355201][T11734]  ? eth_get_headlen+0x210/0x210
[  719.360139][T11734]  ? slab_build_skb+0x25f/0x3f0
[  719.364995][T11734]  ? convert___skb_to_skb+0x3d/0x590
[  719.370309][T11734]  bpf_prog_test_run_skb+0xad2/0x12b0
[  719.375857][T11734]  ? cpu_online+0x60/0x60
[  719.380198][T11734]  bpf_prog_test_run+0x321/0x390
[  719.385192][T11734]  __sys_bpf+0x49d/0x890
[  719.389429][T11734]  ? bpf_link_show_fdinfo+0x390/0x390
[  719.394892][T11734]  ? lock_chain_count+0x20/0x20
[  719.399835][T11734]  __x64_sys_bpf+0x7c/0x90
[  719.404517][T11734]  do_syscall_64+0x55/0xa0
[  719.408936][T11734]  ? clear_bhb_loop+0x40/0x90
[  719.413617][T11734]  ? clear_bhb_loop+0x40/0x90
[  719.418290][T11734]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  719.424176][T11734] RIP: 0033:0x7fbb9679af79
[  719.428582][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.448374][T11734] RSP: 002b:00007fbb975b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  719.457002][T11734] RAX: ffffffffffffffda RBX: 00007fbb96a15fa0 RCX: 00007fbb9679af79
[  719.465066][T11734] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  719.473057][T11734] RBP: 00007fbb975b4090 R08: 0000000000000000 R09: 0000000000000000
[  719.481064][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  719.489223][T11734] R13: 00007fbb96a16038 R14: 00007fbb96a15fa0 R15: 00007ffcd2984ea8
[  719.497383][T11734]  </TASK>
[  719.578682][T11738] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2139'.
[  719.640090][T11740] netlink: 'syz.1.2144': attribute type 29 has an invalid length.
[  719.652344][T11738] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  719.670218][T11740] netlink: 'syz.1.2144': attribute type 29 has an invalid length.
[  719.680433][T11740] netlink: 'syz.1.2144': attribute type 29 has an invalid length.
[  720.066218][T11746] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2148'.
[  720.146956][T11748] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2147'.
[  720.847867][T11762] sit0: entered promiscuous mode
[  720.860227][T11762] sit0: entered allmulticast mode
[  720.999307][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2159'.
[  721.014476][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2159'.
[  721.028482][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2159'.
[  721.113358][T11775] delete_channel: no stack
[  721.122580][T11775] delete_channel: no stack
[  721.252168][T11779] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2162'.
[  721.262450][T11779] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  721.658559][T11788] netlink: 694 bytes leftover after parsing attributes in process `syz.3.2165'.
[  721.791368][T11796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2168'.
[  721.801546][T11796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2168'.
[  725.487990][T11818] validate_nla: 1 callbacks suppressed
[  725.488021][T11818] netlink: 'syz.3.2178': attribute type 21 has an invalid length.
[  725.499074][T11824] __nla_validate_parse: 3 callbacks suppressed
[  725.499089][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'.
[  725.506190][T11818] netlink: 'syz.3.2178': attribute type 1 has an invalid length.
[  725.530596][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'.
[  725.542704][T11824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'.
[  725.725882][T11826] syzkaller0: entered promiscuous mode
[  725.731505][T11826] syzkaller0: entered allmulticast mode
[  725.733904][T11835] FAULT_INJECTION: forcing a failure.
[  725.733904][T11835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.753877][T11831] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2179'.
[  725.754271][T11835] CPU: 0 PID: 11835 Comm: syz.3.2183 Not tainted syzkaller #0
[  725.771020][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  725.781370][T11835] Call Trace:
[  725.784653][T11835]  <TASK>
[  725.787668][T11835]  dump_stack_lvl+0x18c/0x250
[  725.792386][T11835]  ? show_regs_print_info+0x20/0x20
[  725.797721][T11835]  ? load_image+0x400/0x400
[  725.802265][T11835]  ? __might_fault+0xaa/0x120
[  725.807235][T11835]  ? __lock_acquire+0x7d40/0x7d40
[  725.812296][T11835]  should_fail_ex+0x39d/0x4d0
[  725.817115][T11835]  _copy_from_user+0x2f/0xe0
[  725.822015][T11835]  generic_map_update_batch+0x54b/0x810
[  725.828055][T11835]  ? rcu_read_unlock+0xa0/0xa0
[  725.832850][T11835]  ? __fdget+0x180/0x210
[  725.837138][T11835]  ? rcu_read_unlock+0xa0/0xa0
[  725.842018][T11835]  bpf_map_do_batch+0x3d7/0x610
[  725.846908][T11835]  __sys_bpf+0x381/0x890
[  725.851180][T11835]  ? bpf_link_show_fdinfo+0x390/0x390
[  725.856592][T11835]  ? lock_chain_count+0x20/0x20
[  725.861538][T11835]  __x64_sys_bpf+0x7c/0x90
[  725.866164][T11835]  do_syscall_64+0x55/0xa0
[  725.870690][T11835]  ? clear_bhb_loop+0x40/0x90
[  725.875398][T11835]  ? clear_bhb_loop+0x40/0x90
[  725.880073][T11835]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.886311][T11835] RIP: 0033:0x7fcb3a59af79
[  725.890735][T11835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.910686][T11835] RSP: 002b:00007fcb3b4b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  725.919315][T11835] RAX: ffffffffffffffda RBX: 00007fcb3a815fa0 RCX: 00007fcb3a59af79
[  725.927289][T11835] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  725.935542][T11835] RBP: 00007fcb3b4b1090 R08: 0000000000000000 R09: 0000000000000000
[  725.943598][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  725.951565][T11835] R13: 00007fcb3a816038 R14: 00007fcb3a815fa0 R15: 00007fff6c1d4768
[  725.959546][T11835]  </TASK>
[  726.102010][T11842] netlink: 694 bytes leftover after parsing attributes in process `syz.1.2185'.
[  726.118364][T11841] netlink: 'syz.3.2184': attribute type 1 has an invalid length.
[  726.126601][T11841] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2184'.
[  726.137514][T11841] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2184'.
[  726.610634][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2190'.
[  728.402152][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2190'.
[  728.588550][T11874] -1: renamed from syzkaller0
[  728.735654][T11879] IPv6: Can't replace route, no match found
[  728.742209][T11879] FAULT_INJECTION: forcing a failure.
[  728.742209][T11879] name failslab, interval 1, probability 0, space 0, times 0
[  728.755592][T11879] CPU: 1 PID: 11879 Comm: syz.1.2200 Not tainted syzkaller #0
[  728.763108][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  728.773296][T11879] Call Trace:
[  728.776660][T11879]  <TASK>
[  728.779609][T11879]  dump_stack_lvl+0x18c/0x250
[  728.784404][T11879]  ? show_regs_print_info+0x20/0x20
[  728.789596][T11879]  ? load_image+0x400/0x400
[  728.794099][T11879]  ? __might_sleep+0xe0/0xe0
[  728.798699][T11879]  ? __lock_acquire+0x7d40/0x7d40
[  728.803809][T11879]  should_fail_ex+0x39d/0x4d0
[  728.808599][T11879]  should_failslab+0x9/0x20
[  728.813127][T11879]  slab_pre_alloc_hook+0x59/0x310
[  728.818288][T11879]  kmem_cache_alloc_node+0x60/0x320
[  728.823775][T11879]  ? __alloc_skb+0x103/0x2c0
[  728.828379][T11879]  __alloc_skb+0x103/0x2c0
[  728.832816][T11879]  netlink_ack+0x376/0x1180
[  728.837353][T11879]  ? __dev_queue_xmit+0x26b/0x36b0
[  728.842591][T11879]  ? netlink_dump+0xe50/0xe50
[  728.847278][T11879]  ? ref_tracker_free+0x690/0x840
[  728.852392][T11879]  netlink_rcv_skb+0x2c5/0x4d0
[  728.857339][T11879]  ? rtnetlink_bind+0x80/0x80
[  728.862014][T11879]  ? netlink_ack+0x1180/0x1180
[  728.866884][T11879]  ? __lock_acquire+0x7d40/0x7d40
[  728.872027][T11879]  ? netlink_deliver_tap+0x2e/0x1b0
[  728.877334][T11879]  netlink_unicast+0x751/0x8d0
[  728.882452][T11879]  netlink_sendmsg+0x8d0/0xbf0
[  728.887479][T11879]  ? netlink_getsockopt+0x590/0x590
[  728.892677][T11879]  ? aa_sock_msg_perm+0x94/0x150
[  728.897615][T11879]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  728.903256][T11879]  ? security_socket_sendmsg+0x80/0xa0
[  728.908992][T11879]  ? netlink_getsockopt+0x590/0x590
[  728.914210][T11879]  ____sys_sendmsg+0x5ba/0x960
[  728.919290][T11879]  ? __asan_memset+0x22/0x40
[  728.924055][T11879]  ? __sys_sendmsg_sock+0x30/0x30
[  728.929419][T11879]  ? __import_iovec+0x5f2/0x850
[  728.934536][T11879]  ? import_iovec+0x73/0xa0
[  728.939144][T11879]  ___sys_sendmsg+0x2a6/0x360
[  728.943837][T11879]  ? get_pid_task+0x20/0x1e0
[  728.948461][T11879]  ? __sys_sendmsg+0x2a0/0x2a0
[  728.953243][T11879]  ? __lock_acquire+0x7d40/0x7d40
[  728.958304][T11879]  __se_sys_sendmsg+0x1c2/0x2b0
[  728.963235][T11879]  ? __x64_sys_sendmsg+0x80/0x80
[  728.968199][T11879]  ? lockdep_hardirqs_on+0x98/0x150
[  728.973398][T11879]  do_syscall_64+0x55/0xa0
[  728.977927][T11879]  ? clear_bhb_loop+0x40/0x90
[  728.982715][T11879]  ? clear_bhb_loop+0x40/0x90
[  728.987385][T11879]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  728.993372][T11879] RIP: 0033:0x7fbb9679af79
[  728.998303][T11879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.018004][T11879] RSP: 002b:00007fbb975b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  729.026527][T11879] RAX: ffffffffffffffda RBX: 00007fbb96a15fa0 RCX: 00007fbb9679af79
[  729.034665][T11879] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  729.042920][T11879] RBP: 00007fbb975b4090 R08: 0000000000000000 R09: 0000000000000000
[  729.051098][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.059067][T11879] R13: 00007fbb96a16038 R14: 00007fbb96a15fa0 R15: 00007ffcd2984ea8
[  729.067048][T11879]  </TASK>
[  729.259659][T11889] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2204'.
[  729.715764][T11906] netlink: 'syz.0.2211': attribute type 21 has an invalid length.
[  729.729318][T11906] netlink: 'syz.0.2211': attribute type 1 has an invalid length.
[  730.001255][T11915] netlink: 'syz.0.2215': attribute type 21 has an invalid length.
[  730.396765][T11927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.474800][T11927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.500820][T11927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.561857][T11927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.573717][T11927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.596552][T11927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.608006][T11927] batadv_slave_1: entered promiscuous mode
[  730.614353][T11930] netlink: 'syz.1.2220': attribute type 21 has an invalid length.
[  730.642216][T11930] netlink: 'syz.1.2220': attribute type 1 has an invalid length.
[  730.651420][T11932] netlink: 'syz.2.2221': attribute type 21 has an invalid length.
[  730.670414][T11932] netlink: 'syz.2.2221': attribute type 6 has an invalid length.
[  730.684314][T11932] __nla_validate_parse: 10 callbacks suppressed
[  730.684351][T11932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2221'.
[  730.708232][T11935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2222'.
[  730.720530][T11935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2222'.
[  730.753388][T11935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2222'.
[  730.767983][T11935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2222'.
[  730.792229][T11939] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2224'.
[  730.804496][T11937] netlink: 706 bytes leftover after parsing attributes in process `syz.1.2223'.
[  730.941258][T11941] syzkaller0: entered promiscuous mode
[  730.950136][T11941] syzkaller0: entered allmulticast mode
[  731.018971][T11944] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2227'.
[  731.101915][T11948] syzkaller0: entered promiscuous mode
[  731.108574][T11948] syzkaller0: entered allmulticast mode
[  733.059412][T11957] netlink: 'syz.0.2232': attribute type 21 has an invalid length.
[  733.067567][T11957] netlink: 'syz.0.2232': attribute type 1 has an invalid length.
[  733.336686][T11963] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2235'.
[  735.281866][T11965] netlink: 706 bytes leftover after parsing attributes in process `syz.0.2236'.
[  735.468165][T11988] netlink: 'syz.0.2242': attribute type 21 has an invalid length.
[  735.494334][T11988] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  735.714433][T11992] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  735.744488][T11992] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  735.766946][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2245'.
[  735.804291][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2245'.
[  735.811363][T12000] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2246'.
[  735.873569][T12001] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2245'.
[  735.896014][T11997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2245'.
[  736.050584][T12004] netlink: 'syz.3.2247': attribute type 1 has an invalid length.
[  736.115502][T12004] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2247'.
[  736.418714][T12009] pim6reg0: tun_chr_ioctl cmd 1074025675
[  736.445150][T12009] pim6reg0: persist enabled
[  736.483456][T12010] netlink: 706 bytes leftover after parsing attributes in process `syz.2.2249'.
[  736.530744][T12012] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.2248'.
[  736.975515][T12026] netlink: 'syz.2.2254': attribute type 21 has an invalid length.
[  736.984437][T12026] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  737.132910][T12029] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.2255'.
[  737.510298][T12039] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2258'.
[  738.038458][T12052] netlink: 'syz.1.2262': attribute type 1 has an invalid length.
[  738.186629][T12051] netlink: 'syz.2.2264': attribute type 21 has an invalid length.
[  738.212086][T12051] netlink: 'syz.2.2264': attribute type 1 has an invalid length.
[  738.639338][T12059] FAULT_INJECTION: forcing a failure.
