last executing test programs:

2.979854976s ago: executing program 1 (id=3225):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xe2, 0x85, &(0x7f0000000400)="8c35709843bc86d2a925121049b37f8e387d6562773ee4f2867766eedb0a1387b9cb161ad70e1b30bd34c7ab8032cf7994ea709ac8f2067df795af4e4dc204f2071794973d916a8d6b0ea84a9b4a91f718c5cc0c4820549e119b03cdc7fa8b927dd1d2cbb2ebd7ff7cad544e9eef619ce52bc5e237aef79504cd26cc57971c979e849e0901de704bdf92ca45483b1ee3602d4e3dbe7f35caefb388dff3a5300b8f98be5f8c94554ad1fbea2cdcdbf34549dbcace4dab3121a6f9e6d6c20da486eaa2c9ddea9c8ca95d42e714229cce6ed5f3000258e262c1f67e3b4f853e58691e0d", &(0x7f0000000500)=""/133, 0x4, 0x0, 0x8, 0xd7, &(0x7f00000005c0)="f171f265935c21be", &(0x7f0000000600)="cc21e3723d094575a801e12eaf3166ee66d0fac647dfbdbf0aee5e6be418d539c81d05d2645f3a19136040575a05888028bd4c076bfca079472f9205a2690b72e3c8914563a4e1e93ab02dfb50651a6f9e8fdfe7b0b0eac45a9d07d1e1f9e0d284ded62b04757c24598d5d672d4adfdad23f6fc0c1c0f4119b63c8bb8fa065a4f681a49c26b7f1907f7ceb246dfa5ca6afe48504e63a109558333813aa47ecc5e2c18908da5c56f71c7a46ea89d173313106ea7507ead9f13ba76ea1d82a97a25f3320f1e03398e8b9ff9064a94a42de08fd1bff0a267d", 0x7, 0x0, 0xe638}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300), 0x4)
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10c92c, 0x80000001, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x24, 0x800, 0x774, &(0x7f0000000380))
setsockopt$sock_attach_bpf(r0, 0x0, 0x21, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="d1727bd0f24fb4aefc000016b7b88c85ad8ca3696c12df133d00008b61104f003a19337a77d76ca15329ebd3d0d3221c187787f021765b43f187c2d6c4dd7507fc770676fef06bd8547c118a1b52fdae2881d4bbae50908bf663447266ab637f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100, 0x1}, 0x8, 0x10, &(0x7f0000000840), 0x10}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)="5c04000012006bab9a3fe3d86e17aa0a046b836c1d0048007ea6001a0038001d001931a0e69ee517d34460bc06000000a70579ac6182949a3651f60a84c9f4d4938037e70e4509c5bb000000004255b4", 0x50}, {&(0x7f0000000d40)="5d00494e2150543cd060d6ef8175f4ee6e46bbe56e0a0143b33c40be450417c33baad347cb74bc67802f30a69cc376b1f4483bc08168e29b5b09d8cdf0f6a60e215eb8891968acdd32e266e43e68afe9408f6e0cc4269a298b4b8d5db83729b044b1943cf37a8c16fbc3d4b38d94e570cf1f78403bb9490451030c6da8599a2f225fd720b2c99b165a548ade45b420b71b7dcfd61c18b7623c5f05268fddb532bde4254029b34673bc04b5b15de8635f1e090e08b4bf0cd3f6d6fa31c1da", 0xbe}, {&(0x7f0000000cc0)="8faffc8a6156fef4d49d307c9ee3cdf16a9d6d720ed61152894bda260524ed679a0b9b0593dc03f784908e5512ce5d40277a0d7dbec1415155da7603fa60c23baf6cf91b3c4b05c95a3e1344d0fd5eafa9239a65faa572eb4410fbacc3c7036bdb89c676fee8df45b72d2240d8e18cca", 0x70}], 0x3, 0x0, 0xffffffffffffff0f, 0x1f00c00e}, 0x4004000)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000002f000a009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000aa000000030000000700000024080100", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000004000000000000000100"/24, @ANYBLOB="0211850c99b7300000bbb346b89c215e0000"], 0x50)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)=""/4092, 0xffc}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000e80)=""/49, 0x31}, {&(0x7f0000000240)=""/140, 0x8c}], 0x4}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
recvmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000)
syz_clone(0x188b0080, &(0x7f0000000180)="fbb86083c17a0b081a41508592b8fdbb3faa24c7afa85f7a91dc7db8eed2a15b4e671ff8f3c11babbb8bdae2daf5e3c6a48ea246e6188ff18df18e637beaca5aef422693c99ae371126fa5c6bc61887313f1a7f9309962ede5d15285733aa367754418d02de1682aea2c40c7915ae4298b3cc0a46cf2fac5687f1d91f5f0dcb58ea579d44f4d88c88ff399512641364b6510aa165f378ea3f3feb9af9a0aa9697c7a032fbfc3922038", 0xa9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="ca523d66415361961345a9e6ac0fb0414c9642588d3735c40357a4a27024c5955b9e10bd610435294818d990c86999ec4e63461f8aca06a212a1a2a64b13309017b75913ca3058fbfed9f7726bac846d3dc08c37a922b3bc6998c1c95ea75a0fee125084f5fa27aad5027800f6fdf775f2a5b6626696f96501c314edc4e13566485afd7aed4a3b7e85e6f313f0f975650f1ae8a41987c715daaea2416e3e10d4431f6c9e22f831012b33587b")

2.761092323s ago: executing program 0 (id=3227):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x2}, 0x884, 0x0, 0x0, 0x0, 0x800000010000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

2.749451043s ago: executing program 3 (id=3228):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close(0x3)

2.628487127s ago: executing program 0 (id=3229):
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0xff, 0x0, 0x3, 0x82502, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x4}, 0x0, 0x10003, 0x17, 0x1, 0x8, 0x2020005, 0x8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

2.466255942s ago: executing program 3 (id=3230):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x4000)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000020850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f22d45b8200000000000000140000001400000004000000000000000100000604000000010000000400000000616100"], 0x0, 0x30, 0x0, 0x8}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r4}, 0x8)
recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000184900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)

2.355481495s ago: executing program 2 (id=3231):
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03483f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2.355220536s ago: executing program 0 (id=3232):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400)

2.231224469s ago: executing program 2 (id=3233):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) (fail_nth: 20)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20)

2.179934731s ago: executing program 3 (id=3234):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640bd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x73)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
close(r0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="07637075737401536463707508"], 0x12)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef)

1.798360253s ago: executing program 1 (id=3235):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x3)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xe82a, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xfc)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x1}], 0x20}, 0x40040)
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000980)="e562ac13a7", 0x5}], 0x1}, 0x80)

1.770382404s ago: executing program 2 (id=3236):
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f00000000c0)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f')
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4)
r3 = socket$kcm(0x2b, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b405000000000000611080000000000063013900230000009500090900008c87a4f6c04167077f65ce9ea5a46ad6716d9d4815c15ca4b90d412544c95e1050d04136f5d779bebfa11fbdd19544ec3c930a8747d4a91b113d632d860b87583678dfc263d8e87c62fde6e41b8af3877f742d0be278b44ba33cd9aa61717290509bda53e7f26598ae0ba3aea70e3a16932933473fcbd505354ac7df7aa811d0d8c7546a755c0c4bd179e878d61ca28807bc279ff20682def8b1661ef2084ffd4f0200000000333b73"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r4, 0xffffffffffffffff, 0x7}, 0x10)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4005, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3000c085)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d00)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001f40)={r2, 0x20, &(0x7f0000001f00)={&(0x7f0000001d80)=""/102, 0x66, <r7=>0x0, &(0x7f0000001e00)=""/212, 0xd4}}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x2, 0x28, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x7, 0x0, 0xc, 0xa, 0x6, 0x0, 0xffffffffffffffff}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x3, 0x1000, &(0x7f0000000d00)=""/4096, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x16, r6, 0x8, &(0x7f0000001d40)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, r5, 0xa, &(0x7f0000002000)=[r4, r8, r4, r4, r4, r4], &(0x7f0000002040)=[{0x0, 0x4, 0xa, 0x6}, {0x3, 0x2, 0xc, 0xc}, {0x3, 0x5, 0x2, 0x1}, {0x4, 0x4, 0x2, 0xc}, {0x1, 0x5, 0x10}, {0x0, 0x1, 0x3, 0x5}, {0x5, 0x2, 0x7, 0x6}, {0x0, 0x5, 0xe, 0x9}, {0x3, 0x2, 0x10, 0x9}, {0x4, 0x1, 0x10, 0x6}], 0x10, 0xffffffff}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r9}, 0x38)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000000), 0x4)