[  738.639338][T12059] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  738.657743][T12059] CPU: 1 PID: 12059 Comm: syz.0.2267 Not tainted syzkaller #0
[  738.665372][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  738.675542][T12059] Call Trace:
[  738.679105][T12059]  <TASK>
[  738.682046][T12059]  dump_stack_lvl+0x18c/0x250
[  738.686761][T12059]  ? show_regs_print_info+0x20/0x20
[  738.691988][T12059]  ? load_image+0x400/0x400
[  738.696517][T12059]  ? __might_fault+0xaa/0x120
[  738.701355][T12059]  ? __lock_acquire+0x7d40/0x7d40
[  738.706621][T12059]  should_fail_ex+0x39d/0x4d0
[  738.711710][T12059]  _copy_from_user+0x2f/0xe0
[  738.716559][T12059]  generic_map_update_batch+0x59a/0x810
[  738.722248][T12059]  ? rcu_read_unlock+0xa0/0xa0
[  738.727041][T12059]  ? __fdget+0x180/0x210
[  738.731324][T12059]  ? rcu_read_unlock+0xa0/0xa0
[  738.736095][T12059]  bpf_map_do_batch+0x3d7/0x610
[  738.741079][T12059]  __sys_bpf+0x381/0x890
[  738.745378][T12059]  ? bpf_link_show_fdinfo+0x390/0x390
[  738.750984][T12059]  ? lock_chain_count+0x20/0x20
[  738.755878][T12059]  __x64_sys_bpf+0x7c/0x90
[  738.760354][T12059]  do_syscall_64+0x55/0xa0
[  738.765166][T12059]  ? clear_bhb_loop+0x40/0x90
[  738.769907][T12059]  ? clear_bhb_loop+0x40/0x90
[  738.774613][T12059]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.780528][T12059] RIP: 0033:0x7fabc699af79
[  738.784959][T12059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.804675][T12059] RSP: 002b:00007fabc7856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  738.813123][T12059] RAX: ffffffffffffffda RBX: 00007fabc6c15fa0 RCX: 00007fabc699af79
[  738.821339][T12059] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  738.829424][T12059] RBP: 00007fabc7856090 R08: 0000000000000000 R09: 0000000000000000
[  738.837531][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.845525][T12059] R13: 00007fabc6c16038 R14: 00007fabc6c15fa0 R15: 00007ffc5bd54b58
[  738.853545][T12059]  </TASK>
[  741.153009][T12069] __nla_validate_parse: 3 callbacks suppressed
[  741.153026][T12069] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2271'.
[  741.259119][T12071] netlink: 706 bytes leftover after parsing attributes in process `syz.3.2272'.
[  741.571351][T12090] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2279'.
[  741.614534][T12086] netlink: 'syz.3.2278': attribute type 21 has an invalid length.
[  741.626775][T12086] netlink: 'syz.3.2278': attribute type 1 has an invalid length.
[  741.974365][T12099] netlink: 'syz.2.2282': attribute type 1 has an invalid length.
[  741.994692][T12099] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2282'.
[  742.506161][T12102] netlink: 694 bytes leftover after parsing attributes in process `syz.3.2284'.
[  742.980854][T12117] netlink: 'syz.1.2290': attribute type 21 has an invalid length.
[  743.021045][T12117] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  743.033383][T12121] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2291'.
[  743.272932][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  743.287627][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  743.327791][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  743.348077][T12131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2296'.
[  743.386200][T12135] netlink: 'syz.3.2297': attribute type 21 has an invalid length.
[  743.567766][T12140] syzkaller0: entered promiscuous mode
[  743.573616][T12140] syzkaller0: entered allmulticast mode
[  747.052100][T12150] netlink: 'syz.2.2303': attribute type 21 has an invalid length.
[  747.060698][T12150] netlink: 'syz.2.2303': attribute type 1 has an invalid length.
[  747.071892][T12161] netlink: 'syz.1.2307': attribute type 1 has an invalid length.
[  747.104395][T12161] netlink: 'syz.1.2307': attribute type 4 has an invalid length.
[  747.112574][T12161] __nla_validate_parse: 1 callbacks suppressed
[  747.112585][T12161] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2307'.
[  747.192973][T12169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2308'.
[  747.211104][T12169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2308'.
[  747.225563][T12169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2308'.
[  747.241017][T12169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2308'.
[  747.330323][T12180] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2313'.
[  747.559986][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.567181][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  747.749380][T12192] netlink: 'syz.3.2317': attribute type 21 has an invalid length.
[  747.758190][T12192] netlink: 'syz.3.2317': attribute type 1 has an invalid length.
[  748.070853][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2321'.
[  748.082432][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2321'.
[  748.094394][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2321'.
[  748.114661][T12202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2321'.
[  748.385219][T12204] netlink: 'syz.3.2322': attribute type 25 has an invalid length.
[  748.663365][T12217] netlink: 'syz.1.2327': attribute type 21 has an invalid length.
[  748.671967][T12217] netlink: 'syz.1.2327': attribute type 1 has an invalid length.
[  751.713909][T12241] FAULT_INJECTION: forcing a failure.
[  751.713909][T12241] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  751.748413][T12241] CPU: 1 PID: 12241 Comm: syz.1.2336 Not tainted syzkaller #0
[  751.756027][T12241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  751.766472][T12241] Call Trace:
[  751.769772][T12241]  <TASK>
[  751.772711][T12241]  dump_stack_lvl+0x18c/0x250
[  751.777540][T12241]  ? show_regs_print_info+0x20/0x20
[  751.782927][T12241]  ? load_image+0x400/0x400
[  751.787548][T12241]  ? __lock_acquire+0x7d40/0x7d40
[  751.792681][T12241]  ? snprintf+0xe9/0x140
[  751.796947][T12241]  should_fail_ex+0x39d/0x4d0
[  751.801998][T12241]  _copy_to_user+0x2f/0xa0
[  751.806437][T12241]  simple_read_from_buffer+0xe7/0x150
[  751.811836][T12241]  proc_fail_nth_read+0x1e8/0x260
[  751.816972][T12241]  ? proc_fault_inject_write+0x360/0x360
[  751.822617][T12241]  ? fsnotify_perm+0x271/0x5e0
[  751.827828][T12241]  ? proc_fault_inject_write+0x360/0x360
[  751.833741][T12241]  vfs_read+0x28b/0x970
[  751.838207][T12241]  ? kernel_read+0x1e0/0x1e0
[  751.842802][T12241]  ? __fget_files+0x28/0x4b0
[  751.847404][T12241]  ? __fget_files+0x28/0x4b0
[  751.852103][T12241]  ? __fget_files+0x43d/0x4b0
[  751.856987][T12241]  ? __fdget_pos+0x2a3/0x330
[  751.861605][T12241]  ? ksys_read+0x75/0x260
[  751.866043][T12241]  ksys_read+0x150/0x260
[  751.870948][T12241]  ? vfs_write+0x990/0x990
[  751.875387][T12241]  ? lockdep_hardirqs_on+0x98/0x150
[  751.880681][T12241]  do_syscall_64+0x55/0xa0
[  751.885292][T12241]  ? clear_bhb_loop+0x40/0x90
[  751.890229][T12241]  ? clear_bhb_loop+0x40/0x90
[  751.894911][T12241]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  751.900807][T12241] RIP: 0033:0x7fbb9675b84e
[  751.905326][T12241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  751.926020][T12241] RSP: 002b:00007fbb975b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  751.934759][T12241] RAX: ffffffffffffffda RBX: 00007fbb975b46c0 RCX: 00007fbb9675b84e
[  751.943276][T12241] RDX: 000000000000000f RSI: 00007fbb975b40a0 RDI: 0000000000000004
[  751.951535][T12241] RBP: 00007fbb975b4090 R08: 0000000000000000 R09: 0000000000000000
[  751.959799][T12241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.968062][T12241] R13: 00007fbb96a16038 R14: 00007fbb96a15fa0 R15: 00007ffcd2984ea8
[  751.977053][T12241]  </TASK>
[  751.983239][ T1188] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  752.056159][T12244] netlink: 'syz.3.2338': attribute type 21 has an invalid length.
[  752.064647][T12244] netlink: 'syz.3.2338': attribute type 1 has an invalid length.
[  752.301802][T12262] __nla_validate_parse: 6 callbacks suppressed
[  752.301821][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2344'.
[  752.342727][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2344'.
[  752.372076][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2344'.
[  752.399443][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2344'.
[  752.633930][T12267] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2345'.
[  753.109663][T12272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.512114][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  753.522534][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  753.532248][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  753.541071][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  753.549480][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  753.557175][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  753.800920][T12278] chnl_net:caif_netlink_parms(): no params data found
[  753.905314][T12278] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.913241][T12278] bridge0: port 1(bridge_slave_0) entered disabled state
[  753.920683][T12278] bridge_slave_0: entered allmulticast mode
[  753.929447][T12278] bridge_slave_0: entered promiscuous mode
[  753.940113][T12278] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.947701][T12278] bridge0: port 2(bridge_slave_1) entered disabled state
[  753.955790][T12278] bridge_slave_1: entered allmulticast mode
[  753.963310][T12278] bridge_slave_1: entered promiscuous mode
[  754.003360][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.022120][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.065201][T12278] team0: Port device team_slave_0 added
[  754.074834][T12278] team0: Port device team_slave_1 added
[  754.104792][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.111871][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.139270][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  754.153488][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  754.160763][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.187428][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.106464][T12278] hsr_slave_0: entered promiscuous mode
[  755.124825][T12278] hsr_slave_1: entered promiscuous mode
[  755.226792][T12288] netlink: 'syz.1.2351': attribute type 21 has an invalid length.
[  755.236412][T12288] netlink: 'syz.1.2351': attribute type 1 has an invalid length.
[  755.620309][T12278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  755.635784][ T5808] Bluetooth: hci4: command tx timeout
[  755.705585][T12298] netlink: 'syz.0.2354': attribute type 2 has an invalid length.
[  755.720258][T12298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2354'.
[  755.911075][T12278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  757.714549][ T5808] Bluetooth: hci4: command tx timeout
[  758.832676][T12312] netlink: 'syz.0.2360': attribute type 21 has an invalid length.
[  758.844379][T12312] netlink: 'syz.0.2360': attribute type 1 has an invalid length.
[  758.915328][T12278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.021043][T12278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.215578][T12320] netlink: 'syz.1.2362': attribute type 10 has an invalid length.
[  759.484924][T12325] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  759.492152][T12325] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  759.573448][T12328] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2365'.
[  759.595362][T12331] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  759.614280][T12331] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  759.635493][T12278] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  759.651412][T12278] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  759.668500][T12325] syz.0.2365[12325] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  759.683295][T12278] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  759.683427][T12325] syz.0.2365[12325] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  759.738269][T12328] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2365'.
[  759.765427][T12278] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  759.794421][ T5808] Bluetooth: hci4: command tx timeout
[  759.930022][T12343] netlink: 'syz.2.2370': attribute type 21 has an invalid length.
[  759.954533][T12343] netlink: 'syz.2.2370': attribute type 1 has an invalid length.
[  759.989731][T12278] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.033888][T12278] 8021q: adding VLAN 0 to HW filter on device team0
[  760.059718][T11522] bridge0: port 1(bridge_slave_0) entered blocking state
[  760.067023][T11522] bridge0: port 1(bridge_slave_0) entered forwarding state
[  760.115832][T11525] bridge0: port 2(bridge_slave_1) entered blocking state
[  760.123149][T11525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  760.142726][T12348] FAULT_INJECTION: forcing a failure.
[  760.142726][T12348] name failslab, interval 1, probability 0, space 0, times 0
[  760.173688][T12348] CPU: 0 PID: 12348 Comm: syz.2.2372 Not tainted syzkaller #0
[  760.181382][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  760.192247][T12348] Call Trace:
[  760.195645][T12348]  <TASK>
[  760.198591][T12348]  dump_stack_lvl+0x18c/0x250
[  760.203660][T12348]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  760.210034][T12348]  ? show_regs_print_info+0x20/0x20
[  760.215543][T12348]  ? load_image+0x400/0x400
[  760.220158][T12348]  should_fail_ex+0x39d/0x4d0
[  760.224961][T12348]  should_failslab+0x9/0x20
[  760.229584][T12348]  slab_pre_alloc_hook+0x59/0x310
[  760.234667][T12348]  ? sctp_add_bind_addr+0x8c/0x360
[  760.239813][T12348]  __kmem_cache_alloc_node+0x53/0x250
[  760.245309][T12348]  ? sctp_add_bind_addr+0x8c/0x360
[  760.250803][T12348]  kmalloc_trace+0x2a/0xe0
[  760.255256][T12348]  sctp_add_bind_addr+0x8c/0x360
[  760.260365][T12348]  sctp_copy_local_addr_list+0x315/0x4f0
[  760.266114][T12348]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  760.271892][T12348]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  760.278150][T12348]  ? sctp_v4_is_any+0x35/0x60
[  760.283023][T12348]  ? sctp_copy_one_addr+0x8c/0x350
[  760.288138][T12348]  sctp_bind_addr_copy+0xb3/0x3c0
[  760.293253][T12348]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  760.299770][T12348]  sctp_connect_new_asoc+0x2f9/0x6a0
[  760.305146][T12348]  ? __sctp_connect+0xd80/0xd80
[  760.310002][T12348]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  760.315920][T12348]  ? security_sctp_bind_connect+0x89/0xb0
[  760.321843][T12348]  sctp_sendmsg+0x1575/0x28c0
[  760.326537][T12348]  ? sctp_getsockopt+0xb60/0xb60
[  760.331558][T12348]  ? lock_chain_count+0x20/0x20
[  760.336508][T12348]  ? inet_send_prepare+0x260/0x260
[  760.341628][T12348]  ? sctp_getsockopt+0xb60/0xb60
[  760.346655][T12348]  ? inet_send_prepare+0x260/0x260
[  760.351776][T12348]  ____sys_sendmsg+0x5ba/0x960
[  760.356627][T12348]  ? __lock_acquire+0x7d40/0x7d40
[  760.361653][T12348]  ? __asan_memset+0x22/0x40
[  760.366857][T12348]  ? __sys_sendmsg_sock+0x30/0x30
[  760.371986][T12348]  ? __import_iovec+0x5f2/0x850
[  760.376840][T12348]  ? import_iovec+0x73/0xa0
[  760.381782][T12348]  ___sys_sendmsg+0x2a6/0x360
[  760.386546][T12348]  ? __sys_sendmsg+0x2a0/0x2a0
[  760.391444][T12348]  __se_sys_sendmsg+0x1c2/0x2b0
[  760.396856][T12348]  ? __x64_sys_sendmsg+0x80/0x80
[  760.401842][T12348]  ? syscall_enter_from_user_mode+0x2e/0x80
[  760.407856][T12348]  do_syscall_64+0x55/0xa0
[  760.412473][T12348]  ? clear_bhb_loop+0x40/0x90
[  760.417268][T12348]  ? clear_bhb_loop+0x40/0x90
[  760.422220][T12348]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  760.428380][T12348] RIP: 0033:0x7f22bbf9af79
[  760.432845][T12348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.452719][T12348] RSP: 002b:00007f22bcd82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  760.461229][T12348] RAX: ffffffffffffffda RBX: 00007f22bc215fa0 RCX: 00007f22bbf9af79
[  760.469245][T12348] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000005
[  760.477346][T12348] RBP: 00007f22bcd82090 R08: 0000000000000000 R09: 0000000000000000
[  760.485689][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  760.493750][T12348] R13: 00007f22bc216038 R14: 00007f22bc215fa0 R15: 00007ffcc3650a88
[  760.501732][T12348]  </TASK>
[  760.529628][T12351] syz.0.2371[12351] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  760.529776][T12351] syz.0.2371[12351] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  761.874265][ T5808] Bluetooth: hci4: command tx timeout
[  762.498220][T12346] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  762.507539][T12346] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  762.555779][T12349] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2371'.
[  762.585935][T12350] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  762.594556][T12350] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  762.615338][T12351] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2371'.
[  762.637714][T12351] bridge_slave_1: default FDB implementation only supports local addresses
[  763.048463][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  763.162080][T12278] veth0_vlan: entered promiscuous mode
[  763.178742][T12278] veth1_vlan: entered promiscuous mode
[  763.277169][T12278] veth0_macvtap: entered promiscuous mode
[  763.300439][T12278] veth1_macvtap: entered promiscuous mode
[  763.351551][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  763.373019][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.384424][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  763.401916][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.425863][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.470290][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.491850][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.522737][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.571488][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.599462][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.610690][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.626046][T12278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  763.654878][T12278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  763.669016][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.702639][T12278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.712981][T12278] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.724031][T12278] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.733559][T12278] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.428257][T11524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.456685][T11524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.523527][ T8697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.549953][ T8697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.758744][T12404] syzkaller0: entered promiscuous mode
[  767.769871][T12404] syzkaller0: entered allmulticast mode
[  767.994859][T12409] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2393'.
[  768.403194][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  768.413519][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  768.422095][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  768.430414][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  768.438952][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  768.446434][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  768.843586][T12421] chnl_net:caif_netlink_parms(): no params data found
[  769.029489][T12421] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.042097][T12421] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.053277][T12421] bridge_slave_0: entered allmulticast mode
[  769.070926][T12421] bridge_slave_0: entered promiscuous mode
[  769.090772][T12421] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.101480][T12421] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.112784][T12421] bridge_slave_1: entered allmulticast mode
[  769.126072][T12421] bridge_slave_1: entered promiscuous mode
[  769.242767][T12421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.284642][T12421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.369590][T12421] team0: Port device team_slave_0 added
[  769.418768][T12421] team0: Port device team_slave_1 added
[  770.514421][   T51] Bluetooth: hci1: command tx timeout
[  771.200455][T12421] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.222911][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.250849][T12421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.362375][T12421] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.370451][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.403528][T12421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.439099][T12438] netlink: 'syz.3.2400': attribute type 10 has an invalid length.
[  771.448523][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2400'.
[  771.465299][T12438] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  771.483719][T12438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  771.499707][T12447] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2400'.
[  771.553212][T11523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.594729][   T51] Bluetooth: hci1: command tx timeout
[  774.593903][T12421] hsr_slave_0: entered promiscuous mode
[  774.620488][T12421] hsr_slave_1: entered promiscuous mode
[  774.635264][T12421] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  774.642947][T12421] Cannot create hsr debugfs directory
[  774.675348][   T51] Bluetooth: hci1: command tx timeout
[  774.750480][T11523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.871921][T11523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  774.896482][T12469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2410'.
[  775.731247][T12471] FAULT_INJECTION: forcing a failure.
[  775.731247][T12471] name fail_futex, interval 1, probability 0, space 0, times 1
[  775.754336][T12471] CPU: 0 PID: 12471 Comm: syz.3.2410 Not tainted syzkaller #0
[  775.762469][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  775.772638][T12471] Call Trace:
[  775.775931][T12471]  <TASK>
[  775.779071][T12471]  dump_stack_lvl+0x18c/0x250
[  775.783945][T12471]  ? show_regs_print_info+0x20/0x20
[  775.789171][T12471]  ? load_image+0x400/0x400
[  775.793805][T12471]  ? __lock_acquire+0x1347/0x7d40
[  775.798968][T12471]  ? verify_lock_unused+0x140/0x140
[  775.804214][T12471]  should_fail_ex+0x39d/0x4d0
[  775.809769][T12471]  get_futex_key+0x16f/0x1010
[  775.814573][T12471]  ? futex_setup_timer+0xc0/0xc0
[  775.819631][T12471]  futex_wake+0x127/0x4f0
[  775.824168][T12471]  ? futex_wake_mark+0x150/0x150
[  775.829253][T12471]  do_futex+0x35d/0x3e0
[  775.833514][T12471]  ? __might_fault+0xaa/0x120
[  775.838219][T12471]  ? __ia32_sys_get_robust_list+0x110/0x110
[  775.845004][T12471]  ? __might_fault+0xc6/0x120
[  775.849701][T12471]  mm_release+0x184/0x3a0
[  775.854049][T12471]  ? exit_mm_release+0x30/0x30
[  775.858920][T12471]  ? lockdep_hardirqs_on+0x98/0x150
[  775.864231][T12471]  exit_mm+0xa7/0x2c0
[  775.868348][T12471]  ? do_exit+0x2460/0x2460
[  775.872790][T12471]  ? taskstats_exit+0x35e/0x9e0
[  775.877676][T12471]  do_exit+0x8dd/0x2460
[  775.882121][T12471]  ? put_task_struct+0xc0/0xc0
[  775.886906][T12471]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  775.892949][T12471]  ? lock_chain_count+0x20/0x20
[  775.898001][T12471]  ? _raw_spin_lock_irq+0xbb/0xf0
[  775.903060][T12471]  do_group_exit+0x21b/0x2d0
[  775.907689][T12471]  ? lockdep_hardirqs_on+0x98/0x150
[  775.912940][T12471]  get_signal+0x12fc/0x13f0
[  775.917757][T12471]  arch_do_signal_or_restart+0xc2/0x800
[  775.923681][T12471]  ? get_sigframe_size+0x20/0x20
[  775.929087][T12471]  ? perf_trace_preemptirq_template+0xac/0x330
[  775.935640][T12471]  ? exit_to_user_mode_loop+0x3b/0x110
[  775.941142][T12471]  exit_to_user_mode_loop+0x70/0x110
[  775.946640][T12471]  exit_to_user_mode_prepare+0xee/0x180
[  775.952507][T12471]  syscall_exit_to_user_mode+0x1a/0x50
[  775.958000][T12471]  do_syscall_64+0x61/0xa0
[  775.962446][T12471]  ? clear_bhb_loop+0x40/0x90
[  775.967331][T12471]  ? clear_bhb_loop+0x40/0x90
[  775.972158][T12471]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  775.978172][T12471] RIP: 0033:0x7f70f2d9af79
[  775.982718][T12471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.003741][T12471] RSP: 002b:00007f70f3c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  776.012276][T12471] RAX: fffffffffffffe00 RBX: 00007f70f3016180 RCX: 00007f70f2d9af79
[  776.020360][T12471] RDX: 0000000000010182 RSI: 00002000000005c0 RDI: 0000000000000003
[  776.028435][T12471] RBP: 00007f70f3c27090 R08: 0000000000000000 R09: 0000000000000000
[  776.036544][T12471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.044754][T12471] R13: 00007f70f3016218 R14: 00007f70f3016180 R15: 00007ffe4c9a5b38
[  776.052851][T12471]  </TASK>
[  776.754570][   T51] Bluetooth: hci1: command tx timeout
[  777.029556][T12469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2410'.
[  777.088363][T11523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.283228][T12503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2418'.
[  778.580870][T12503] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2418'.
[  781.250198][T12505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2418'.
[  781.288418][T12506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2418'.
[  782.043067][T12535] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2424'.
[  782.117618][T12421] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  782.278252][T12421] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  782.292087][T12421] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  782.312951][T12421] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  782.483125][T11523] gretap0 (unregistering): left allmulticast mode
[  782.504675][T11523] gretap0 (unregistering): left promiscuous mode
[  782.512570][T11523] Ÿë
: port 1(gretap0) entered disabled state
[  782.558469][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2428'.
[  782.620743][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2428'.
[  782.644710][T12564] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2428'.
[  784.884449][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2428'.
[  784.984351][T12573] tap0: tun_chr_ioctl cmd 1074025698
[  785.199086][T12421] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.558556][T12421] 8021q: adding VLAN 0 to HW filter on device team0
[  785.815797][T12593] netlink: 'syz.1.2434': attribute type 21 has an invalid length.
[  785.851071][T12593] netlink: 'syz.1.2434': attribute type 1 has an invalid length.
[  785.923956][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.931497][T11514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  786.000857][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.008207][T11514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.102240][T11523] veth0_to_team: left allmulticast mode
[  786.133113][T11523] veth0_to_team: left promiscuous mode
[  786.147015][T11523] Ÿë
: port 2(veth0_to_team) entered disabled state
[  786.210756][T11523] hsr_slave_0: left promiscuous mode
[  786.225088][T11523] hsr_slave_1: left promiscuous mode
[  786.233325][T11523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  786.254615][T11523] batman_adv: batadv0: Removing interface: batadv_slave_0
[  786.266233][T11523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  786.284648][T11523] batman_adv: batadv0: Removing interface: batadv_slave_1
[  786.306172][T11523] bridge_slave_0: left allmulticast mode
[  786.319811][T11523] bridge_slave_0: left promiscuous mode
[  786.330970][T11523] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.359620][T11523] veth1_vlan: left promiscuous mode
[  786.365747][T11523] veth0_vlan: left promiscuous mode
[  786.400106][   T51] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  788.589789][T12619] FAULT_INJECTION: forcing a failure.
[  788.589789][T12619] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  788.610522][T12619] CPU: 0 PID: 12619 Comm: syz.0.2440 Not tainted syzkaller #0
[  788.618008][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  788.628219][T12619] Call Trace:
[  788.631598][T12619]  <TASK>
[  788.634531][T12619]  dump_stack_lvl+0x18c/0x250
[  788.639213][T12619]  ? show_regs_print_info+0x20/0x20
[  788.644663][T12619]  ? load_image+0x400/0x400
[  788.649235][T12619]  ? __might_fault+0xaa/0x120
[  788.654189][T12619]  ? __lock_acquire+0x7d40/0x7d40
[  788.659308][T12619]  should_fail_ex+0x39d/0x4d0
[  788.663987][T12619]  _copy_from_user+0x2f/0xe0
[  788.668588][T12619]  ___sys_sendmsg+0x1c7/0x360
[  788.673637][T12619]  ? get_pid_task+0x20/0x1e0
[  788.678303][T12619]  ? __sys_sendmsg+0x2a0/0x2a0
[  788.683101][T12619]  ? __lock_acquire+0x7d40/0x7d40
[  788.688150][T12619]  __se_sys_sendmsg+0x1c2/0x2b0
[  788.693349][T12619]  ? __x64_sys_sendmsg+0x80/0x80
[  788.698395][T12619]  ? lockdep_hardirqs_on+0x98/0x150
[  788.703602][T12619]  do_syscall_64+0x55/0xa0
[  788.708239][T12619]  ? clear_bhb_loop+0x40/0x90
[  788.712925][T12619]  ? clear_bhb_loop+0x40/0x90
[  788.717646][T12619]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  788.723652][T12619] RIP: 0033:0x7fabc699af79
[  788.728064][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  788.748086][T12619] RSP: 002b:00007fabc7856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  788.756584][T12619] RAX: ffffffffffffffda RBX: 00007fabc6c15fa0 RCX: 00007fabc699af79
[  788.764555][T12619] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  788.772620][T12619] RBP: 00007fabc7856090 R08: 0000000000000000 R09: 0000000000000000
[  788.780934][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  788.789027][T12619] R13: 00007fabc6c16038 R14: 00007fabc6c15fa0 R15: 00007ffc5bd54b58
[  788.797003][T12619]  </TASK>
[  789.370976][T11523] team0 (unregistering): Port device team_slave_1 removed
[  789.423489][T11523] team0 (unregistering): Port device C removed
[  789.478288][T11523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.525127][T11523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  789.577190][T11523] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  789.919285][T11523] bond0 (unregistering): Released all slaves
[  790.053554][T12610] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2437'.
[  790.298628][T12627] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2443'.
[  790.676504][T12421] 8021q: adding VLAN 0 to HW filter on device batadv0
[  790.700478][T12641] FAULT_INJECTION: forcing a failure.