1.768413264s ago: executing program 0 (id=3237):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab940c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x2}, 0x884, 0x0, 0x0, 0x0, 0x800000010000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.667395827s ago: executing program 3 (id=3238):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
close(0x3)

1.618737069s ago: executing program 1 (id=3239):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000a180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)

1.525088752s ago: executing program 1 (id=3240):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x6, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0xb, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={r0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000000}, 0x0)
close(0x3)
close(0x4)

1.483843963s ago: executing program 0 (id=3241):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) (fail_nth: 2)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000163b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x30, &(0x7f0000000100)=r5, 0x33eb)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)

1.421086195s ago: executing program 2 (id=3242):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x4000)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)}, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000020850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f22d45b8200000000000000140000001400000004000000000000000100000604000000010000000400000000616100"], 0x0, 0x30, 0x0, 0x8}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r4}, 0x8)
recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000184900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)

1.331821038s ago: executing program 3 (id=3243):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0xe2, 0x85, &(0x7f0000000400)="8c35709843bc86d2a925121049b37f8e387d6562773ee4f2867766eedb0a1387b9cb161ad70e1b30bd34c7ab8032cf7994ea709ac8f2067df795af4e4dc204f2071794973d916a8d6b0ea84a9b4a91f718c5cc0c4820549e119b03cdc7fa8b927dd1d2cbb2ebd7ff7cad544e9eef619ce52bc5e237aef79504cd26cc57971c979e849e0901de704bdf92ca45483b1ee3602d4e3dbe7f35caefb388dff3a5300b8f98be5f8c94554ad1fbea2cdcdbf34549dbcace4dab3121a6f9e6d6c20da486eaa2c9ddea9c8ca95d42e714229cce6ed5f3000258e262c1f67e3b4f853e58691e0d", &(0x7f0000000500)=""/133, 0x4, 0x0, 0x8, 0xd7, &(0x7f00000005c0)="f171f265935c21be", &(0x7f0000000600)="cc21e3723d094575a801e12eaf3166ee66d0fac647dfbdbf0aee5e6be418d539c81d05d2645f3a19136040575a05888028bd4c076bfca079472f9205a2690b72e3c8914563a4e1e93ab02dfb50651a6f9e8fdfe7b0b0eac45a9d07d1e1f9e0d284ded62b04757c24598d5d672d4adfdad23f6fc0c1c0f4119b63c8bb8fa065a4f681a49c26b7f1907f7ceb246dfa5ca6afe48504e63a109558333813aa47ecc5e2c18908da5c56f71c7a46ea89d173313106ea7507ead9f13ba76ea1d82a97a25f3320f1e03398e8b9ff9064a94a42de08fd1bff0a267d", 0x7, 0x0, 0xe638}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000300), 0x4)
r0 = socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10c92c, 0x80000001, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x24, 0x800, 0x774, &(0x7f0000000380))
setsockopt$sock_attach_bpf(r0, 0x0, 0x21, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="d1727bd0f24fb4aefc000016b7b88c85ad8ca3696c12df133d00008b61104f003a19337a77d76ca15329ebd3d0d3221c187787f021765b43f187c2d6c4dd7507fc770676fef06bd8547c118a1b52fdae2881d4bbae50908bf663447266ab637f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100, 0x1}, 0x8, 0x10, &(0x7f0000000840), 0x10}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848020000005e0c0000000000000e0004001400000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)="5c04000012006bab9a3fe3d86e17aa0a046b836c1d0048007ea6001a0038001d001931a0e69ee517d34460bc06000000a70579ac6182949a3651f60a84c9f4d4938037e70e4509c5bb000000004255b4", 0x50}, {&(0x7f0000000d40)="5d00494e2150543cd060d6ef8175f4ee6e46bbe56e0a0143b33c40be450417c33baad347cb74bc67802f30a69cc376b1f4483bc08168e29b5b09d8cdf0f6a60e215eb8891968acdd32e266e43e68afe9408f6e0cc4269a298b4b8d5db83729b044b1943cf37a8c16fbc3d4b38d94e570cf1f78403bb9490451030c6da8599a2f225fd720b2c99b165a548ade45b420b71b7dcfd61c18b7623c5f05268fddb532bde4254029b34673bc04b5b15de8635f1e090e08b4bf0cd3f6d6fa31c1da", 0xbe}, {&(0x7f0000000cc0)="8faffc8a6156fef4d49d307c9ee3cdf16a9d6d720ed61152894bda260524ed679a0b9b0593dc03f784908e5512ce5d40277a0d7dbec1415155da7603fa60c23baf6cf91b3c4b05c95a3e1344d0fd5eafa9239a65faa572eb4410fbacc3c7036bdb89c676fee8df45b72d2240d8e18cca", 0x70}], 0x3, 0x0, 0xffffffffffffff0f, 0x1f00c00e}, 0x4004000)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000002f000a009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000aa000000030000000700000024080100", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYBLOB="0211850c99b7300000bbb346b89c215e0000"], 0x50)
recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)=""/4092, 0xffc}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000e80)=""/49, 0x31}, {&(0x7f0000000240)=""/140, 0x8c}], 0x4}, 0x0)
recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r8, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000)
syz_clone(0x188b0080, &(0x7f0000000180)="fbb86083c17a0b081a41508592b8fdbb3faa24c7afa85f7a91dc7db8eed2a15b4e671ff8f3c11babbb8bdae2daf5e3c6a48ea246e6188ff18df18e637beaca5aef422693c99ae371126fa5c6bc61887313f1a7f9309962ede5d15285733aa367754418d02de1682aea2c40c7915ae4298b3cc0a46cf2fac5687f1d91f5f0dcb58ea579d44f4d88c88ff399512641364b6510aa165f378ea3f3feb9af9a0aa9697c7a032fbfc3922038", 0xa9, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000340)="ca523d66415361961345a9e6ac0fb0414c9642588d3735c40357a4a27024c5955b9e10bd610435294818d990c86999ec4e63461f8aca06a212a1a2a64b13309017b75913ca3058fbfed9f7726bac846d3dc08c37a922b3bc6998c1c95ea75a0fee125084f5fa27aad5027800f6fdf775f2a5b6626696f96501c314edc4e13566485afd7aed4a3b7e85e6f313f0f975650f1ae8a41987c715daaea2416e3e10d4431f6c9e22f831012b33587b")

1.2591499s ago: executing program 1 (id=3244):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfeffffff, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.25334944s ago: executing program 2 (id=3245):
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081139000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x57}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

887.440212ms ago: executing program 1 (id=3246):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400)

306.97288ms ago: executing program 0 (id=3247):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000280)=""/175, 0x4c, 0xaf, 0x1, 0x8}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000300), 0x0}, 0x20)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="6cf948ea0b11887343d5ab2f1763c3421bcd01bc6ec33cf247f1e89ffcac34147c82c5aff67b68c75f6bbeef8961f6aa6ec6a966ee36ce8e64393131864c3fedb2f44ba3bd824a3c125a94e0f1fd334ff9", 0x51}], 0x1, &(0x7f00000001c0)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x86, 0x4, "cc5f"}, @rr={0x7, 0x13, 0xb9, [@rand_addr=0x64010100, @remote, @broadcast, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x58}, 0x2000c000)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000100850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

81.844197ms ago: executing program 3 (id=3248):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

0s ago: executing program 2 (id=3249):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x2}, 0x884, 0x0, 0x0, 0x0, 0x800000010000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