[  790.700478][T12641] name failslab, interval 1, probability 0, space 0, times 0
[  790.713696][T12641] CPU: 0 PID: 12641 Comm: syz.1.2448 Not tainted syzkaller #0
[  790.721288][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  790.731803][T12641] Call Trace:
[  790.735186][T12641]  <TASK>
[  790.738156][T12641]  dump_stack_lvl+0x18c/0x250
[  790.742863][T12641]  ? show_regs_print_info+0x20/0x20
[  790.748177][T12641]  ? load_image+0x400/0x400
[  790.752801][T12641]  should_fail_ex+0x39d/0x4d0
[  790.757506][T12641]  should_failslab+0x9/0x20
[  790.762228][T12641]  slab_pre_alloc_hook+0x59/0x310
[  790.767453][T12641]  kmem_cache_alloc_node+0x60/0x320
[  790.772840][T12641]  ? __alloc_skb+0x103/0x2c0
[  790.777445][T12641]  __alloc_skb+0x103/0x2c0
[  790.782047][T12641]  arp_create+0x19f/0x9f0
[  790.786512][T12641]  ? arp_send_dst+0x230/0x230
[  790.791196][T12641]  ? arp_solicit+0x12c/0xe40
[  790.795798][T12641]  arp_send_dst+0xa7/0x230
[  790.800324][T12641]  arp_solicit+0xc02/0xe40
[  790.804769][T12641]  ? arp_solicit+0x12c/0xe40
[  790.809393][T12641]  ? arp_ifdown+0x20/0x20
[  790.813860][T12641]  ? __lock_acquire+0x7d40/0x7d40
[  790.818917][T12641]  ? __skb_clone+0x480/0x790
[  790.823529][T12641]  ? arp_ifdown+0x20/0x20
[  790.827976][T12641]  __neigh_event_send+0xed1/0x1440
[  790.833180][T12641]  neigh_resolve_output+0x19b/0x730
[  790.838416][T12641]  ? ip_finish_output2+0x11e0/0x11e0
[  790.843743][T12641]  ? nf_nat_ipv4_out+0x3af/0x4d0
[  790.848714][T12641]  ? ip_finish_output2+0x457/0x11e0
[  790.854013][T12641]  ip_finish_output2+0xd3a/0x11e0
[  790.859052][T12641]  ? ip_finish_output2+0x457/0x11e0
[  790.864348][T12641]  ? nf_hook+0xa2/0x390
[  790.868514][T12641]  ? __ip_local_out+0x5f0/0x5f0
[  790.873464][T12641]  ? nf_hook+0xa2/0x390
[  790.877630][T12641]  ? ip_fragment+0x210/0x210
[  790.882225][T12641]  ? ip_mc_finish_output+0x250/0x250
[  790.887545][T12641]  ? ip_skb_dst_mtu+0x58a/0x9c0
[  790.892534][T12641]  ? ip_finish_output+0x3ef/0x4c0
[  790.897687][T12641]  ip_output+0x2a1/0x3b0
[  790.901960][T12641]  ? ip_output+0x60/0x3b0
[  790.906298][T12641]  ? __ip_queue_xmit+0x5d/0x1950
[  790.911419][T12641]  __ip_queue_xmit+0x1049/0x1950
[  790.916476][T12641]  ? __ip_queue_xmit+0x5d/0x1950
[  790.921456][T12641]  sctp_packet_transmit+0x247d/0x2a30
[  790.926870][T12641]  sctp_packet_singleton+0x235/0x340
[  790.932831][T12641]  ? sctp_outq_select_transport+0x570/0x570
[  790.938743][T12641]  ? sctp_outq_select_transport+0x45d/0x570
[  790.944680][T12641]  ? sctp_transport_burst_limited+0x197/0x280
[  790.950769][T12641]  sctp_outq_flush+0x50e/0x3120
[  790.955721][T12641]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  790.961624][T12641]  ? _raw_spin_unlock+0x40/0x40
[  790.966567][T12641]  ? rcu_is_watching+0x15/0xb0
[  790.971356][T12641]  ? enqueue_timer+0x23d/0x550
[  790.976250][T12641]  ? sctp_outq_tail+0x8a0/0x8a0
[  790.981224][T12641]  ? sctp_outq_tail+0x604/0x8a0
[  790.986109][T12641]  ? sctp_outq_uncork+0x4d/0xa0
[  790.991016][T12641]  sctp_do_sm+0x533b/0x5a60
[  790.995852][T12641]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  791.001860][T12641]  ? __se_sys_sendmsg+0x1c2/0x2b0
[  791.007203][T12641]  ? __sk_mem_raise_allocated+0xa29/0x1340
[  791.013121][T12641]  sctp_primitive_ASSOCIATE+0x95/0xc0
[  791.018615][T12641]  sctp_sendmsg_to_asoc+0x10a6/0x1830
[  791.024108][T12641]  ? __asan_memcpy+0x40/0x70
[  791.028828][T12641]  ? sctp_assoc_add_peer+0xcf3/0x1390
[  791.034269][T12641]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  791.040316][T12641]  ? __sctp_connect+0xd80/0xd80
[  791.045271][T12641]  ? __local_bh_enable_ip+0x13a/0x1c0
[  791.050647][T12641]  ? _local_bh_enable+0xa0/0xa0
[  791.055510][T12641]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  791.061405][T12641]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  791.067244][T12641]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  791.072920][T12641]  ? security_sctp_bind_connect+0x89/0xb0
[  791.078750][T12641]  sctp_sendmsg+0x1b83/0x28c0
[  791.083449][T12641]  ? sctp_getsockopt+0xb60/0xb60
[  791.088403][T12641]  ? aa_sk_perm+0x83c/0x970
[  791.093205][T12641]  ? aa_af_perm+0x330/0x330
[  791.097782][T12641]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  791.104298][T12641]  ? sock_rps_record_flow+0x19/0x3f0
[  791.109592][T12641]  ? inet_sendmsg+0x7c/0x2f0
[  791.114184][T12641]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  791.119668][T12641]  ? security_socket_sendmsg+0x80/0xa0
[  791.125346][T12641]  ? inet_send_prepare+0x260/0x260
[  791.130471][T12641]  ____sys_sendmsg+0x5ba/0x960
[  791.135591][T12641]  ? __lock_acquire+0x7d40/0x7d40
[  791.140795][T12641]  ? __asan_memset+0x22/0x40
[  791.145578][T12641]  ? __sys_sendmsg_sock+0x30/0x30
[  791.150737][T12641]  ? __import_iovec+0x5f2/0x850
[  791.155633][T12641]  ? import_iovec+0x73/0xa0
[  791.160284][T12641]  ___sys_sendmsg+0x2a6/0x360
[  791.165020][T12641]  ? get_pid_task+0x20/0x1e0
[  791.170045][T12641]  ? __sys_sendmsg+0x2a0/0x2a0
[  791.175030][T12641]  ? __lock_acquire+0x7d40/0x7d40
[  791.180260][T12641]  __se_sys_sendmsg+0x1c2/0x2b0
[  791.185125][T12641]  ? __x64_sys_sendmsg+0x80/0x80
[  791.190180][T12641]  ? lockdep_hardirqs_on+0x98/0x150
[  791.196083][T12641]  do_syscall_64+0x55/0xa0
[  791.200603][T12641]  ? clear_bhb_loop+0x40/0x90
[  791.205369][T12641]  ? clear_bhb_loop+0x40/0x90
[  791.210181][T12641]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.216536][T12641] RIP: 0033:0x7fbb9679af79
[  791.221151][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.242775][T12641] RSP: 002b:00007fbb975b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.251290][T12641] RAX: ffffffffffffffda RBX: 00007fbb96a15fa0 RCX: 00007fbb9679af79
[  791.259553][T12641] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  791.267991][T12641] RBP: 00007fbb975b4090 R08: 0000000000000000 R09: 0000000000000000
[  791.275970][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  791.284134][T12641] R13: 00007fbb96a16038 R14: 00007fbb96a15fa0 R15: 00007ffcd2984ea8
[  791.292399][T12641]  </TASK>
[  791.372336][T12421] veth0_vlan: entered promiscuous mode
[  791.391986][T12421] veth1_vlan: entered promiscuous mode
[  791.425228][T12421] veth0_macvtap: entered promiscuous mode
[  791.436135][T12421] veth1_macvtap: entered promiscuous mode
[  791.458804][T12643] netlink: 'syz.3.2449': attribute type 21 has an invalid length.
[  791.467970][T12643] netlink: 'syz.3.2449': attribute type 1 has an invalid length.
[  791.516632][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.541634][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.554247][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.570910][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.581263][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.652058][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.676110][T12421] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.702756][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.723727][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.744617][T12652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'.
[  791.759557][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.771662][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.785819][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.797103][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.808954][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.819574][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.831312][T12421] batman_adv: batadv0: Interface activated: batadv_slave_1
[  791.842387][T12652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'.
[  791.862136][T12421] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.871940][T12421] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.890263][T12421] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.902560][T12421] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.913301][T12653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'.
[  791.948999][T12652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2452'.
[  792.040631][T11525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.057622][T11525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.122125][T12660] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.2454'.
[  792.122414][ T8697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  792.168314][ T8697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.476930][T12677] netlink: 'syz.2.2459': attribute type 21 has an invalid length.
[  792.494488][T12677] netlink: 'syz.2.2459': attribute type 1 has an invalid length.
[  792.869539][T12680] netlink: 'syz.0.2468': attribute type 21 has an invalid length.
[  792.914709][T12680] netlink: 'syz.0.2468': attribute type 1 has an invalid length.
[  793.012958][T12686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  793.068470][T12686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  793.088988][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  793.100674][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  793.109350][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  793.118011][T12691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2463'.
[  793.127466][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  793.141894][ T5808] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  793.151967][T12692] netlink: 'syz.3.2464': attribute type 3 has an invalid length.
[  793.160314][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  793.186465][T12692] netlink: 'syz.3.2464': attribute type 1 has an invalid length.
[  793.338793][T11514] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.455401][T11514] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.601663][T11514] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.622430][T12704] netlink: 'syz.2.2469': attribute type 1 has an invalid length.
[  793.639495][T12710] netlink: 'syz.0.2471': attribute type 10 has an invalid length.
[  793.674789][T12710] macvlan0: entered promiscuous mode
[  793.680442][T12710] macvlan0: entered allmulticast mode
[  793.691527][T12710] veth1_vlan: entered allmulticast mode
[  793.700808][T12710] team0: Port device macvlan0 added
[  793.812381][T11514] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  794.078979][T12688] chnl_net:caif_netlink_parms(): no params data found
[  794.420188][T12688] bridge0: port 1(bridge_slave_0) entered blocking state
[  794.427828][T12688] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.443713][T12688] bridge_slave_0: entered allmulticast mode
[  794.452546][T12688] bridge_slave_0: entered promiscuous mode
[  794.463075][T12688] bridge0: port 2(bridge_slave_1) entered blocking state
[  794.471299][T12688] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.479036][T12688] bridge_slave_1: entered allmulticast mode
[  794.487116][T12688] bridge_slave_1: entered promiscuous mode
[  794.563472][T12688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  794.710291][T12688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  794.741657][T12738] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  795.049159][T12688] team0: Port device team_slave_0 added
[  795.179776][T12688] team0: Port device team_slave_1 added
[  795.235857][ T5808] Bluetooth: hci2: command tx timeout
[  795.263019][T12757] __nla_validate_parse: 8 callbacks suppressed
[  795.263036][T12757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2483'.
[  795.364486][T12757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2483'.
[  795.453008][T12688] batman_adv: batadv0: Adding interface: batadv_slave_0
[  795.461616][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  795.505583][T12688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  795.519343][T12762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2483'.
[  795.537327][T12757] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2483'.
[  795.631085][T12688] batman_adv: batadv0: Adding interface: batadv_slave_1
[  795.660361][T12688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  795.694854][T12688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  795.912360][T12688] hsr_slave_0: entered promiscuous mode
[  795.920400][T12688] hsr_slave_1: entered promiscuous mode
[  795.931483][T12688] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  795.944651][T12688] Cannot create hsr debugfs directory
[  795.953394][T12774] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2487'.
[  796.516170][T11514] veth0_to_team: left allmulticast mode
[  796.521802][T11514] veth0_to_team: left promiscuous mode
[  796.549030][T12791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2492'.
[  796.560810][T11514] Ÿë
: port 1(veth0_to_team) entered disabled state
[  796.647077][T11514] hsr_slave_0: left promiscuous mode
[  796.665122][T11514] hsr_slave_1: left promiscuous mode
[  796.682652][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  796.702065][T11514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  796.711685][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  796.730516][T11514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  796.754064][T11514] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  796.762482][T11514] batman_adv: batadv0: Removing interface: virt_wifi0
[  796.808165][T11514] bridge0: port 3(`) entered disabled state
[  796.829971][T11514] bridge_slave_1: left allmulticast mode
[  796.841625][T11514] bridge_slave_1: left promiscuous mode
[  796.854507][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.878298][T11514] bridge_slave_0: left allmulticast mode
[  796.886889][T11514] bridge_slave_0: left promiscuous mode
[  796.899649][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.986599][T11514] veth1_macvtap: left allmulticast mode
[  796.992510][T11514] veth1_macvtap: left promiscuous mode
[  796.999670][T11514] veth1_vlan: left promiscuous mode
[  797.315016][ T5808] Bluetooth: hci2: command tx timeout
[  797.947912][T12818] validate_nla: 1 callbacks suppressed
[  797.947947][T12818] netlink: 'syz.2.2499': attribute type 3 has an invalid length.
[  797.963041][T12818] netlink: 'syz.2.2499': attribute type 1 has an invalid length.
[  797.971783][T12818] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2499'.
[  798.277604][T11514] team_slave_1 (unregistering): left promiscuous mode
[  798.286370][T11514] team_slave_1 (unregistering): left allmulticast mode
[  798.298225][T11514] ` (unregistering): Port device team_slave_1 removed
[  798.342060][T11514] team_slave_0 (unregistering): left promiscuous mode
[  798.350804][T11514] team_slave_0 (unregistering): left allmulticast mode
[  798.363110][T11514] ` (unregistering): Port device team_slave_0 removed
[  798.899682][T12791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2492'.
[  798.933184][T12813] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2497'.
[  799.083535][T12824] FAULT_INJECTION: forcing a failure.
[  799.083535][T12824] name failslab, interval 1, probability 0, space 0, times 0
[  799.096381][T12824] CPU: 0 PID: 12824 Comm: syz.2.2501 Not tainted syzkaller #0
[  799.104134][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  799.114294][T12824] Call Trace:
[  799.117593][T12824]  <TASK>
[  799.120521][T12824]  dump_stack_lvl+0x18c/0x250
[  799.125214][T12824]  ? show_regs_print_info+0x20/0x20
[  799.130709][T12824]  ? load_image+0x400/0x400
[  799.135297][T12824]  ? netdev_core_pick_tx+0x340/0x340
[  799.140664][T12824]  should_fail_ex+0x39d/0x4d0
[  799.145438][T12824]  should_failslab+0x9/0x20
[  799.150065][T12824]  slab_pre_alloc_hook+0x59/0x310
[  799.155280][T12824]  kmem_cache_alloc+0x5a/0x2d0
[  799.160140][T12824]  ? skb_clone+0x1eb/0x370
[  799.164551][T12824]  skb_clone+0x1eb/0x370
[  799.169048][T12824]  bpf_clone_redirect+0x167/0x4a0
[  799.174106][T12824]  bpf_prog_6893982b85ceadf7+0x5e/0x63
[  799.179578][T12824]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  799.185589][T12824]  ? lock_chain_count+0x20/0x20
[  799.190544][T12824]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  799.196625][T12824]  ? lockdep_softirqs_on+0x580/0x580
[  799.202313][T12824]  ? lock_chain_count+0x20/0x20
[  799.207705][T12824]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  799.214043][T12824]  ? __local_bh_disable_ip+0x108/0x1a0
[  799.219596][T12824]  ? __cant_sleep+0x220/0x220
[  799.224271][T12824]  ? __local_bh_enable_ip+0x13a/0x1c0
[  799.229641][T12824]  ? _local_bh_enable+0xa0/0xa0
[  799.234577][T12824]  ? bpf_test_timer_continue+0x135/0x380
[  799.240205][T12824]  ? bpf_test_run+0x174/0x870
[  799.244990][T12824]  bpf_test_run+0x2df/0x870
[  799.249674][T12824]  ? bpf_test_run+0x174/0x870
[  799.254369][T12824]  ? convert___skb_to_skb+0x590/0x590
[  799.259936][T12824]  ? eth_get_headlen+0x210/0x210
[  799.264978][T12824]  ? slab_build_skb+0x25f/0x3f0
[  799.269916][T12824]  ? convert___skb_to_skb+0x3d/0x590
[  799.275300][T12824]  bpf_prog_test_run_skb+0xad2/0x12b0
[  799.280789][T12824]  ? cpu_online+0x60/0x60
[  799.285227][T12824]  bpf_prog_test_run+0x321/0x390
[  799.290255][T12824]  __sys_bpf+0x49d/0x890
[  799.294583][T12824]  ? bpf_link_show_fdinfo+0x390/0x390
[  799.300131][T12824]  ? lock_chain_count+0x20/0x20
[  799.305027][T12824]  __x64_sys_bpf+0x7c/0x90
[  799.309457][T12824]  do_syscall_64+0x55/0xa0
[  799.313885][T12824]  ? clear_bhb_loop+0x40/0x90
[  799.318564][T12824]  ? clear_bhb_loop+0x40/0x90
[  799.323260][T12824]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  799.329540][T12824] RIP: 0033:0x7ff53bb9af79
[  799.333956][T12824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  799.353737][T12824] RSP: 002b:00007ff53caf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  799.362152][T12824] RAX: ffffffffffffffda RBX: 00007ff53be15fa0 RCX: 00007ff53bb9af79
[  799.370202][T12824] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a
[  799.378441][T12824] RBP: 00007ff53caf0090 R08: 0000000000000000 R09: 0000000000000000
[  799.386510][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  799.394654][T12824] R13: 00007ff53be16038 R14: 00007ff53be15fa0 R15: 00007ffe9ae27708
[  799.402807][T12824]  </TASK>
[  799.437454][ T5808] Bluetooth: hci2: command tx timeout
[  799.589654][T12826] netlink: 'syz.0.2502': attribute type 21 has an invalid length.
[  800.106499][T12688] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  800.135209][T12688] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  800.173345][T12688] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  800.185265][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2507'.
[  800.205270][T12845] netlink: 'syz.3.2505': attribute type 21 has an invalid length.
[  800.227337][T12845] netlink: 'syz.3.2505': attribute type 1 has an invalid length.
[  800.240810][T12688] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  800.615792][T12865] syzkaller0: entered promiscuous mode
[  800.621415][T12865] syzkaller0: entered allmulticast mode
[  800.738103][T12688] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.103277][T12883] __nla_validate_parse: 3 callbacks suppressed
[  801.103295][T12883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2515'.
[  801.484338][ T5808] Bluetooth: hci2: command tx timeout
[  802.956363][T12883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2515'.
[  802.968231][T12885] netlink: 'syz.0.2517': attribute type 21 has an invalid length.
[  802.977277][T12885] netlink: 'syz.0.2517': attribute type 1 has an invalid length.
[  803.045207][T12688] 8021q: adding VLAN 0 to HW filter on device team0
[  803.069442][T11524] bridge0: port 1(bridge_slave_0) entered blocking state
[  803.077681][T11524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  803.125819][T11524] bridge0: port 2(bridge_slave_1) entered blocking state
[  803.133004][T11524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.265216][T12892] netlink: 'syz.0.2525': attribute type 3 has an invalid length.
[  803.273567][T12892] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2525'.
[  803.285648][T12892] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  803.663276][T12911] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2521'.
[  803.948251][T12688] 8021q: adding VLAN 0 to HW filter on device batadv0
[  804.014893][T12922] netlink: 'syz.2.2526': attribute type 21 has an invalid length.
[  804.029074][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2527'.
[  804.054288][T12922] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  804.095083][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2527'.
[  804.142166][T12688] veth0_vlan: entered promiscuous mode
[  804.189530][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2527'.
[  804.231738][T12688] veth1_vlan: entered promiscuous mode
[  804.310895][T12688] veth0_macvtap: entered promiscuous mode
[  804.346458][T12688] veth1_macvtap: entered promiscuous mode
[  804.389426][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.407747][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.419353][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.435911][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.449589][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.460863][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.477979][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  804.490968][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.519616][T12688] batman_adv: batadv0: Interface activated: batadv_slave_0
[  804.555416][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.572228][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.584157][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.595872][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.606855][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.617733][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.628309][T12688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  804.639222][T12688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  804.650882][T12688] batman_adv: batadv0: Interface activated: batadv_slave_1
[  804.672216][T12688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  804.682297][T12688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  804.704246][T12688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  804.713081][T12688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  804.844485][T11523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.852613][T11523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  804.901689][T11514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  804.911568][T11514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  806.316790][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  806.326235][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  806.338054][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  806.349534][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  806.358253][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  806.367817][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  806.794488][T12974] chnl_net:caif_netlink_parms(): no params data found
[  807.113451][T12974] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.128924][T12974] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.139440][T12974] bridge_slave_0: entered allmulticast mode
[  807.174313][T12974] bridge_slave_0: entered promiscuous mode
[  807.197335][T12974] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.220892][T12974] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.249172][T12974] bridge_slave_1: entered allmulticast mode
[  807.268959][T12974] bridge_slave_1: entered promiscuous mode
[  807.342103][T12974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.367964][T12974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  807.450099][T12974] team0: Port device team_slave_0 added
[  807.470274][T12974] team0: Port device team_slave_1 added
[  807.533713][T12974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  807.551043][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  807.587247][T12974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  807.609407][T12974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  807.620377][T12974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  807.684173][T12974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.437204][   T51] Bluetooth: hci3: command tx timeout
[  808.477632][T13000] C: renamed from team_slave_0 (while UP)
[  808.511559][T13000] netlink: 'syz.1.2533': attribute type 3 has an invalid length.
[  808.551120][T13000] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2533'.
[  808.575156][T13000] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  808.604022][T12974] hsr_slave_0: entered promiscuous mode
[  808.629043][T12974] hsr_slave_1: entered promiscuous mode
[  808.644882][T12974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  808.658233][T12974] Cannot create hsr debugfs directory
[  808.752123][T13012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2539'.
[  808.787393][T11514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.884642][T13012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2539'.
[  808.895007][T13015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2539'.
[  809.038864][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  809.045318][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  809.775844][T11514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.951868][T11514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.089622][T13030] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2543'.
[  810.143159][T11514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.267079][T13038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2545'.
[  810.524885][   T51] Bluetooth: hci3: command tx timeout
[  810.577393][T13047] C: renamed from team_slave_0 (while UP)
[  810.671353][T13047] netlink: 'syz.3.2549': attribute type 3 has an invalid length.
[  810.711294][T13047] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2549'.
[  810.754286][T13047] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  810.898572][T13056] FAULT_INJECTION: forcing a failure.
[  810.898572][T13056] name failslab, interval 1, probability 0, space 0, times 0
[  810.957434][T13056] CPU: 0 PID: 13056 Comm: syz.2.2550 Not tainted syzkaller #0
[  810.964957][T13056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  810.975288][T13056] Call Trace:
[  810.978572][T13056]  <TASK>
[  810.981592][T13056]  dump_stack_lvl+0x18c/0x250
[  810.986378][T13056]  ? show_regs_print_info+0x20/0x20
[  810.991833][T13056]  ? load_image+0x400/0x400
[  810.996516][T13056]  ? __might_sleep+0xe0/0xe0
[  811.001188][T13056]  ? __lock_acquire+0x7d40/0x7d40
[  811.006295][T13056]  should_fail_ex+0x39d/0x4d0
[  811.010976][T13056]  should_failslab+0x9/0x20
[  811.015677][T13056]  slab_pre_alloc_hook+0x59/0x310
[  811.020739][T13056]  ? __lock_acquire+0x7d40/0x7d40
[  811.025788][T13056]  ? kvmalloc_node+0x70/0x180
[  811.030577][T13056]  ? kvmalloc_node+0x70/0x180
[  811.035269][T13056]  __kmem_cache_alloc_node+0x53/0x250
[  811.040651][T13056]  ? kvmalloc_node+0x70/0x180
[  811.045394][T13056]  __kmalloc_node+0xa4/0x230
[  811.050011][T13056]  kvmalloc_node+0x70/0x180
[  811.054558][T13056]  bpf_test_run_xdp_live+0x1c2/0x1b20
[  811.059953][T13056]  ? 0xffffffffa00042c0
[  811.064112][T13056]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  811.070180][T13056]  ? 0xffffffffa00042c0
[  811.074348][T13056]  ? xdp_convert_md_to_buff+0x330/0x330
[  811.079945][T13056]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  811.086363][T13056]  ? _copy_from_user+0xa5/0xe0
[  811.091125][T13056]  ? bpf_test_init+0x119/0x140
[  811.095907][T13056]  ? xdp_convert_md_to_buff+0x5b/0x330
[  811.101454][T13056]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  811.106937][T13056]  ? dev_put+0x80/0x80
[  811.111012][T13056]  ? dev_put+0x80/0x80
[  811.115081][T13056]  bpf_prog_test_run+0x321/0x390
[  811.120105][T13056]  __sys_bpf+0x49d/0x890
[  811.124345][T13056]  ? bpf_link_show_fdinfo+0x390/0x390
[  811.129721][T13056]  ? lock_chain_count+0x20/0x20
[  811.134747][T13056]  __x64_sys_bpf+0x7c/0x90
[  811.139164][T13056]  do_syscall_64+0x55/0xa0
[  811.143572][T13056]  ? clear_bhb_loop+0x40/0x90
[  811.148248][T13056]  ? clear_bhb_loop+0x40/0x90
[  811.152950][T13056]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  811.158856][T13056] RIP: 0033:0x7ff53bb9af79
[  811.163466][T13056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.184137][T13056] RSP: 002b:00007ff53caf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  811.192946][T13056] RAX: ffffffffffffffda RBX: 00007ff53be15fa0 RCX: 00007ff53bb9af79
[  811.201094][T13056] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  811.210019][T13056] RBP: 00007ff53caf0090 R08: 0000000000000000 R09: 0000000000000000
[  811.218349][T13056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.226526][T13056] R13: 00007ff53be16038 R14: 00007ff53be15fa0 R15: 00007ffe9ae27708
[  811.234682][T13056]  </TASK>
[  811.589058][T13072] FAULT_INJECTION: forcing a failure.
[  811.589058][T13072] name failslab, interval 1, probability 0, space 0, times 0
[  811.602042][T13072] CPU: 0 PID: 13072 Comm: syz.3.2553 Not tainted syzkaller #0
[  811.609977][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  811.620320][T13072] Call Trace:
[  811.623607][T13072]  <TASK>
[  811.626540][T13072]  dump_stack_lvl+0x18c/0x250
[  811.631234][T13072]  ? show_regs_print_info+0x20/0x20
[  811.636700][T13072]  ? load_image+0x400/0x400
[  811.641201][T13072]  ? __might_sleep+0xe0/0xe0
[  811.645798][T13072]  ? __lock_acquire+0x7d40/0x7d40
[  811.650827][T13072]  ? perf_trace_lock+0xfc/0x3b0
[  811.655713][T13072]  should_fail_ex+0x39d/0x4d0
[  811.660393][T13072]  should_failslab+0x9/0x20
[  811.664900][T13072]  slab_pre_alloc_hook+0x59/0x310
[  811.670032][T13072]  ? __get_vm_area_node+0x125/0x370
[  811.675245][T13072]  __kmem_cache_alloc_node+0x53/0x250
[  811.680748][T13072]  ? __get_vm_area_node+0x125/0x370
[  811.685955][T13072]  kmalloc_node_trace+0x26/0xe0
[  811.690987][T13072]  __get_vm_area_node+0x125/0x370
[  811.696186][T13072]  __vmalloc_node_range+0x36e/0x1330
[  811.701557][T13072]  ? netlink_sendmsg+0x602/0xbf0
[  811.706589][T13072]  ? netlink_insert+0x109f/0x13a0
[  811.711716][T13072]  ? netlink_data_ready+0x10/0x10
[  811.716743][T13072]  ? free_vm_area+0x50/0x50
[  811.721334][T13072]  ? netlink_sendmsg+0x602/0xbf0
[  811.726441][T13072]  vmalloc+0x79/0x90
[  811.730376][T13072]  ? netlink_sendmsg+0x602/0xbf0
[  811.735326][T13072]  netlink_sendmsg+0x602/0xbf0
[  811.740123][T13072]  ? netlink_getsockopt+0x590/0x590
[  811.745434][T13072]  ? aa_sock_msg_perm+0x94/0x150
[  811.750475][T13072]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  811.755762][T13072]  ? security_socket_sendmsg+0x80/0xa0
[  811.761219][T13072]  ? netlink_getsockopt+0x590/0x590
[  811.766446][T13072]  ____sys_sendmsg+0x5ba/0x960
[  811.771603][T13072]  ? __asan_memset+0x22/0x40
[  811.776233][T13072]  ? __sys_sendmsg_sock+0x30/0x30
[  811.781281][T13072]  ? __import_iovec+0x3fa/0x850
[  811.786340][T13072]  ? import_iovec+0x73/0xa0
[  811.790957][T13072]  ___sys_sendmsg+0x2a6/0x360
[  811.795812][T13072]  ? __sys_sendmsg+0x2a0/0x2a0
[  811.800701][T13072]  ? __lock_acquire+0x7d40/0x7d40
[  811.805776][T13072]  __se_sys_sendmsg+0x1c2/0x2b0
[  811.810687][T13072]  ? __x64_sys_sendmsg+0x80/0x80
[  811.815751][T13072]  ? lockdep_hardirqs_on+0x98/0x150
[  811.821110][T13072]  do_syscall_64+0x55/0xa0
[  811.825802][T13072]  ? clear_bhb_loop+0x40/0x90
[  811.830486][T13072]  ? clear_bhb_loop+0x40/0x90
[  811.835250][T13072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  811.841175][T13072] RIP: 0033:0x7f70f2d9af79
[  811.845604][T13072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.865715][T13072] RSP: 002b:00007f70f3c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  811.874232][T13072] RAX: ffffffffffffffda RBX: 00007f70f3015fa0 RCX: 00007f70f2d9af79
[  811.882472][T13072] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  811.890440][T13072] RBP: 00007f70f3c69090 R08: 0000000000000000 R09: 0000000000000000
[  811.898525][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.906596][T13072] R13: 00007f70f3016038 R14: 00007f70f3015fa0 R15: 00007ffe4c9a5b38
[  811.914598][T13072]  </TASK>
[  811.964629][T13072] syz.3.2553: vmalloc error: size 65088, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  812.016449][T13072] CPU: 1 PID: 13072 Comm: syz.3.2553 Not tainted syzkaller #0
[  812.024141][T13072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  812.034221][T13072] Call Trace:
[  812.037669][T13072]  <TASK>
[  812.040710][T13072]  dump_stack_lvl+0x18c/0x250
[  812.045508][T13072]  ? show_regs_print_info+0x20/0x20
[  812.050815][T13072]  ? load_image+0x400/0x400
[  812.055355][T13072]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  812.061973][T13072]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  812.068673][T13072]  warn_alloc+0x246/0x340
[  812.073026][T13072]  ? __get_vm_area_node+0x125/0x370
[  812.078426][T13072]  ? zone_watermark_ok_safe+0x230/0x230
[  812.084099][T13072]  ? rcu_is_watching+0x15/0xb0
[  812.088960][T13072]  ? __get_vm_area_node+0x356/0x370
[  812.094290][T13072]  __vmalloc_node_range+0x393/0x1330
[  812.099869][T13072]  ? netlink_insert+0x109f/0x13a0
[  812.105108][T13072]  ? netlink_data_ready+0x10/0x10
[  812.110154][T13072]  ? free_vm_area+0x50/0x50
[  812.114687][T13072]  ? netlink_sendmsg+0x602/0xbf0
[  812.119745][T13072]  vmalloc+0x79/0x90
[  812.123747][T13072]  ? netlink_sendmsg+0x602/0xbf0
[  812.128931][T13072]  netlink_sendmsg+0x602/0xbf0
[  812.133916][T13072]  ? netlink_getsockopt+0x590/0x590
[  812.139319][T13072]  ? aa_sock_msg_perm+0x94/0x150
[  812.144281][T13072]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  812.149775][T13072]  ? security_socket_sendmsg+0x80/0xa0
[  812.155382][T13072]  ? netlink_getsockopt+0x590/0x590
[  812.160600][T13072]  ____sys_sendmsg+0x5ba/0x960
[  812.165437][T13072]  ? __asan_memset+0x22/0x40
[  812.170160][T13072]  ? __sys_sendmsg_sock+0x30/0x30
[  812.175315][T13072]  ? __import_iovec+0x3fa/0x850
[  812.180313][T13072]  ? import_iovec+0x73/0xa0
[  812.184845][T13072]  ___sys_sendmsg+0x2a6/0x360
[  812.189706][T13072]  ? __sys_sendmsg+0x2a0/0x2a0
[  812.194771][T13072]  ? __lock_acquire+0x7d40/0x7d40
[  812.199852][T13072]  __se_sys_sendmsg+0x1c2/0x2b0
[  812.204719][T13072]  ? __x64_sys_sendmsg+0x80/0x80
[  812.210036][T13072]  ? lockdep_hardirqs_on+0x98/0x150
[  812.215333][T13072]  do_syscall_64+0x55/0xa0
[  812.219757][T13072]  ? clear_bhb_loop+0x40/0x90
[  812.224624][T13072]  ? clear_bhb_loop+0x40/0x90
[  812.229339][T13072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  812.235295][T13072] RIP: 0033:0x7f70f2d9af79
[  812.239912][T13072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  812.259634][T13072] RSP: 002b:00007f70f3c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  812.268121][T13072] RAX: ffffffffffffffda RBX: 00007f70f3015fa0 RCX: 00007f70f2d9af79
[  812.276396][T13072] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006
[  812.284389][T13072] RBP: 00007f70f3c69090 R08: 0000000000000000 R09: 0000000000000000
[  812.292873][T13072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  812.301039][T13072] R13: 00007f70f3016038 R14: 00007f70f3015fa0 R15: 00007ffe4c9a5b38
[  812.309133][T13072]  </TASK>
[  812.437213][T13072] Mem-Info:
[  812.440522][T13072] active_anon:15022 inactive_anon:0 isolated_anon:0
[  812.440522][T13072]  active_file:19067 inactive_file:40113 isolated_file:0
[  812.440522][T13072]  unevictable:768 dirty:351 writeback:0
[  812.440522][T13072]  slab_reclaimable:10212 slab_unreclaimable:99978
[  812.440522][T13072]  mapped:30955 shmem:7632 pagetables:602
[  812.440522][T13072]  sec_pagetables:0 bounce:0
[  812.440522][T13072]  kernel_misc_reclaimable:0
[  812.440522][T13072]  free:1331685 free_pcp:7934 free_cma:0
[  812.463538][T12974] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  812.510987][T12974] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  812.542995][T13072] Node 0 active_anon:60688kB inactive_anon:0kB active_file:76268kB inactive_file:160244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124320kB dirty:1404kB writeback:0kB shmem:29392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12304kB pagetables:2508kB sec_pagetables:0kB all_unreclaimable? no
[  812.584261][T13072] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  812.619526][   T51] Bluetooth: hci3: command tx timeout
[  812.639440][T13072] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  812.668679][T13072] lowmem_reserve[]: 0 2521 2522 2522 2522
[  812.674917][T13072] Node 0 DMA32 free:1418992kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:62248kB inactive_anon:0kB active_file:76268kB inactive_file:159420kB unevictable:1536kB writepending:1400kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:10876kB local_pcp:7528kB free_cma:0kB
[  812.707557][T13072] lowmem_reserve[]: 0 0 0 0 0
[  812.712338][T13072] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  812.742296][T13072] lowmem_reserve[]: 0 0 0 0 0
[  812.747497][T13072] Node 1 Normal free:3889628kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21760kB local_pcp:6688kB free_cma:0kB
[  812.784563][T13072] lowmem_reserve[]: 0 0 0 0 0
[  812.790236][T13072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  812.814271][T13072] Node 0 DMA32: 438*4kB (UE) 665*8kB (UME) 540*16kB (UME) 1457*32kB (UME) 730*64kB (UME) 90*128kB (UME) 260*256kB (UM) 180*512kB (UME) 60*1024kB (UM) 32*2048kB (UME) 247*4096kB (UM) = 1417984kB
[  812.845007][T13072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  812.858079][T13072] Node 1 Normal: 221*4kB (UE) 43*8kB (UME) 27*16kB (UME) 41*32kB (UME) 15*64kB (UE) 9*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3889628kB
[  812.875763][T13072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  812.908971][T13072] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  812.940247][T13072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  812.950629][T13072] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  812.971160][T13072] 68337 total pagecache pages
[  812.983056][T13079] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2554'.