_after_hwframe+0x68/0xd2
[  558.039663][T13639] RIP: 0033:0x7f34fe39ce59
[  558.045101][T13639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  558.067840][T13639] RSP: 002b:00007f34ff19f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  558.077225][T13639] RAX: ffffffffffffffda RBX: 00007f34fe615fa0 RCX: 00007f34fe39ce59
[  558.085834][T13639] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000023
[  558.094881][T13639] RBP: 00007f34ff19f090 R08: 0000000000000000 R09: 0000000000000000
[  558.103413][T13639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.112184][T13639] R13: 00007f34fe616038 R14: 00007f34fe615fa0 R15: 00007fff0d655a88
[  558.121919][T13639]  </TASK>
[  558.529518][T13649] netlink: 'syz.0.2431': attribute type 4 has an invalid length.
[  558.543067][T13649] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2431'.
[  558.636350][T13611] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.660078][T13611] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.685528][T13611] bridge_slave_0: entered allmulticast mode
[  558.695354][T13611] bridge_slave_0: entered promiscuous mode
[  558.698297][T13652] netlink: 'syz.3.2432': attribute type 3 has an invalid length.
[  558.722518][T13611] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.732189][T13611] bridge0: port 2(bridge_slave_1) entered disabled state
[  558.744851][T13652] netlink: 'syz.3.2432': attribute type 1 has an invalid length.
[  558.745633][T13611] bridge_slave_1: entered allmulticast mode
[  558.766561][T13611] bridge_slave_1: entered promiscuous mode
[  558.785647][T13652] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2432'.
[  559.072932][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.104385][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.136692][T13192] Bluetooth: hci2: command tx timeout
[  559.803902][T13684] netlink: 'syz.3.2439': attribute type 4 has an invalid length.
[  559.813014][T13684] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2439'.
[  559.854454][T13611] team0: Port device team_slave_0 added
[  559.929864][T13611] team0: Port device team_slave_1 added
[  560.011895][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.025381][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.059080][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  560.086723][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.094276][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  560.138395][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.571997][T13611] hsr_slave_0: entered promiscuous mode
[  560.615047][T13707] FAULT_INJECTION: forcing a failure.
[  560.615047][T13707] name failslab, interval 1, probability 0, space 0, times 0
[  560.617948][T13611] hsr_slave_1: entered promiscuous mode
[  560.629551][T13707] CPU: 1 PID: 13707 Comm: syz.1.2444 Not tainted syzkaller #0
[  560.643470][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  560.654509][T13707] Call Trace:
[  560.658053][T13707]  <TASK>
[  560.661169][T13707]  dump_stack_lvl+0x18c/0x250
[  560.666660][T13707]  ? show_regs_print_info+0x20/0x20
[  560.672492][T13707]  ? load_image+0x420/0x420
[  560.677018][T13707]  ? netdev_core_pick_tx+0x340/0x340
[  560.682783][T13707]  ? rcu_is_watching+0x15/0xb0
[  560.687739][T13707]  should_fail_ex+0x39d/0x4d0
[  560.692515][T13707]  should_failslab+0x9/0x20
[  560.697194][T13707]  slab_pre_alloc_hook+0x59/0x310
[  560.702678][T13707]  kmem_cache_alloc+0x5a/0x2d0
[  560.708171][T13707]  ? skb_clone+0x1eb/0x370
[  560.713021][T13707]  skb_clone+0x1eb/0x370
[  560.717518][T13707]  bpf_clone_redirect+0x167/0x4a0
[  560.722777][T13707]  bpf_prog_b36a1f39e2fdd4f4+0x5e/0x63
[  560.728423][T13707]  ? lock_chain_count+0x20/0x20
[  560.733713][T13707]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  560.739782][T13707]  ? perf_trace_preemptirq_template+0xac/0x330
[  560.746915][T13707]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  560.753212][T13707]  ? lockdep_softirqs_on+0x580/0x580
[  560.760118][T13707]  ? lock_chain_count+0x20/0x20
[  560.765097][T13707]  ? __local_bh_disable_ip+0x108/0x1a0
[  560.770729][T13707]  ? __cant_sleep+0x220/0x220
[  560.775626][T13707]  ? __local_bh_enable_ip+0x13a/0x1c0
[  560.781406][T13707]  ? _local_bh_enable+0xa0/0xa0
[  560.786966][T13707]  ? bpf_test_timer_continue+0x135/0x380
[  560.792948][T13707]  ? bpf_test_run+0x174/0x870
[  560.797801][T13707]  bpf_test_run+0x2df/0x870
[  560.802760][T13707]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  560.809291][T13707]  ? bpf_test_run+0x174/0x870
[  560.814612][T13707]  ? dst_hold+0x70/0x70
[  560.818795][T13707]  ? lockdep_hardirqs_on+0x98/0x150
[  560.824275][T13707]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  560.830970][T13707]  bpf_prog_test_run_skb+0xdc8/0x18c0
[  560.836471][T13707]  ? cpu_online+0x60/0x60
[  560.841097][T13707]  bpf_prog_test_run+0x321/0x390
[  560.846397][T13707]  __sys_bpf+0x49d/0x890
[  560.850735][T13707]  ? bpf_link_show_fdinfo+0x390/0x390
[  560.856579][T13707]  ? lock_chain_count+0x20/0x20
[  560.862212][T13707]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  560.868572][T13707]  __x64_sys_bpf+0x7c/0x90
[  560.873602][T13707]  do_syscall_64+0x55/0xb0
[  560.878471][T13707]  ? clear_bhb_loop+0x40/0x90
[  560.883419][T13707]  ? clear_bhb_loop+0x40/0x90
[  560.888578][T13707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  560.894931][T13707] RIP: 0033:0x7f34fe39ce59
[  560.899624][T13707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  560.920283][T13707] RSP: 002b:00007f34ff17e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  560.928883][T13707] RAX: ffffffffffffffda RBX: 00007f34fe616090 RCX: 00007f34fe39ce59
[  560.937640][T13707] RDX: 0000000000000048 RSI: 0000200000000040 RDI: 000000000000000a
[  560.946117][T13707] RBP: 00007f34ff17e090 R08: 0000000000000000 R09: 0000000000000000
[  560.955229][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  560.963754][T13707] R13: 00007f34fe616128 R14: 00007f34fe616090 R15: 00007fff0d655a88
[  560.972550][T13707]  </TASK>
[  561.042550][T13611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  561.070600][T13611] Cannot create hsr debugfs directory
[  561.112074][T13711] netlink: 'syz.3.2446': attribute type 10 has an invalid length.
[  561.134803][T13711] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2446'.
[  561.222845][T13192] Bluetooth: hci2: command tx timeout
[  561.253862][T10687] hsr_slave_0: left promiscuous mode
[  561.278291][T10687] hsr_slave_1: left promiscuous mode
[  561.304445][T10687] veth1_macvtap: left promiscuous mode
[  561.335967][T10687] veth0_macvtap: left promiscuous mode
[  561.342105][T10687] veth1_vlan: left promiscuous mode
[  561.376603][T10687] veth0_vlan: left promiscuous mode
[  562.153584][T13738] netlink: 'syz.3.2454': attribute type 3 has an invalid length.
[  562.163363][T13738] netlink: 'syz.3.2454': attribute type 1 has an invalid length.
[  562.174322][T13738] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2454'.
[  563.296512][T13192] Bluetooth: hci2: command tx timeout
[  563.386163][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  563.392820][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  565.175717][T10687] team_slave_1 (unregistering): left promiscuous mode
[  565.186630][T10687] team0 (unregistering): Port device team_slave_1 removed
[  565.237931][T10687] team_slave_0 (unregistering): left promiscuous mode
[  565.249981][T10687] team0 (unregistering): Port device team_slave_0 removed
[  565.299157][T10687] .` (unregistering): (slave 
4
@0Ù): Releasing backup interface
[  565.379699][T13192] Bluetooth: hci2: command tx timeout
[  565.652377][T10687] .` (unregistering): Released all slaves
[  565.697940][T13723] netlink: 'syz.1.2449': attribute type 4 has an invalid length.
[  565.706595][T13723] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2449'.
[  566.459277][T13761] netlink: 'syz.3.2459': attribute type 4 has an invalid length.
[  566.500734][T13761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2459'.
[  566.660556][T13771] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2462'.
[  566.918241][T13779] netlink: 'syz.0.2463': attribute type 21 has an invalid length.
[  566.986316][T13779] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2463'.
[  567.209304][T13611] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  567.350356][T13611] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  567.636431][T13777] netlink: 'syz.3.2464': attribute type 3 has an invalid length.
[  567.666347][T13777] netlink: 137972 bytes leftover after parsing attributes in process `syz.3.2464'.
[  569.744066][T13611] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  569.755428][T13611] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  569.994407][T13611] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.065241][T13611] 8021q: adding VLAN 0 to HW filter on device team0
[  570.110096][T10665] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.117621][T10665] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.141984][T10665] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.149697][T10665] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.249725][T13611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  570.292572][T13611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  570.531831][T13817] netlink: 'syz.1.2472': attribute type 4 has an invalid length.