[  812.993544][T13072] 0 pages in swap cache
[  812.999549][T13072] Free swap  = 124996kB
[  813.003924][T13072] Total swap = 124996kB
[  813.008752][T13072] 2097051 pages RAM
[  813.012830][T13072] 0 pages HighMem/MovableOnly
[  813.018328][T13072] 416922 pages reserved
[  813.022784][T13072] 0 pages cma reserved
[  813.022780][T13082] tap0: tun_chr_ioctl cmd 1074025698
[  813.062969][T12974] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  813.076142][T12974] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  814.674290][   T51] Bluetooth: hci3: command tx timeout
[  816.387240][T12974] 8021q: adding VLAN 0 to HW filter on device bond0
[  816.428324][T13114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2560'.
[  816.436064][T12974] 8021q: adding VLAN 0 to HW filter on device team0
[  816.454769][T13116] FAULT_INJECTION: forcing a failure.
[  816.454769][T13116] name failslab, interval 1, probability 0, space 0, times 0
[  816.482836][T13116] CPU: 0 PID: 13116 Comm: syz.2.2561 Not tainted syzkaller #0
[  816.490435][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  816.500509][T13116] Call Trace:
[  816.503863][T13116]  <TASK>
[  816.506816][T13116]  dump_stack_lvl+0x18c/0x250
[  816.511594][T13116]  ? sctp_sendmsg+0x1575/0x28c0
[  816.516472][T13116]  ? ___sys_sendmsg+0x2a6/0x360
[  816.521348][T13116]  ? show_regs_print_info+0x20/0x20
[  816.526571][T13116]  ? load_image+0x400/0x400
[  816.531092][T13116]  should_fail_ex+0x39d/0x4d0
[  816.535788][T13116]  should_failslab+0x9/0x20
[  816.540498][T13116]  slab_pre_alloc_hook+0x59/0x310
[  816.545538][T13116]  ? sctp_add_bind_addr+0x8c/0x360
[  816.550643][T13116]  __kmem_cache_alloc_node+0x53/0x250
[  816.556014][T13116]  ? sctp_add_bind_addr+0x8c/0x360
[  816.561202][T13116]  kmalloc_trace+0x2a/0xe0
[  816.565876][T13116]  sctp_add_bind_addr+0x8c/0x360
[  816.570808][T13116]  sctp_copy_local_addr_list+0x315/0x4f0
[  816.576473][T13116]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  816.582299][T13116]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  816.588375][T13116]  ? sctp_v6_is_any+0x64/0x70
[  816.593212][T13116]  ? sctp_copy_one_addr+0x8c/0x350
[  816.598457][T13116]  sctp_bind_addr_copy+0xb3/0x3c0
[  816.603586][T13116]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  816.610144][T13116]  sctp_connect_new_asoc+0x2f9/0x6a0
[  816.615448][T13116]  ? __sctp_connect+0xd80/0xd80
[  816.620319][T13116]  ? __local_bh_enable_ip+0x13a/0x1c0
[  816.625892][T13116]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  816.631613][T13116]  ? security_sctp_bind_connect+0x89/0xb0
[  816.637504][T13116]  sctp_sendmsg+0x1575/0x28c0
[  816.642231][T13116]  ? sctp_getsockopt+0xb60/0xb60
[  816.647200][T13116]  ? aa_sk_perm+0x83c/0x970
[  816.651748][T13116]  ? aa_af_perm+0x330/0x330
[  816.656434][T13116]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  816.662887][T13116]  ? sock_rps_record_flow+0x19/0x3f0
[  816.668273][T13116]  ? inet_sendmsg+0xe9/0x2f0
[  816.672866][T13116]  ? inet_send_prepare+0x260/0x260
[  816.678060][T13116]  ____sys_sendmsg+0x5ba/0x960
[  816.682855][T13116]  ? __lock_acquire+0x7d40/0x7d40
[  816.687908][T13116]  ? __asan_memset+0x22/0x40
[  816.692505][T13116]  ? __sys_sendmsg_sock+0x30/0x30
[  816.697639][T13116]  ? __import_iovec+0x5f2/0x850
[  816.702561][T13116]  ? import_iovec+0x73/0xa0
[  816.707263][T13116]  ___sys_sendmsg+0x2a6/0x360
[  816.712218][T13116]  ? get_pid_task+0x20/0x1e0
[  816.716878][T13116]  ? __sys_sendmsg+0x2a0/0x2a0
[  816.721858][T13116]  ? __lock_acquire+0x7d40/0x7d40
[  816.726919][T13116]  __se_sys_sendmsg+0x1c2/0x2b0
[  816.732378][T13116]  ? __x64_sys_sendmsg+0x80/0x80
[  816.737529][T13116]  ? lockdep_hardirqs_on+0x98/0x150
[  816.742921][T13116]  do_syscall_64+0x55/0xa0
[  816.747516][T13116]  ? clear_bhb_loop+0x40/0x90
[  816.752189][T13116]  ? clear_bhb_loop+0x40/0x90
[  816.756861][T13116]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  816.762843][T13116] RIP: 0033:0x7ff53bb9af79
[  816.767252][T13116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  816.787080][T13116] RSP: 002b:00007ff53caf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  816.795561][T13116] RAX: ffffffffffffffda RBX: 00007ff53be15fa0 RCX: 00007ff53bb9af79
[  816.803719][T13116] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000003
[  816.811773][T13116] RBP: 00007ff53caf0090 R08: 0000000000000000 R09: 0000000000000000
[  816.819761][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  816.827752][T13116] R13: 00007ff53be16038 R14: 00007ff53be15fa0 R15: 00007ffe9ae27708
[  816.835828][T13116]  </TASK>
[  816.856143][T13121] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2562'.
[  817.032207][T13118] netlink: 'syz.1.2562': attribute type 10 has an invalid length.
[  817.161426][T13118] team0: Port device dummy0 added
[  817.179221][T11517] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.186628][T11517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.231363][T13128] netlink: 'syz.1.2562': attribute type 10 has an invalid length.
[  817.444891][T13131] netlink: 'syz.2.2565': attribute type 3 has an invalid length.
[  817.461920][T13131] netlink: 'syz.2.2565': attribute type 1 has an invalid length.
[  817.487906][T13131] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2565'.
[  817.921245][T13118] syz.1.2562 (13118) used greatest stack depth: 18952 bytes left
[  818.114273][T13128] team0: Port device dummy0 removed
[  818.149431][T11517] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.156635][T11517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.587244][T13148] netlink: 'syz.2.2572': attribute type 3 has an invalid length.
[  818.597765][T13148] netlink: 'syz.2.2572': attribute type 1 has an invalid length.
[  818.606228][T13148] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.2572'.
[  821.690877][T12974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  821.731022][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  821.754259][T11514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  821.772207][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  821.783802][T11514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  821.797904][T11514] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  821.806111][T11514] batman_adv: batadv0: Removing interface: virt_wifi0
[  821.825610][T11514] bridge0: port 3(team0) entered disabled state
[  821.833505][T13162] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2576'.
[  821.844964][T11514] bridge_slave_1: left allmulticast mode
[  821.850682][T11514] bridge_slave_1: left promiscuous mode
[  821.856927][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.866893][T11514] bridge_slave_0: left promiscuous mode
[  821.872769][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.896309][T11514] veth1_macvtap: left allmulticast mode
[  821.902282][T11514] veth1_macvtap: left promiscuous mode
[  821.912835][T11514] veth1_vlan: left allmulticast mode
[  821.918967][T11514] veth1_vlan: left promiscuous mode
[  821.925805][T11514] veth0_vlan: left promiscuous mode
[  822.255645][T11514] macvlan0 (unregistering): left promiscuous mode
[  822.262433][T11514] macvlan0 (unregistering): left allmulticast mode
[  822.277451][T11514] team0 (unregistering): Port device macvlan0 removed
[  822.605745][T11514] team_slave_1 (unregistering): left promiscuous mode
[  822.612936][T11514] team_slave_1 (unregistering): left allmulticast mode
[  822.632036][T11514] team0 (unregistering): Port device team_slave_1 removed
[  822.688578][T11514] C (unregistering): left promiscuous mode
[  822.696370][T11514] C (unregistering): left allmulticast mode
[  822.707139][T11514] team0 (unregistering): Port device C removed
[  822.756966][T11514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  822.806642][T11514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  823.191662][T11514] bond0 (unregistering): Released all slaves
[  823.288446][T13159] netlink: 'syz.2.2575': attribute type 33 has an invalid length.
[  823.296464][T13159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2575'.
[  823.305931][T13159] FAULT_INJECTION: forcing a failure.