[  570.557302][T13817] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2472'.
[  570.924289][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.049025][T13834] netlink: 'syz.1.2476': attribute type 21 has an invalid length.
[  571.079004][T13834] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2476'.
[  571.173101][T13611] veth0_vlan: entered promiscuous mode
[  571.183413][T13840] netlink: 'syz.3.2477': attribute type 3 has an invalid length.
[  571.231182][T13840] netlink: 'syz.3.2477': attribute type 1 has an invalid length.
[  571.256941][T13611] veth1_vlan: entered promiscuous mode
[  571.279776][T13840] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2477'.
[  571.417561][T13611] veth0_macvtap: entered promiscuous mode
[  571.467009][T13611] veth1_macvtap: entered promiscuous mode
[  571.544314][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.566246][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.597394][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.620681][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.648841][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.674893][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.698847][T13611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.753764][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.796756][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.813180][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.850139][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.865911][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  571.905890][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.928288][T13611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  571.969729][T13611] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  571.997437][T13611] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.016596][T13611] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.042786][T13611] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  574.255106][T10687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.286911][T10687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.341295][T10671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  574.365473][T10671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  574.673701][T13876] netlink: 'syz.2.2411': attribute type 3 has an invalid length.
[  574.696746][T13876] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2411'.
[  576.192918][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  576.203792][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  576.222584][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  576.232339][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  576.257655][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  576.265495][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  576.934104][T13912] chnl_net:caif_netlink_parms(): no params data found
[  577.194705][T13912] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.227916][T13912] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.235559][T13912] bridge_slave_0: entered allmulticast mode
[  577.244318][T13912] bridge_slave_0: entered promiscuous mode
[  577.254966][T13912] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.286714][T13912] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.294369][T13912] bridge_slave_1: entered allmulticast mode
[  577.318185][T13912] bridge_slave_1: entered promiscuous mode
[  577.402417][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.424504][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.509189][T13912] team0: Port device team_slave_0 added
[  577.574471][T13912] team0: Port device team_slave_1 added
[  577.637478][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.663384][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.768027][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.872800][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.900501][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  577.943320][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.154037][T13912] hsr_slave_0: entered promiscuous mode
[  578.188288][T13912] hsr_slave_1: entered promiscuous mode
[  578.245093][T13912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  578.269643][T13912] Cannot create hsr debugfs directory
[  578.336995][T13192] Bluetooth: hci3: command tx timeout
[  578.740598][T13912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.816206][T13983] netlink: 'syz.0.2516': attribute type 21 has an invalid length.
[  578.824487][T13983] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2516'.
[  578.941080][T13912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.123868][T13912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.354988][T13912] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.694788][T13912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  579.730467][T13912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  579.749792][T13912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  579.770522][T13912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  579.986487][T13912] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.030498][T13912] 8021q: adding VLAN 0 to HW filter on device team0
[  580.061655][T10687] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.069316][T10687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.122939][T10687] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.130244][T10687] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.252874][T13912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  580.391883][T14019] netlink: 'syz.2.2529': attribute type 21 has an invalid length.
[  580.416192][T13192] Bluetooth: hci3: command tx timeout
[  580.423771][T14019] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2529'.
[  581.069130][T13912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.204834][T13912] veth0_vlan: entered promiscuous mode
[  581.254556][T13912] veth1_vlan: entered promiscuous mode
[  581.358558][T13912] veth0_macvtap: entered promiscuous mode
[  581.378087][T13912] veth1_macvtap: entered promiscuous mode
[  581.440393][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.465318][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.481898][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.493561][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.512830][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.532707][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.544624][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  581.556314][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.571123][T13912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  581.607320][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.621111][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.632571][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.644019][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.656072][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.668954][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.679384][T13912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  581.690411][T13912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  581.717059][T13912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  581.777663][T13912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  581.791596][T13912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  581.815317][T13912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  581.825574][T13912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  581.924395][T14049] netlink: 'syz.0.2543': attribute type 4 has an invalid length.
[  581.946551][T14049] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2543'.
[  582.085710][T14055] netlink: 'syz.2.2546': attribute type 4 has an invalid length.
[  582.107107][T14055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2546'.
[  582.144934][T14055] .`: renamed from bond0 (while UP)
[  582.170766][T14056] FAULT_INJECTION: forcing a failure.
[  582.170766][T14056] name failslab, interval 1, probability 0, space 0, times 0
[  582.171839][T10665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.205487][T10665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.211520][T14056] CPU: 1 PID: 14056 Comm: syz.3.2545 Not tainted syzkaller #0
[  582.221418][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  582.232152][T14056] Call Trace:
[  582.235449][T14056]  <TASK>
[  582.238634][T14056]  dump_stack_lvl+0x18c/0x250
[  582.243321][T14056]  ? show_regs_print_info+0x20/0x20
[  582.249052][T14056]  ? load_image+0x420/0x420
[  582.253835][T14056]  ? __might_sleep+0xe0/0xe0
[  582.258439][T14056]  ? __lock_acquire+0x7d40/0x7d40
[  582.263770][T14056]  should_fail_ex+0x39d/0x4d0
[  582.268938][T14056]  should_failslab+0x9/0x20
[  582.273650][T14056]  slab_pre_alloc_hook+0x59/0x310
[  582.279011][T14056]  ? finish_task_switch+0x265/0x8f0
[  582.284292][T14056]  ? rtnl_newlink+0x10d/0x20a0
[  582.289405][T14056]  __kmem_cache_alloc_node+0x53/0x250
[  582.295574][T14056]  ? rtnl_newlink+0x10d/0x20a0
[  582.300902][T14056]  kmalloc_trace+0x2a/0xe0
[  582.305694][T14056]  ? rtnl_setlink+0x4e0/0x4e0
[  582.310850][T14056]  rtnl_newlink+0x10d/0x20a0
[  582.316176][T14056]  ? __mutex_lock+0x94c/0xcc0
[  582.321350][T14056]  ? __mutex_lock+0x94c/0xcc0
[  582.326495][T14056]  ? __lock_acquire+0x7d40/0x7d40
[  582.332147][T14056]  ? do_raw_spin_lock+0x11f/0x2c0
[  582.337545][T14056]  ? rtnl_setlink+0x4e0/0x4e0
[  582.342360][T14056]  ? __rwlock_init+0x150/0x150
[  582.347223][T14056]  ? do_raw_spin_unlock+0x121/0x230
[  582.353114][T14056]  ? __mutex_lock+0x956/0xcc0
[  582.358453][T14056]  ? __mutex_lock+0x4f9/0xcc0
[  582.363860][T14056]  ? rtnetlink_rcv_msg+0x811/0xfa0
[  582.369421][T14056]  ? mutex_lock_nested+0x20/0x20
[  582.374746][T14056]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  582.380227][T14056]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  582.385880][T14056]  ? rtnl_setlink+0x4e0/0x4e0
[  582.391034][T14056]  rtnetlink_rcv_msg+0x869/0xfa0
[  582.396872][T14056]  ? rtnetlink_bind+0x80/0x80
[  582.401571][T14056]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  582.408008][T14056]  ? __dev_queue_xmit+0x265/0x3660
[  582.413257][T14056]  ? lock_chain_count+0x20/0x20
[  582.418481][T14056]  ? __local_bh_enable_ip+0x13a/0x1c0
[  582.424501][T14056]  ? lockdep_hardirqs_on+0x98/0x150
[  582.429797][T14056]  ? __local_bh_enable_ip+0x13a/0x1c0
[  582.436868][T14056]  ? _local_bh_enable+0xa0/0xa0
[  582.442434][T14056]  ? __dev_queue_xmit+0x265/0x3660
[  582.448263][T14056]  ? __dev_queue_xmit+0x265/0x3660
[  582.454531][T14056]  ? __dev_queue_xmit+0x1b2c/0x3660
[  582.460552][T14056]  ? __dev_queue_xmit+0x265/0x3660
[  582.466707][T14056]  ? perf_trace_lock+0xfc/0x3b0
[  582.472058][T14056]  netlink_rcv_skb+0x241/0x4d0
[  582.477399][T14056]  ? rtnetlink_bind+0x80/0x80
[  582.482369][T14056]  ? netlink_ack+0x1180/0x1180
[  582.487426][T14056]  ? __lock_acquire+0x7d40/0x7d40
[  582.493162][T14056]  ? netlink_deliver_tap+0x2e/0x1b0
[  582.499075][T14056]  netlink_unicast+0x751/0x8d0
[  582.504048][T14056]  netlink_sendmsg+0x8d0/0xbf0
[  582.509029][T14056]  ? netlink_getsockopt+0x590/0x590
[  582.514423][T14056]  ? aa_sock_msg_perm+0x94/0x150
[  582.519982][T14056]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  582.525541][T14056]  ? security_socket_sendmsg+0x80/0xa0
[  582.531306][T14056]  ? netlink_getsockopt+0x590/0x590
[  582.536881][T14056]  ____sys_sendmsg+0x5ba/0x960
[  582.542207][T14056]  ? __asan_memset+0x22/0x40
[  582.546997][T14056]  ? __sys_sendmsg_sock+0x30/0x30
[  582.552214][T14056]  ? __import_iovec+0x5f2/0x850
[  582.557261][T14056]  ? import_iovec+0x73/0xa0
[  582.561946][T14056]  ___sys_sendmsg+0x2a6/0x360
[  582.566808][T14056]  ? __sys_sendmsg+0x2a0/0x2a0
[  582.571679][T14056]  ? __lock_acquire+0x7d40/0x7d40
[  582.577075][T14056]  __se_sys_sendmsg+0x1c2/0x2b0
[  582.582291][T14056]  ? __x64_sys_sendmsg+0x80/0x80
[  582.587898][T14056]  ? lockdep_hardirqs_on+0x98/0x150
[  582.593569][T14056]  do_syscall_64+0x55/0xb0
[  582.598507][T14056]  ? clear_bhb_loop+0x40/0x90
[  582.603280][T14056]  ? clear_bhb_loop+0x40/0x90
[  582.608414][T14056]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  582.614892][T14056] RIP: 0033:0x7f377e79ce59
[  582.619663][T14056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.640063][T14056] RSP: 002b:00007f377f6d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  582.648844][T14056] RAX: ffffffffffffffda RBX: 00007f377ea15fa0 RCX: 00007f377e79ce59
[  582.657600][T14056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  582.665923][T14056] RBP: 00007f377f6d6090 R08: 0000000000000000 R09: 0000000000000000
[  582.674087][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.682808][T14056] R13: 00007f377ea16038 R14: 00007f377ea15fa0 R15: 00007ffeb40f53a8
[  582.691163][T14056]  </TASK>
[  582.706901][T13192] Bluetooth: hci3: command tx timeout
[  582.749648][T14064] netlink: 'syz.0.2547': attribute type 21 has an invalid length.
[  582.757895][T14064] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2547'.
[  582.847995][T10665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.861961][T10665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.259303][T14076] netlink: 'syz.1.2488': attribute type 3 has an invalid length.
[  583.372966][T14076] netlink: 'syz.1.2488': attribute type 1 has an invalid length.
[  583.465393][T14076] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2488'.
[  584.735965][T13192] Bluetooth: hci3: command tx timeout
[  585.739393][T14085] netlink: 'syz.2.2554': attribute type 4 has an invalid length.
[  585.927787][T14085] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2554'.
[  586.069905][T14091] netlink: 'syz.1.2557': attribute type 4 has an invalid length.
[  586.116266][T14091] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2557'.
[  586.215016][T14091] .`: renamed from bond0 (while UP)
[  586.702161][T14106] netlink: 'syz.1.2560': attribute type 21 has an invalid length.
[  586.728210][T14106] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2560'.
[  587.609307][T14118] netlink: 'syz.0.2565': attribute type 3 has an invalid length.
[  587.625975][T14118] netlink: 'syz.0.2565': attribute type 1 has an invalid length.
[  587.663081][T14123] netlink: 'syz.1.2567': attribute type 4 has an invalid length.
[  587.667047][T14118] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2565'.
[  587.675908][T14123] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2567'.
[  588.028695][T14130] netlink: 'syz.2.2569': attribute type 10 has an invalid length.
[  588.043676][T14130] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2569'.
[  588.141504][T14135] netlink: 'syz.2.2569': attribute type 4 has an invalid length.
[  588.519179][T14146] netlink: 'syz.0.2575': attribute type 21 has an invalid length.
[  588.556513][T14146] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2575'.
[  588.573670][T14139] netlink: 'syz.3.2573': attribute type 9 has an invalid length.
[  589.408188][T14157] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2579'.
[  590.187312][T14170] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2583'.
[  591.242274][T14182] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2587'.
[  591.375119][T14184] netlink: 10879 bytes leftover after parsing attributes in process `syz.1.2587'.
[  593.083973][T14189] validate_nla: 3 callbacks suppressed
[  593.084000][T14189] netlink: 'syz.0.2588': attribute type 21 has an invalid length.
[  593.127614][T14189] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2588'.
[  593.169881][T14192] netlink: 'syz.3.2589': attribute type 4 has an invalid length.
[  593.196531][T14192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2589'.
[  593.935720][T14204] : renamed from ip6gretap0 (while UP)
[  594.194211][T14213] netlink: 'syz.3.2599': attribute type 9 has an invalid length.
[  594.263351][T14217] netlink: 'syz.3.2599': attribute type 9 has an invalid length.
[  594.333796][T14215] netlink: 'syz.1.2598': attribute type 3 has an invalid length.
[  594.372504][T14215] netlink: 'syz.1.2598': attribute type 1 has an invalid length.
[  594.417687][T14221] netlink: 'syz.0.2601': attribute type 4 has an invalid length.
[  594.426745][T14215] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2598'.
[  594.455928][T14221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2601'.
[  597.446170][T14236] netlink: 'syz.1.2607': attribute type 10 has an invalid length.
[  597.990399][T14236] team0: Device nlmon0 is of different type
[  598.418462][T14236] syz.1.2607 (14236) used greatest stack depth: 18632 bytes left
[  598.695321][T14258] netlink: 'syz.2.2614': attribute type 4 has an invalid length.
[  598.725991][T14258] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2614'.
[  599.136485][T14269] netlink: 'syz.0.2616': attribute type 3 has an invalid length.
[  599.145045][T14269] netlink: 'syz.0.2616': attribute type 1 has an invalid length.
[  599.191420][T14269] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2616'.
[  599.942152][T14277] netlink: 'syz.3.2621': attribute type 15 has an invalid length.
[  600.896827][T14286] netlink: 'syz.3.2623': attribute type 15 has an invalid length.
[  600.931466][T14288] netlink: 'syz.0.2624': attribute type 9 has an invalid length.
[  600.941257][T14288] netlink: 391 bytes leftover after parsing attributes in process `syz.0.2624'.
[  601.005604][T14293] netlink: 'syz.2.2625': attribute type 4 has an invalid length.
[  601.031331][T14293] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2625'.
[  601.564036][T14303] netlink: 'syz.2.2630': attribute type 3 has an invalid length.
[  601.574434][T14303] netlink: 'syz.2.2630': attribute type 1 has an invalid length.
[  601.584841][T14303] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2630'.
[  602.333387][T14323] netlink: 'syz.3.2636': attribute type 10 has an invalid length.
[  604.324429][T14323] team0: Device nlmon0 is of different type
[  604.535267][T14326] netlink: 'syz.2.2638': attribute type 4 has an invalid length.
[  604.550544][T14326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2638'.
[  604.824828][T14336] netlink: 'syz.1.2644': attribute type 4 has an invalid length.
[  604.848608][T14336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2644'.
[  604.873634][T14336] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check.
[  604.898349][T14338] netlink: 'syz.2.2645': attribute type 10 has an invalid length.
[  604.906669][T14338] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2645'.