[  823.305931][T13159] name failslab, interval 1, probability 0, space 0, times 0
[  823.322154][T13159] CPU: 0 PID: 13159 Comm: syz.2.2575 Not tainted syzkaller #0
[  823.329836][T13159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  823.339901][T13159] Call Trace:
[  823.343193][T13159]  <TASK>
[  823.346148][T13159]  dump_stack_lvl+0x18c/0x250
[  823.350875][T13159]  ? show_regs_print_info+0x20/0x20
[  823.356466][T13159]  ? load_image+0x400/0x400
[  823.361138][T13159]  ? br_get_link_af_size_filtered+0x92/0xc30
[  823.367136][T13159]  ? __lock_acquire+0x7d40/0x7d40
[  823.372267][T13159]  should_fail_ex+0x39d/0x4d0
[  823.377069][T13159]  should_failslab+0x9/0x20
[  823.382370][T13159]  slab_pre_alloc_hook+0x59/0x310
[  823.387525][T13159]  kmem_cache_alloc_node+0x60/0x320
[  823.392807][T13159]  ? __alloc_skb+0x103/0x2c0
[  823.397482][T13159]  __alloc_skb+0x103/0x2c0
[  823.402180][T13159]  br_info_notify+0x105/0x240
[  823.406930][T13159]  br_setlink+0x398/0x8b0
[  823.411320][T13159]  ? br_vlan_info+0x460/0x460
[  823.416125][T13159]  ? __mutex_lock+0x956/0xcc0
[  823.421547][T13159]  ? mutex_is_locked+0x12/0x40
[  823.426498][T13159]  rtnl_bridge_setlink+0x5b7/0x7d0
[  823.431735][T13159]  ? rtnl_bridge_dellink+0x6f0/0x6f0
[  823.437544][T13159]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  823.442845][T13159]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  823.447962][T13159]  ? rtnl_bridge_dellink+0x6f0/0x6f0
[  823.453432][T13159]  rtnetlink_rcv_msg+0x869/0xfa0
[  823.458492][T13159]  ? lockdep_hardirqs_on+0x98/0x150
[  823.463952][T13159]  ? rtnetlink_bind+0x80/0x80
[  823.468719][T13159]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  823.475836][T13159]  ? __dev_queue_xmit+0x26b/0x36b0
[  823.480974][T13159]  ? lock_chain_count+0x20/0x20
[  823.486004][T13159]  ? __local_bh_enable_ip+0x13a/0x1c0
[  823.491458][T13159]  ? lockdep_hardirqs_on+0x98/0x150
[  823.497023][T13159]  ? __local_bh_enable_ip+0x13a/0x1c0
[  823.502431][T13159]  ? _local_bh_enable+0xa0/0xa0
[  823.507365][T13159]  ? __dev_queue_xmit+0x26b/0x36b0
[  823.512737][T13159]  ? __dev_queue_xmit+0x26b/0x36b0
[  823.518199][T13159]  ? __dev_queue_xmit+0x124f/0x36b0
[  823.523424][T13159]  ? __dev_queue_xmit+0x26b/0x36b0
[  823.528590][T13159]  ? ref_tracker_free+0x690/0x840
[  823.533782][T13159]  netlink_rcv_skb+0x241/0x4d0
[  823.538636][T13159]  ? rtnetlink_bind+0x80/0x80
[  823.543447][T13159]  ? netlink_ack+0x1180/0x1180
[  823.548254][T13159]  ? __lock_acquire+0x7d40/0x7d40
[  823.553466][T13159]  ? netlink_deliver_tap+0x2e/0x1b0
[  823.558846][T13159]  netlink_unicast+0x751/0x8d0
[  823.563613][T13159]  netlink_sendmsg+0x8d0/0xbf0
[  823.568384][T13159]  ? netlink_getsockopt+0x590/0x590
[  823.573677][T13159]  ? aa_sock_msg_perm+0x94/0x150
[  823.579366][T13159]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  823.584648][T13159]  ? security_socket_sendmsg+0x80/0xa0
[  823.590488][T13159]  ? netlink_getsockopt+0x590/0x590
[  823.595685][T13159]  ____sys_sendmsg+0x5ba/0x960
[  823.600522][T13159]  ? __asan_memset+0x22/0x40
[  823.605281][T13159]  ? __sys_sendmsg_sock+0x30/0x30
[  823.611035][T13159]  ? __import_iovec+0x5f2/0x850
[  823.616336][T13159]  ? import_iovec+0x73/0xa0
[  823.621030][T13159]  ___sys_sendmsg+0x2a6/0x360
[  823.625703][T13159]  ? get_pid_task+0x20/0x1e0
[  823.630350][T13159]  ? __sys_sendmsg+0x2a0/0x2a0
[  823.635215][T13159]  ? __lock_acquire+0x7d40/0x7d40
[  823.640266][T13159]  __se_sys_sendmsg+0x1c2/0x2b0
[  823.645115][T13159]  ? __x64_sys_sendmsg+0x80/0x80
[  823.650160][T13159]  ? lockdep_hardirqs_on+0x98/0x150
[  823.655686][T13159]  do_syscall_64+0x55/0xa0
[  823.660124][T13159]  ? clear_bhb_loop+0x40/0x90
[  823.664899][T13159]  ? clear_bhb_loop+0x40/0x90
[  823.670602][T13159]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  823.677127][T13159] RIP: 0033:0x7ff53bb9af79
[  823.681635][T13159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.701868][T13159] RSP: 002b:00007ff53caf0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.710482][T13159] RAX: ffffffffffffffda RBX: 00007ff53be15fa0 RCX: 00007ff53bb9af79
[  823.720590][T13159] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  823.729119][T13159] RBP: 00007ff53caf0090 R08: 0000000000000000 R09: 0000000000000000
[  823.737300][T13159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  823.745640][T13159] R13: 00007ff53be16038 R14: 00007ff53be15fa0 R15: 00007ffe9ae27708
[  823.753956][T13159]  </TASK>
[  823.770995][T13157] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2574'.
[  823.783311][T13163] netlink: 'syz.3.2576': attribute type 10 has an invalid length.
[  823.812180][T13163] team0: Port device dummy0 added
[  823.843166][T13164] netlink: 'syz.3.2576': attribute type 10 has an invalid length.
[  823.891235][T13164] team0: Port device dummy0 removed
[  823.973363][T13162] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  824.106020][T12974] veth0_vlan: entered promiscuous mode
[  824.137070][T12974] veth1_vlan: entered promiscuous mode
[  824.262090][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'.
[  824.455820][T12974] veth0_macvtap: entered promiscuous mode
[  824.470163][T12974] veth1_macvtap: entered promiscuous mode
[  824.491757][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.502679][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.518129][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.530425][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.546323][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.560793][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.575833][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  824.586601][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  824.599032][T12974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.260230][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.271670][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.284528][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.297339][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.308616][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.329432][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.340480][T12974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.351448][T12974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.377070][T12974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.418590][T12974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.442525][T12974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.452783][T12974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.473013][T12974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  827.560362][T13188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'.
[  827.592795][T13188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'.
[  827.639059][T13188] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2583'.
[  827.680591][T11525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.711451][T11525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.740824][T11523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.776223][T11523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.892885][T13195] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2585'.
[  829.986439][T13197] netlink: 'syz.0.2537': attribute type 21 has an invalid length.
[  830.019302][T13197] netlink: 'syz.0.2537': attribute type 1 has an invalid length.
[  830.028819][T13201] FAULT_INJECTION: forcing a failure.
[  830.028819][T13201] name failslab, interval 1, probability 0, space 0, times 0
[  830.062750][T13201] CPU: 0 PID: 13201 Comm: syz.2.2587 Not tainted syzkaller #0
[  830.070298][T13201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  830.080638][T13201] Call Trace:
[  830.084127][T13201]  <TASK>
[  830.087167][T13201]  dump_stack_lvl+0x18c/0x250
[  830.092153][T13201]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  830.098511][T13201]  ? show_regs_print_info+0x20/0x20
[  830.104246][T13201]  ? load_image+0x400/0x400
[  830.108848][T13201]  ? should_fail_ex+0x34a/0x4d0
[  830.113705][T13201]  should_fail_ex+0x39d/0x4d0
[  830.118579][T13201]  should_failslab+0x9/0x20
[  830.123224][T13201]  slab_pre_alloc_hook+0x59/0x310
[  830.128341][T13201]  ? page_pool_create+0x71/0x5c0
[  830.133401][T13201]  __kmem_cache_alloc_node+0x53/0x250
[  830.138779][T13201]  ? page_pool_create+0x71/0x5c0
[  830.143912][T13201]  kmalloc_node_trace+0x26/0xe0
[  830.149115][T13201]  page_pool_create+0x71/0x5c0
[  830.153976][T13201]  bpf_test_run_xdp_live+0x203/0x1b20
[  830.159374][T13201]  ? 0xffffffffa00042c0
[  830.163544][T13201]  ? 0xffffffffa00042c0
[  830.167738][T13201]  ? bpf_dispatcher_change_prog+0xcbf/0xf10
[  830.173662][T13201]  ? 0xffffffffa00042c0
[  830.177908][T13201]  ? xdp_convert_md_to_buff+0x330/0x330
[  830.183492][T13201]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  830.190179][T13201]  ? xdp_convert_md_to_buff+0x5b/0x330
[  830.195766][T13201]  bpf_prog_test_run_xdp+0x7ca/0x10e0
[  830.201413][T13201]  ? dev_put+0x80/0x80
[  830.205518][T13201]  ? dev_put+0x80/0x80
[  830.209757][T13201]  bpf_prog_test_run+0x321/0x390
[  830.214696][T13201]  __sys_bpf+0x49d/0x890
[  830.219143][T13201]  ? bpf_link_show_fdinfo+0x390/0x390
[  830.225092][T13201]  ? lock_chain_count+0x20/0x20
[  830.230265][T13201]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  830.236603][T13201]  __x64_sys_bpf+0x7c/0x90
[  830.241048][T13201]  do_syscall_64+0x55/0xa0
[  830.245695][T13201]  ? clear_bhb_loop+0x40/0x90
[  830.250494][T13201]  ? clear_bhb_loop+0x40/0x90
[  830.255377][T13201]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  830.261370][T13201] RIP: 0033:0x7ff53bb9af79
[  830.265789][T13201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.285620][T13201] RSP: 002b:00007ff53caf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  830.294120][T13201] RAX: ffffffffffffffda RBX: 00007ff53be15fa0 RCX: 00007ff53bb9af79
[  830.302270][T13201] RDX: 0000000000000050 RSI: 0000200000000740 RDI: 000000000000000a
[  830.310362][T13201] RBP: 00007ff53caf0090 R08: 0000000000000000 R09: 0000000000000000
[  830.318603][T13201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.326768][T13201] R13: 00007ff53be16038 R14: 00007ff53be15fa0 R15: 00007ffe9ae27708
[  830.335474][T13201]  </TASK>
[  830.485579][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2592'.
[  830.552274][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2592'.
[  830.588960][T13214] FAULT_INJECTION: forcing a failure.
[  830.588960][T13214] name failslab, interval 1, probability 0, space 0, times 0
[  830.611095][T13214] CPU: 0 PID: 13214 Comm: syz.1.2594 Not tainted syzkaller #0
[  830.618620][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  830.628805][T13214] Call Trace:
[  830.632106][T13214]  <TASK>
[  830.635587][T13214]  dump_stack_lvl+0x18c/0x250
[  830.640302][T13214]  ? show_regs_print_info+0x20/0x20
[  830.645807][T13214]  ? load_image+0x400/0x400
[  830.650514][T13214]  ? __might_sleep+0xe0/0xe0
[  830.655104][T13214]  ? __lock_acquire+0x7d40/0x7d40
[  830.660154][T13214]  should_fail_ex+0x39d/0x4d0
[  830.665023][T13214]  should_failslab+0x9/0x20
[  830.669742][T13214]  slab_pre_alloc_hook+0x59/0x310
[  830.674798][T13214]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  830.680816][T13214]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  830.686567][T13214]  __kmem_cache_alloc_node+0x53/0x250
[  830.691957][T13214]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  830.697680][T13214]  __kmalloc+0xa4/0x230
[  830.702196][T13214]  tomoyo_realpath_from_path+0xe3/0x5d0
[  830.707844][T13214]  tomoyo_path_number_perm+0x248/0x620
[  830.713427][T13214]  ? tomoyo_path_number_perm+0x217/0x620
[  830.719269][T13214]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  830.724818][T13214]  ? ksys_write+0x1c4/0x260
[  830.729435][T13214]  ? __fget_files+0x28/0x4b0
[  830.734054][T13214]  ? __fget_files+0x28/0x4b0
[  830.738815][T13214]  security_file_ioctl+0x70/0xa0
[  830.744135][T13214]  __se_sys_ioctl+0x48/0x170
[  830.749081][T13214]  do_syscall_64+0x55/0xa0
[  830.753687][T13214]  ? clear_bhb_loop+0x40/0x90
[  830.758563][T13214]  ? clear_bhb_loop+0x40/0x90
[  830.763420][T13214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  830.769402][T13214] RIP: 0033:0x7f36fcd9af79
[  830.773931][T13214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  830.793890][T13214] RSP: 002b:00007f36fdcdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  830.802411][T13214] RAX: ffffffffffffffda RBX: 00007f36fd015fa0 RCX: 00007f36fcd9af79
[  830.810477][T13214] RDX: 0000200000000340 RSI: 000000000000541b RDI: 0000000000000004
[  830.818451][T13214] RBP: 00007f36fdcdf090 R08: 0000000000000000 R09: 0000000000000000
[  830.826423][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  830.834395][T13214] R13: 00007f36fd016038 R14: 00007f36fd015fa0 R15: 00007fffeaf9a5d8
[  830.842461][T13214]  </TASK>
[  830.858712][T13214] ERROR: Out of memory at tomoyo_realpath_from_path.
[  830.909233][T13212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2592'.
[  830.921201][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2592'.
[  831.235939][T13228] mac80211_hwsim hwsim31 .3ãc¤±: renamed from wlan1 (while UP)
[  831.412494][T13231] netlink: 'syz.1.2600': attribute type 21 has an invalid length.
[  831.436089][T13231] netlink: 'syz.1.2600': attribute type 1 has an invalid length.
[  831.491408][T13237] netlink: 'syz.2.2601': attribute type 4 has an invalid length.
[  831.525338][T13237] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2601'.
[  831.657897][T13240] netlink: 'syz.1.2602': attribute type 29 has an invalid length.
[  834.128002][T13240] netlink: 'syz.1.2602': attribute type 29 has an invalid length.
[  834.266188][T13245] delete_channel: no stack
[  834.285036][T13245] delete_channel: no stack
[  834.292099][T11514] gretap0 (unregistering): left allmulticast mode
[  834.303146][T11514] gretap0 (unregistering): left promiscuous mode
[  834.315196][T11514] Ÿë
: port 1(gretap0) entered disabled state
[  834.325360][T13249] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2605'.
[  834.607102][T13254] netlink: 'syz.2.2606': attribute type 21 has an invalid length.
[  834.720523][T13259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2607'.
[  834.807302][T13259] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  834.850351][T13259] CPU: 1 PID: 13259 Comm: syz.1.2607 Not tainted syzkaller #0
[  834.858876][T13259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  834.869145][T13259] Call Trace:
[  834.872645][T13259]  <TASK>
[  834.875693][T13259]  dump_stack_lvl+0x18c/0x250
[  834.880605][T13259]  ? show_regs_print_info+0x20/0x20
[  834.885900][T13259]  ? load_image+0x400/0x400
[  834.890550][T13259]  sysfs_warn_dup+0x8e/0xa0
[  834.895299][T13259]  sysfs_do_create_link_sd+0xc0/0x110
[  834.900790][T13259]  device_add_class_symlinks+0x1cf/0x240
[  834.906896][T13259]  device_add+0x507/0xc20
[  834.911254][T13259]  wiphy_register+0x1dad/0x2ae0
[  834.916601][T13259]  ? cfg80211_event_work+0x40/0x40
[  834.921738][T13259]  ? minstrel_ht_alloc+0x88a/0x990
[  834.926973][T13259]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  834.933713][T13259]  ieee80211_register_hw+0x3464/0x4250
[  834.939390][T13259]  ? ieee80211_tasklet_handler+0x20/0x20
[  834.945399][T13259]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  834.951919][T13259]  ? __debug_object_init+0xec/0x450
[  834.957481][T13259]  ? __asan_memset+0x22/0x40
[  834.962368][T13259]  ? __hrtimer_init+0x186/0x270
[  834.967356][T13259]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  834.973126][T13259]  ? mac80211_hwsim_free+0x220/0x220
[  834.978708][T13259]  ? rcu_is_watching+0x15/0xb0
[  834.983671][T13259]  ? kstrndup+0xbd/0x140
[  834.988045][T13259]  hwsim_new_radio_nl+0xdc9/0x1a90
[  834.993281][T13259]  ? __nla_validate+0x50/0x50
[  834.998583][T13259]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  835.005361][T13259]  ? __nla_parse+0x40/0x50
[  835.009940][T13259]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  835.016697][T13259]  genl_family_rcv_msg_doit+0x211/0x310
[  835.022538][T13259]  ? end_current_label_crit_section+0x170/0x170
[  835.029349][T13259]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  835.035564][T13259]  ? bpf_lsm_capable+0x9/0x10
[  835.040923][T13259]  ? security_capable+0x89/0xb0
[  835.046164][T13259]  genl_rcv_msg+0x619/0x7a0
[  835.050880][T13259]  ? genl_bind+0x360/0x360
[  835.055582][T13259]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  835.062295][T13259]  netlink_rcv_skb+0x241/0x4d0
[  835.067102][T13259]  ? genl_bind+0x360/0x360
[  835.071806][T13259]  ? netlink_ack+0x1180/0x1180
[  835.076770][T13259]  ? __lock_acquire+0x7d40/0x7d40
[  835.081894][T13259]  ? down_read+0x1ac/0x2e0
[  835.086544][T13259]  genl_rcv+0x28/0x40
[  835.090649][T13259]  netlink_unicast+0x751/0x8d0
[  835.095528][T13259]  netlink_sendmsg+0x8d0/0xbf0
[  835.100494][T13259]  ? netlink_getsockopt+0x590/0x590
[  835.105895][T13259]  ? aa_sock_msg_perm+0x94/0x150
[  835.110841][T13259]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  835.116451][T13259]  ? security_socket_sendmsg+0x80/0xa0
[  835.122113][T13259]  ? netlink_getsockopt+0x590/0x590
[  835.127708][T13259]  ____sys_sendmsg+0x5ba/0x960
[  835.132675][T13259]  ? __asan_memset+0x22/0x40
[  835.137277][T13259]  ? __sys_sendmsg_sock+0x30/0x30
[  835.142314][T13259]  ? __import_iovec+0x5f2/0x850
[  835.147529][T13259]  ? import_iovec+0x73/0xa0
[  835.152153][T13259]  ___sys_sendmsg+0x2a6/0x360
[  835.156940][T13259]  ? __sys_sendmsg+0x2a0/0x2a0
[  835.161755][T13259]  __se_sys_sendmsg+0x1c2/0x2b0
[  835.166697][T13259]  ? __x64_sys_sendmsg+0x80/0x80
[  835.171724][T13259]  ? lockdep_hardirqs_on+0x98/0x150
[  835.176948][T13259]  do_syscall_64+0x55/0xa0
[  835.181558][T13259]  ? clear_bhb_loop+0x40/0x90
[  835.186640][T13259]  ? clear_bhb_loop+0x40/0x90
[  835.191401][T13259]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  835.197482][T13259] RIP: 0033:0x7f36fcd9af79
[  835.201990][T13259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  835.222049][T13259] RSP: 002b:00007f36fdcdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.230479][T13259] RAX: ffffffffffffffda RBX: 00007f36fd015fa0 RCX: 00007f36fcd9af79
[  835.238561][T13259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  835.247110][T13259] RBP: 00007f36fce316e0 R08: 0000000000000000 R09: 0000000000000000
[  835.255718][T13259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.264136][T13259] R13: 00007f36fd016038 R14: 00007f36fd015fa0 R15: 00007fffeaf9a5d8
[  835.272823][T13259]  </TASK>
[  835.296435][T13263] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2609'.