[  604.940660][T14338] netlink: 'syz.2.2645': attribute type 4 has an invalid length.
[  605.214072][T14354] netlink: 'syz.1.2651': attribute type 4 has an invalid length.
[  605.224116][T14354] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2651'.
[  605.532127][T14343] netlink: 'syz.0.2647': attribute type 3 has an invalid length.
[  605.542169][T14343] netlink: 137972 bytes leftover after parsing attributes in process `syz.0.2647'.
[  608.154330][T14373] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2653'.
[  608.171536][T14373] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2653'.
[  608.184990][T14373] .`: (slave bond_slave_0): Releasing backup interface
[  608.198712][T14373] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  608.267220][T14376] netlink: 'syz.3.2657': attribute type 2 has an invalid length.
[  608.275243][T14376] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2657'.
[  608.441379][T14381] netlink: 'syz.1.2660': attribute type 4 has an invalid length.
[  608.454649][T14381] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2660'.
[  608.566770][T14383] netlink: 'syz.0.2661': attribute type 10 has an invalid length.
[  608.596118][T14383] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2661'.
[  608.638375][T14383] hsr0: entered promiscuous mode
[  608.659842][T14383] bridge0: port 3(hsr0) entered blocking state
[  608.675743][T14383] bridge0: port 3(hsr0) entered disabled state
[  608.698598][T14383] hsr0: entered allmulticast mode
[  608.712379][T14383] hsr_slave_0: entered allmulticast mode
[  608.721765][T14383] hsr_slave_1: entered allmulticast mode
[  608.811878][T14383] bridge0: port 3(hsr0) entered blocking state
[  608.821080][T14383] bridge0: port 3(hsr0) entered forwarding state
[  608.869765][T14391] netlink: 'syz.3.2663': attribute type 3 has an invalid length.
[  614.224064][T14410] __nla_validate_parse: 1 callbacks suppressed
[  614.224101][T14410] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2669'.
[  614.494872][T14419] validate_nla: 1 callbacks suppressed
[  614.494889][T14419] netlink: 'syz.2.2671': attribute type 10 has an invalid length.
[  614.534306][T14419] team0: Device nlmon0 is of different type
[  614.593241][T14415] netlink: 'syz.1.2670': attribute type 4 has an invalid length.
[  614.612564][T14415] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2670'.
[  615.269190][T14427] netlink: 'syz.3.2674': attribute type 3 has an invalid length.
[  615.331759][T14427] netlink: 'syz.3.2674': attribute type 1 has an invalid length.
[  615.375010][T14427] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2674'.
[  618.373231][T14451] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2679'.
[  618.383969][T14451] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2679'.
[  618.404429][T14451] .`: (slave bond_slave_0): Releasing backup interface
[  618.433985][T14451] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  618.599840][T14455] netlink: 'syz.1.2683': attribute type 4 has an invalid length.
[  618.612478][T14455] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2683'.
[  619.061883][T14472] netlink: 'syz.2.2687': attribute type 3 has an invalid length.
[  619.082908][T14472] netlink: 'syz.2.2687': attribute type 1 has an invalid length.
[  619.101046][T14472] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2687'.
[  624.825441][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  624.832101][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  626.311971][T14467] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.320048][T14467] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.329873][T14467] bridge0: entered allmulticast mode
[  626.350056][T14471] bridge_slave_1: left allmulticast mode
[  626.356957][T14471] bridge_slave_1: left promiscuous mode
[  626.363514][T14471] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.373979][T14471] bridge_slave_0: left allmulticast mode
[  626.380186][T14471] bridge_slave_0: left promiscuous mode
[  626.393652][T14471] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.834232][T14495] netlink: 'syz.0.2694': attribute type 4 has an invalid length.
[  626.845512][T14495] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2694'.
[  627.567062][T14509] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2698'.
[  627.780339][T14514] netlink: 'syz.3.2699': attribute type 3 has an invalid length.
[  627.802625][T14514] netlink: 'syz.3.2699': attribute type 1 has an invalid length.
[  627.861091][T14514] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2699'.
[  635.718689][T14543] netlink: 'syz.3.2706': attribute type 4 has an invalid length.
[  635.742363][T14543] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2706'.
[  636.328755][T14548] netlink: 'syz.1.2709': attribute type 10 has an invalid length.
[  636.388562][T14548] team0: Device nlmon0 is of different type
[  636.674615][T14556] netlink: 'syz.0.2710': attribute type 10 has an invalid length.
[  636.772933][T14556] team0: Device nlmon0 is of different type
[  640.135406][T14575] netlink: 'syz.0.2717': attribute type 4 has an invalid length.
[  640.147275][T14575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2717'.
[  640.385831][T14582] netlink: 'syz.0.2720': attribute type 4 has an invalid length.
[  640.394708][T14582] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2720'.
[  640.746453][T14592] netlink: 'syz.3.2721': attribute type 3 has an invalid length.
[  640.754657][T14592] netlink: 'syz.3.2721': attribute type 1 has an invalid length.
[  640.773272][T14592] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2721'.
[  640.792413][T14583] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2718'.
[  640.885994][T14583] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2718'.
[  643.516642][T14583] .`: (slave bond_slave_0): Releasing backup interface
[  643.534987][T14583] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  646.977765][T14608] netlink: 'syz.3.2728': attribute type 4 has an invalid length.
[  646.998467][T14608] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2728'.
[  647.267359][T14614] netlink: 'syz.3.2730': attribute type 4 has an invalid length.
[  647.296775][T14614] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2730'.
[  647.468115][T14618] netlink: 'syz.1.2733': attribute type 10 has an invalid length.
[  647.499873][T14618] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2733'.
[  647.619782][T14623] netlink: 'syz.1.2733': attribute type 4 has an invalid length.
[  647.629290][T14622] netlink: 'syz.3.2734': attribute type 10 has an invalid length.
[  647.642566][T14622] team0: Device nlmon0 is of different type
[  648.121336][T14635] netlink: 'syz.0.2738': attribute type 4 has an invalid length.
[  648.146794][T14635] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2738'.
[  648.543604][T14646] netlink: 'syz.2.2742': attribute type 4 has an invalid length.
[  648.553182][T14646] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2742'.
[  648.564743][T14648] netlink: 'syz.1.2744': attribute type 6 has an invalid length.
[  648.575938][T14648] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2744'.
[  648.720811][T14651] netlink: 'syz.1.2744': attribute type 13 has an invalid length.
[  648.772890][T10669] hsr_slave_0: left promiscuous mode
[  648.810426][T10669] hsr_slave_1: left promiscuous mode
[  648.840230][T10669] hsr_slave_0: left promiscuous mode
[  648.853055][T10669] hsr_slave_1: left promiscuous mode
[  648.888606][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.918778][T10669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.933923][T10669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.942261][T10669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.951122][T10669] bridge_slave_0: left promiscuous mode
[  648.959340][T10669] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.025242][T10669] veth0_macvtap: left promiscuous mode
[  649.033285][T10669] veth1_macvtap: left promiscuous mode
[  649.040994][T10669] veth0_macvtap: left promiscuous mode
[  649.047442][T10669] veth1_vlan: left promiscuous mode
[  649.053996][T10669] veth0_vlan: left promiscuous mode
[  649.934193][T10669] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  650.013089][T10669] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  650.444189][T10669] .` (unregistering): Released all slaves
[  651.050808][T10669] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.147900][T10669] .` (unregistering): (slave bridge_slave_1): Releasing backup interface
[  651.472006][T10669] .` (unregistering): (slave bridge0): Releasing backup interface
[  651.482410][T10669] .` (unregistering): Released all slaves
[  651.582697][T14645] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2740'.
[  651.651263][T14661] netlink: 'syz.2.2747': attribute type 10 has an invalid length.
[  651.661208][T14661] team0: Device nlmon0 is of different type
[  652.496047][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  653.995394][T14664] netlink: 'syz.3.2748': attribute type 4 has an invalid length.
[  654.003916][T14664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2748'.
[  654.216797][T14673] netlink: 'syz.2.2750': attribute type 10 has an invalid length.
[  654.224961][T14673] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2750'.
[  654.322260][T14677] netlink: 'syz.2.2750': attribute type 4 has an invalid length.
[  654.369748][T14671] netlink: 'syz.1.2758': attribute type 4 has an invalid length.
[  654.379752][T14671] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2758'.
[  654.447650][T14671] sit0: entered allmulticast mode
[  654.545327][T14678] sit0: entered promiscuous mode
[  654.635814][T14683] netlink: 'syz.3.2753': attribute type 4 has an invalid length.
[  654.657504][T14683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2753'.
[  655.908060][T14695] netlink: 'syz.3.2760': attribute type 4 has an invalid length.
[  655.941346][T14695] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2760'.
[  656.362211][T14705] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2761'.
[  656.748708][T14721] netlink: 'syz.0.2767': attribute type 10 has an invalid length.
[  656.762050][T14721] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2767'.
[  656.848649][T14718] netlink: 'syz.3.2766': attribute type 4 has an invalid length.
[  656.859158][T14718] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2766'.
[  656.872408][T14723] netlink: 'syz.0.2767': attribute type 4 has an invalid length.
[  656.893736][T14727] sit0: entered allmulticast mode
[  658.619196][T14737] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2770'.
[  658.631861][T14737] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  658.643580][T14737] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  660.708824][T14718] sit0: entered promiscuous mode
[  660.905246][T14742] netlink: 'syz.0.2772': attribute type 4 has an invalid length.
[  660.934632][T14742] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2772'.
[  661.093154][T14746] FAULT_INJECTION: forcing a failure.
[  661.093154][T14746] name failslab, interval 1, probability 0, space 0, times 0
[  661.133478][T14746] CPU: 0 PID: 14746 Comm: syz.3.2773 Not tainted syzkaller #0
[  661.141366][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  661.152257][T14746] Call Trace:
[  661.155578][T14746]  <TASK>
[  661.158646][T14746]  dump_stack_lvl+0x18c/0x250
[  661.163458][T14746]  ? show_regs_print_info+0x20/0x20
[  661.168956][T14746]  ? load_image+0x420/0x420
[  661.173475][T14746]  ? __might_sleep+0xe0/0xe0
[  661.178068][T14746]  ? __lock_acquire+0x7d40/0x7d40
[  661.183315][T14746]  should_fail_ex+0x39d/0x4d0
[  661.188304][T14746]  should_failslab+0x9/0x20
[  661.192913][T14746]  slab_pre_alloc_hook+0x59/0x310
[  661.198415][T14746]  kmem_cache_alloc+0x5a/0x2d0
[  661.203974][T14746]  ? copy_signal+0x50/0x680
[  661.209445][T14746]  copy_signal+0x50/0x680
[  661.214382][T14746]  copy_process+0x169c/0x3dc0
[  661.219596][T14746]  ? copy_process+0x96e/0x3dc0
[  661.224656][T14746]  ? __pidfd_prepare+0x140/0x140
[  661.230071][T14746]  kernel_clone+0x24b/0x8a0
[  661.235137][T14746]  ? create_io_thread+0x190/0x190
[  661.240185][T14746]  ? perf_trace_preemptirq_template+0x269/0x330
[  661.246880][T14746]  __x64_sys_clone+0x1b7/0x230
[  661.251830][T14746]  ? __ia32_sys_vfork+0x140/0x140
[  661.257064][T14746]  ? syscall_enter_from_user_mode+0x2e/0x80
[  661.263419][T14746]  do_syscall_64+0x55/0xb0
[  661.267959][T14746]  ? clear_bhb_loop+0x40/0x90
[  661.272921][T14746]  ? clear_bhb_loop+0x40/0x90
[  661.277895][T14746]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  661.284064][T14746] RIP: 0033:0x7f377e79ce59
[  661.288863][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  661.309765][T14746] RSP: 002b:00007f377f6d5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  661.319222][T14746] RAX: ffffffffffffffda RBX: 00007f377ea15fa0 RCX: 00007f377e79ce59
[  661.327971][T14746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  661.336297][T14746] RBP: 00007f377f6d6090 R08: 0000000000000000 R09: 0000000000000000
[  661.344976][T14746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  661.353032][T14746] R13: 00007f377ea16038 R14: 00007f377ea15fa0 R15: 00007ffeb40f53a8
[  661.361150][T14746]  </TASK>
[  661.632536][T14758] raw_sendmsg: syz.2.2779 forgot to set AF_INET. Fix it!
[  661.815582][T14760] netlink: 'syz.0.2780': attribute type 4 has an invalid length.
[  661.831050][T14760] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2780'.
[  661.904350][T14760] sit0: entered allmulticast mode
[  662.024015][T14766] sit0: entered promiscuous mode
[  662.295897][T14774] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2782'.
[  662.573457][T14779] netlink: 'syz.1.2784': attribute type 4 has an invalid length.
[  662.586309][T14779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2784'.
[  662.736441][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  671.089990][T14809] netlink: 'syz.0.2795': attribute type 4 has an invalid length.
[  671.106214][T14809] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2795'.
[  671.337630][T14810] netlink: 'syz.2.2794': attribute type 4 has an invalid length.
[  671.351154][T14810] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2794'.
[  671.413328][T14810] sit0: entered allmulticast mode
[  671.527913][T14817] sit0: entered promiscuous mode
[  671.617725][T14823] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2799'.
[  671.692881][T14819] netlink: 'syz.0.2798': attribute type 3 has an invalid length.
[  671.717705][T14819] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  671.726543][T14819] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2798'.
[  671.819861][T14828] netlink: 'syz.1.2800': attribute type 10 has an invalid length.
[  671.862148][T14828] team0: Device nlmon0 is of different type
[  672.247139][T14832] netlink: 'syz.2.2803': attribute type 4 has an invalid length.
[  672.256696][T14832] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2803'.
[  674.586004][T14844] netlink: 'syz.0.2807': attribute type 4 has an invalid length.
[  674.594157][T14844] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2807'.
[  674.845219][T14850] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2805'.
[  675.087057][T14863] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.2813'.
[  680.312621][T14874] netlink: 'syz.3.2817': attribute type 4 has an invalid length.
[  680.321143][T14874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2817'.
[  680.532681][T14883] netlink: 'syz.3.2819': attribute type 10 has an invalid length.
[  680.622114][T14883] team0: Device nlmon0 is of different type
[  680.971535][T14894] netlink: 'syz.3.2824': attribute type 10 has an invalid length.
[  681.059063][T14894] team0: Device nlmon0 is of different type
[  681.202235][T14903] netlink: 'syz.2.2827': attribute type 4 has an invalid length.
[  681.213173][T14903] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2827'.
[  681.350676][T14899] netlink: 'syz.1.2825': attribute type 27 has an invalid length.
[  681.962000][T14913] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2829'.
[  682.043469][T14915] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.081597][T14921] netlink: 'syz.0.2832': attribute type 4 has an invalid length.
[  682.107924][T14921] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2832'.
[  682.124203][T14919] netlink: 'syz.1.2833': attribute type 10 has an invalid length.
[  682.151545][T14919] team0: Device nlmon0 is of different type
[  682.286689][T14925] netlink: 'syz.0.2834': attribute type 5 has an invalid length.
[  682.415314][T14925] netlink: 'syz.0.2834': attribute type 1 has an invalid length.
[  682.466549][T14925] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2834'.
[  683.216137][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  684.712773][T14930] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2835'.
[  684.876777][T14946] C: renamed from team_slave_0 (while UP)
[  684.891121][T14946] netlink: 'syz.0.2840': attribute type 3 has an invalid length.
[  684.935885][T14946] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2840'.
[  685.087767][T14950] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2842'.
[  686.296462][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  686.302942][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  686.367847][T14952] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2843'.
[  687.376665][T14958] validate_nla: 1 callbacks suppressed
[  687.376682][T14958] netlink: 'syz.2.2844': attribute type 10 has an invalid length.
[  687.416002][T14958] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2844'.
[  687.434275][T14964] netlink: 'syz.2.2844': attribute type 4 has an invalid length.
[  687.489927][T14962] netlink: 'syz.1.2846': attribute type 10 has an invalid length.
[  687.541674][T14962] team0: Device nlmon0 is of different type
[  688.015230][T14977] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2850'.
[  688.162258][T14982] netlink: 'syz.1.2853': attribute type 4 has an invalid length.
[  688.321760][T14985] netlink: 'syz.2.2855': attribute type 4 has an invalid length.
[  688.381201][T14985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2855'.
[  688.697785][T14996] FAULT_INJECTION: forcing a failure.
[  688.697785][T14996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.717790][T14996] CPU: 1 PID: 14996 Comm: syz.3.2859 Not tainted syzkaller #0
[  688.726449][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  688.736965][T14996] Call Trace:
[  688.740711][T14996]  <TASK>
[  688.743918][T14996]  dump_stack_lvl+0x18c/0x250