[  835.347024][T13260] netlink: 'syz.1.2607': attribute type 10 has an invalid length.
[  835.380843][T13268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2607'.
[  835.483048][T13260] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  835.508189][T13268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2607'.
[  835.520661][T13270] netlink: 'syz.2.2611': attribute type 21 has an invalid length.
[  835.532367][T13270] netlink: 'syz.2.2611': attribute type 1 has an invalid length.
[  835.555824][T13259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2607'.
[  835.578960][T13271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2607'.
[  835.696974][T11514] 
[  835.699617][T11514] ======================================================
[  835.706911][T11514] WARNING: possible circular locking dependency detected
[  835.714050][T11514] syzkaller #0 Not tainted
[  835.718695][T11514] ------------------------------------------------------
[  835.725817][T11514] kworker/u4:23/11514 is trying to acquire lock:
[  835.732316][T11514] ffff888078598d00 (team->team_lock_key#4){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0
[  835.742522][T11514] 
[  835.742522][T11514] but task is already holding lock:
[  835.752067][T11514] ffff888023f00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[  835.763419][T11514] 
[  835.763419][T11514] which lock already depends on the new lock.
[  835.763419][T11514] 
[  835.774778][T11514] 
[  835.774778][T11514] the existing dependency chain (in reverse order) is:
[  835.784048][T11514] 
[  835.784048][T11514] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  835.791970][T11514]        __mutex_lock+0x136/0xcc0
[  835.797025][T11514]        ieee80211_open+0x144/0x200
[  835.802603][T11514]        __dev_open+0x2cb/0x430
[  835.807802][T11514]        dev_open+0xab/0x190
[  835.812911][T11514]        team_add_slave+0x75f/0x29a0
[  835.818372][T11514]        do_setlink+0xdfe/0x4130
[  835.823738][T11514]        rtnl_newlink+0x17da/0x20a0
[  835.829110][T11514]        rtnetlink_rcv_msg+0x869/0xfa0
[  835.834752][T11514]        netlink_rcv_skb+0x241/0x4d0
[  835.840226][T11514]        netlink_unicast+0x751/0x8d0
[  835.845513][T11514]        netlink_sendmsg+0x8d0/0xbf0
[  835.851059][T11514]        ____sys_sendmsg+0x5ba/0x960
[  835.856620][T11514]        ___sys_sendmsg+0x2a6/0x360
[  835.861994][T11514]        __se_sys_sendmsg+0x1c2/0x2b0
[  835.867443][T11514]        do_syscall_64+0x55/0xa0
[  835.872469][T11514]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  835.878884][T11514] 
[  835.878884][T11514] -> #0 (team->team_lock_key#4){+.+.}-{3:3}:
[  835.887143][T11514]        __lock_acquire+0x2df1/0x7d40
[  835.892794][T11514]        lock_acquire+0x19e/0x420
[  835.897911][T11514]        __mutex_lock+0x136/0xcc0
[  835.903204][T11514]        team_del_slave+0x32/0x1c0
[  835.908423][T11514]        team_device_event+0x28d/0xa20
[  835.914186][T11514]        notifier_call_chain+0x197/0x380
[  835.920004][T11514]        unregister_netdevice_many_notify+0x100d/0x1900
[  835.927179][T11514]        unregister_netdevice_queue+0x32c/0x370
[  835.933682][T11514]        _cfg80211_unregister_wdev+0x16b/0x580
[  835.940304][T11514]        ieee80211_remove_interfaces+0x49e/0x690
[  835.946945][T11514]        ieee80211_unregister_hw+0x5d/0x2a0
[  835.953458][T11514]        mac80211_hwsim_del_radio+0x289/0x480
[  835.960067][T11514]        hwsim_exit_net+0x58d/0x650
[  835.965609][T11514]        cleanup_net+0x70a/0xbb0
[  835.970907][T11514]        process_scheduled_works+0xa5d/0x15d0
[  835.977073][T11514]        worker_thread+0xa55/0xfc0
[  835.982182][T11514]        kthread+0x2fa/0x390
[  835.986856][T11514]        ret_from_fork+0x48/0x80
[  835.991788][T11514]        ret_from_fork_asm+0x11/0x20
[  835.997256][T11514] 
[  835.997256][T11514] other info that might help us debug this:
[  835.997256][T11514] 
[  836.007660][T11514]  Possible unsafe locking scenario:
[  836.007660][T11514] 
[  836.015283][T11514]        CPU0                    CPU1
[  836.020733][T11514]        ----                    ----
[  836.026268][T11514]   lock(&rdev->wiphy.mtx);
[  836.030780][T11514]                                lock(team->team_lock_key#4);
[  836.038422][T11514]                                lock(&rdev->wiphy.mtx);
[  836.045454][T11514]   lock(team->team_lock_key#4);
[  836.050435][T11514] 
[  836.050435][T11514]  *** DEADLOCK ***
[  836.050435][T11514] 
[  836.058838][T11514] 5 locks held by kworker/u4:23/11514:
[  836.064301][T11514]  #0: ffff888017c73938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  836.075416][T11514]  #1: ffffc90010467d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  836.086214][T11514]  #2: ffffffff8e3b3150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0
[  836.095999][T11514]  #3: ffffffff8e3c0188 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0
[  836.105844][T11514]  #4: ffff888023f00768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690
[  836.116632][T11514] 
[  836.116632][T11514] stack backtrace:
[  836.122597][T11514] CPU: 0 PID: 11514 Comm: kworker/u4:23 Not tainted syzkaller #0
[  836.130503][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  836.140820][T11514] Workqueue: netns cleanup_net
[  836.146027][T11514] Call Trace:
[  836.149405][T11514]  <TASK>
[  836.152425][T11514]  dump_stack_lvl+0x18c/0x250
[  836.157470][T11514]  ? load_image+0x400/0x400
[  836.161986][T11514]  ? show_regs_print_info+0x20/0x20
[  836.167620][T11514]  ? print_circular_bug+0x12b/0x1a0
[  836.172905][T11514]  check_noncircular+0x2fc/0x400
[  836.177846][T11514]  ? print_deadlock_bug+0x5d0/0x5d0
[  836.183303][T11514]  ? lockdep_lock+0xf5/0x230
[  836.187977][T11514]  ? __lock_acquire+0x1347/0x7d40
[  836.192998][T11514]  ? _find_first_zero_bit+0xd3/0x100
[  836.198752][T11514]  __lock_acquire+0x2df1/0x7d40
[  836.203895][T11514]  ? verify_lock_unused+0x140/0x140
[  836.209529][T11514]  ? verify_lock_unused+0x140/0x140
[  836.215561][T11514]  lock_acquire+0x19e/0x420
[  836.220514][T11514]  ? team_del_slave+0x32/0x1c0
[  836.225929][T11514]  ? __might_sleep+0xe0/0xe0
[  836.230692][T11514]  ? read_lock_is_recursive+0x20/0x20
[  836.237050][T11514]  __mutex_lock+0x136/0xcc0
[  836.241980][T11514]  ? team_del_slave+0x32/0x1c0
[  836.247052][T11514]  ? __lock_acquire+0x7d40/0x7d40
[  836.252818][T11514]  ? rcu_is_watching+0x15/0xb0
[  836.257859][T11514]  ? trace_contention_end+0x39/0xe0
[  836.263580][T11514]  ? __mutex_lock+0x315/0xcc0
[  836.268701][T11514]  ? team_del_slave+0x32/0x1c0
[  836.273640][T11514]  ? mutex_lock_nested+0x20/0x20
[  836.278947][T11514]  ? bond_netdev_event+0xeb/0xf30
[  836.284120][T11514]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  836.289944][T11514]  team_del_slave+0x32/0x1c0
[  836.294716][T11514]  team_device_event+0x28d/0xa20
[  836.300364][T11514]  notifier_call_chain+0x197/0x380
[  836.305876][T11514]  unregister_netdevice_many_notify+0x100d/0x1900
[  836.312561][T11514]  ? lock_chain_count+0x20/0x20
[  836.318017][T11514]  ? unregister_netdevice_many+0x20/0x20
[  836.323856][T11514]  ? kernfs_remove_by_name_ns+0x117/0x150
[  836.330140][T11514]  ? __lock_acquire+0x7d40/0x7d40
[  836.335254][T11514]  unregister_netdevice_queue+0x32c/0x370
[  836.341434][T11514]  ? list_netdevice+0x730/0x730
[  836.346312][T11514]  ? kernfs_remove_by_name_ns+0x117/0x150
[  836.352423][T11514]  _cfg80211_unregister_wdev+0x16b/0x580
[  836.358233][T11514]  ieee80211_remove_interfaces+0x49e/0x690
[  836.364217][T11514]  ? ieee80211_do_stop+0x1e20/0x1e20
[  836.369590][T11514]  ? rcu_is_watching+0x15/0xb0
[  836.374378][T11514]  ieee80211_unregister_hw+0x5d/0x2a0
[  836.379881][T11514]  mac80211_hwsim_del_radio+0x289/0x480
[  836.385622][T11514]  ? rhashtable_remove_fast+0xc00/0xc00
[  836.391475][T11514]  hwsim_exit_net+0x58d/0x650
[  836.396280][T11514]  ? hwsim_init_net+0x90/0x90
[  836.401330][T11514]  ? __ip_vs_dev_cleanup_batch+0x238/0x250
[  836.407666][T11514]  cleanup_net+0x70a/0xbb0
[  836.412098][T11514]  ? ops_free_list+0x3b0/0x3b0
[  836.417219][T11514]  ? _raw_spin_unlock_irq+0x23/0x50
[  836.423298][T11514]  ? process_scheduled_works+0x96f/0x15d0
[  836.429197][T11514]  ? process_scheduled_works+0x96f/0x15d0
[  836.435184][T11514]  process_scheduled_works+0xa5d/0x15d0
[  836.440914][T11514]  ? assign_work+0x430/0x430
[  836.445787][T11514]  ? assign_work+0x3d0/0x430
[  836.450500][T11514]  worker_thread+0xa55/0xfc0
[  836.455631][T11514]  kthread+0x2fa/0x390
[  836.459802][T11514]  ? pr_cont_work+0x560/0x560
[  836.464754][T11514]  ? kthread_blkcg+0xd0/0xd0
[  836.469472][T11514]  ret_from_fork+0x48/0x80
[  836.474183][T11514]  ? kthread_blkcg+0xd0/0xd0
[  836.478792][T11514]  ret_from_fork_asm+0x11/0x20
[  836.483569][T11514]  </TASK>
[  836.535904][T11514] mac80211_hwsim hwsim9 »»»»»» (unregistering): left promiscuous mode
[  836.562836][T11514] mac80211_hwsim hwsim9 »»»»»» (unregistering): left allmulticast mode
[  836.582784][T11514] team0: Port device »»»»»» removed
[  838.769895][T11514] vlan0: left allmulticast mode
[  838.775964][T11514] veth0_vlan: left allmulticast mode
[  838.781475][T11514] vlan0: left promiscuous mode
[  838.786635][T11514] À: port 1(vlan0) entered disabled state
[  838.794649][T11514] veth0_to_team: left allmulticast mode
[  838.800524][T11514] veth0_to_team: left promiscuous mode
[  838.807426][T11514] Ÿë
: port 2(veth0_to_team) entered disabled state
[  838.820019][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  838.828148][T11514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  838.836306][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  838.843716][T11514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  838.851439][T11514] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  838.859866][T11514] batman_adv: batadv0: Removing interface: virt_wifi0
[  838.867861][T11514] bridge0: port 3(team0) entered disabled state
[  838.875547][T11514] bridge_slave_1: left allmulticast mode
[  838.881225][T11514] bridge_slave_1: left promiscuous mode
[  838.887178][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.895224][T11514] bridge_slave_0: left allmulticast mode
[  838.900887][T11514] bridge_slave_0: left promiscuous mode
[  838.907338][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.917162][T11514] veth1_macvtap: left allmulticast mode
[  838.922976][T11514] veth1_macvtap: left promiscuous mode
[  838.929828][T11514] veth1_vlan: left promiscuous mode
[  838.935372][T11514] veth0_vlan: left promiscuous mode
[  839.235835][T11514] team_slave_1 (unregistering): left promiscuous mode
[  839.242938][T11514] team_slave_1 (unregistering): left allmulticast mode
[  839.250782][T11514] team0 (unregistering): Port device team_slave_1 removed
[  839.283249][T11514] C (unregistering): left promiscuous mode
[  839.289366][T11514] C (unregistering): left allmulticast mode
[  839.296191][T11514] team0 (unregistering): Port device C removed
[  839.324773][T11514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  839.338838][T11514] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  839.462447][T11514] bond0 (unregistering): Released all slaves