[  688.748701][T14996]  ? show_regs_print_info+0x20/0x20
[  688.754617][T14996]  ? load_image+0x420/0x420
[  688.759545][T14996]  ? __might_fault+0xaa/0x120
[  688.764337][T14996]  ? __lock_acquire+0x7d40/0x7d40
[  688.770121][T14996]  should_fail_ex+0x39d/0x4d0
[  688.775683][T14996]  _copy_from_iter+0x1d9/0x12e0
[  688.780818][T14996]  ? slab_post_alloc_hook+0x8a/0x4b0
[  688.786592][T14996]  ? __virt_addr_valid+0x18c/0x540
[  688.791910][T14996]  ? __lock_acquire+0x7d40/0x7d40
[  688.796953][T14996]  ? rcu_is_watching+0x15/0xb0
[  688.801815][T14996]  ? copyout_mc+0x70/0x70
[  688.806238][T14996]  ? __virt_addr_valid+0x18c/0x540
[  688.811584][T14996]  ? __virt_addr_valid+0x18c/0x540
[  688.817089][T14996]  ? __virt_addr_valid+0x469/0x540
[  688.822470][T14996]  ? __check_object_size+0x506/0xa20
[  688.828681][T14996]  netlink_sendmsg+0x76b/0xbf0
[  688.833655][T14996]  ? netlink_getsockopt+0x590/0x590
[  688.839201][T14996]  ? aa_sock_msg_perm+0x94/0x150
[  688.844377][T14996]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  688.849986][T14996]  ? security_socket_sendmsg+0x80/0xa0
[  688.855960][T14996]  ? netlink_getsockopt+0x590/0x590
[  688.861958][T14996]  ____sys_sendmsg+0x5ba/0x960
[  688.867114][T14996]  ? __asan_memset+0x22/0x40
[  688.872209][T14996]  ? __sys_sendmsg_sock+0x30/0x30
[  688.877415][T14996]  ? __import_iovec+0x5f2/0x850
[  688.882460][T14996]  ? import_iovec+0x73/0xa0
[  688.887418][T14996]  ___sys_sendmsg+0x2a6/0x360
[  688.892283][T14996]  ? __sys_sendmsg+0x2a0/0x2a0
[  688.897441][T14996]  ? __lock_acquire+0x7d40/0x7d40
[  688.902583][T14996]  __se_sys_sendmsg+0x1c2/0x2b0
[  688.907807][T14996]  ? __x64_sys_sendmsg+0x80/0x80
[  688.913211][T14996]  ? lockdep_hardirqs_on+0x98/0x150
[  688.918959][T14996]  do_syscall_64+0x55/0xb0
[  688.923755][T14996]  ? clear_bhb_loop+0x40/0x90
[  688.928958][T14996]  ? clear_bhb_loop+0x40/0x90
[  688.934106][T14996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  688.940276][T14996] RIP: 0033:0x7f377e79ce59
[  688.944870][T14996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.965191][T14996] RSP: 002b:00007f377f6b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  688.974147][T14996] RAX: ffffffffffffffda RBX: 00007f377ea16090 RCX: 00007f377e79ce59
[  688.982382][T14996] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  688.990795][T14996] RBP: 00007f377f6b5090 R08: 0000000000000000 R09: 0000000000000000
[  688.999120][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.007694][T14996] R13: 00007f377ea16128 R14: 00007f377ea16090 R15: 00007ffeb40f53a8
[  689.016120][T14996]  </TASK>
[  691.130482][T14994] netlink: 'syz.2.2858': attribute type 10 has an invalid length.
[  691.141800][T14994] team0: Device nlmon0 is of different type
[  691.156823][T14993] netlink: 'syz.3.2859': attribute type 6 has an invalid length.
[  691.165096][T14993] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2859'.
[  691.244873][T15000] netlink: 'syz.2.2861': attribute type 10 has an invalid length.
[  691.266283][T15000] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2861'.
[  691.280879][T15000] hsr0: entered promiscuous mode
[  691.292236][T15000] bridge0: port 3(hsr0) entered blocking state
[  691.315915][T15000] bridge0: port 3(hsr0) entered disabled state
[  691.322724][T15000] hsr0: entered allmulticast mode
[  691.372128][T15000] hsr_slave_0: entered allmulticast mode
[  691.419981][T15000] hsr_slave_1: entered allmulticast mode
[  691.429677][T15000] bridge0: port 3(hsr0) entered blocking state
[  691.436336][T15000] bridge0: port 3(hsr0) entered forwarding state
[  691.446382][T15004] netlink: 'syz.0.2863': attribute type 10 has an invalid length.
[  691.455773][T15004] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2863'.
[  691.497139][T15004] netlink: 'syz.0.2863': attribute type 4 has an invalid length.
[  691.741325][T15016] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2866'.
[  691.904664][T15020] team0: Device nlmon0 is of different type
[  691.943787][T15022] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2868'.
[  691.981117][T15022] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.002693][T15022] .` (unregistering): Released all slaves
[  692.029213][T15023] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2868'.
[  692.159213][T15025] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.183421][T15025] .` (unregistering): Released all slaves
[  692.206802][T15026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2870'.
[  692.440716][T15038] validate_nla: 4 callbacks suppressed
[  692.440733][T15038] netlink: 'syz.3.2875': attribute type 6 has an invalid length.
[  692.468642][T15038] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2875'.
[  692.730124][T15040] netlink: 'syz.0.2876': attribute type 4 has an invalid length.
[  692.766996][T15040] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2876'.
[  692.789253][T15046] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2872'.
[  692.887782][T15049] FAULT_INJECTION: forcing a failure.
[  692.887782][T15049] name failslab, interval 1, probability 0, space 0, times 0
[  692.903096][T15049] CPU: 0 PID: 15049 Comm: syz.3.2878 Not tainted syzkaller #0
[  692.911039][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  692.921911][T15049] Call Trace:
[  692.925195][T15049]  <TASK>
[  692.928215][T15049]  dump_stack_lvl+0x18c/0x250
[  692.933253][T15049]  ? verify_lock_unused+0x140/0x140
[  692.938638][T15049]  ? show_regs_print_info+0x20/0x20
[  692.944030][T15049]  ? load_image+0x420/0x420
[  692.948807][T15049]  ? trace_event_raw_event_lock+0x250/0x250
[  692.954799][T15049]  should_fail_ex+0x39d/0x4d0
[  692.959937][T15049]  should_failslab+0x9/0x20
[  692.964554][T15049]  slab_pre_alloc_hook+0x59/0x310
[  692.969793][T15049]  kmem_cache_alloc+0x5a/0x2d0
[  692.975485][T15049]  ? skb_clone+0x1eb/0x370
[  692.980040][T15049]  skb_clone+0x1eb/0x370
[  692.984379][T15049]  ? pfkey_broadcast_one+0x7d/0x340
[  692.990239][T15049]  pfkey_broadcast_one+0x9b/0x340
[  692.995723][T15049]  ? pfkey_broadcast+0x1c5/0x3e0
[  693.000939][T15049]  pfkey_broadcast+0x1d5/0x3e0
[  693.005979][T15049]  ? pfkey_broadcast+0x48/0x3e0
[  693.011007][T15049]  pfkey_sendmsg+0x4f0/0x10e0
[  693.015692][T15049]  ? __might_sleep+0xe0/0xe0
[  693.020643][T15049]  ? pfkey_release+0x320/0x320
[  693.025509][T15049]  ? aa_sock_msg_perm+0x94/0x150
[  693.030450][T15049]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  693.036083][T15049]  ? security_socket_sendmsg+0x80/0xa0
[  693.042283][T15049]  ? pfkey_release+0x320/0x320
[  693.047317][T15049]  ____sys_sendmsg+0x5ba/0x960
[  693.052183][T15049]  ? __asan_memset+0x22/0x40
[  693.057303][T15049]  ? __sys_sendmsg_sock+0x30/0x30
[  693.062336][T15049]  ? __import_iovec+0x5f2/0x850
[  693.067729][T15049]  ? import_iovec+0x73/0xa0
[  693.072416][T15049]  ___sys_sendmsg+0x2a6/0x360
[  693.077646][T15049]  ? __sys_sendmsg+0x2a0/0x2a0
[  693.082879][T15049]  ? __lock_acquire+0x7d40/0x7d40
[  693.088380][T15049]  __se_sys_sendmsg+0x1c2/0x2b0
[  693.093650][T15049]  ? __x64_sys_sendmsg+0x80/0x80
[  693.099269][T15049]  ? lockdep_hardirqs_on+0x98/0x150
[  693.104662][T15049]  do_syscall_64+0x55/0xb0
[  693.109086][T15049]  ? clear_bhb_loop+0x40/0x90
[  693.114028][T15049]  ? clear_bhb_loop+0x40/0x90
[  693.118888][T15049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  693.124960][T15049] RIP: 0033:0x7f377e79ce59
[  693.129560][T15049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.150128][T15049] RSP: 002b:00007f377f6d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  693.158997][T15049] RAX: ffffffffffffffda RBX: 00007f377ea15fa0 RCX: 00007f377e79ce59
[  693.167270][T15049] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  693.175961][T15049] RBP: 00007f377f6d6090 R08: 0000000000000000 R09: 0000000000000000
[  693.184717][T15049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  693.192797][T15049] R13: 00007f377ea16038 R14: 00007f377ea15fa0 R15: 00007ffeb40f53a8
[  693.201438][T15049]  </TASK>
[  693.543114][T15059] netlink: 'syz.3.2880': attribute type 29 has an invalid length.
[  693.575073][T15056] netlink: 'syz.0.2879': attribute type 3 has an invalid length.
[  693.586636][T15056] netlink: 'syz.0.2879': attribute type 1 has an invalid length.
[  693.594995][T15056] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2879'.
[  698.532100][T15059] netlink: 'syz.3.2880': attribute type 29 has an invalid length.
[  698.540861][T15065] netlink: 'syz.3.2880': attribute type 22 has an invalid length.
[  698.580347][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  698.690745][T15071] netlink: 'syz.0.2881': attribute type 10 has an invalid length.
[  698.699580][T15071] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2881'.
[  698.716228][T15071] netlink: 'syz.0.2881': attribute type 4 has an invalid length.
[  698.844801][T15073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2883'.
[  699.114633][T15084] netlink: 'syz.2.2887': attribute type 4 has an invalid length.
[  699.124495][T15084] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2887'.
[  699.259946][T15090] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2890'.
[  699.275513][T15090] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2890'.
[  699.291669][T15088] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2889'.
[  699.314778][T15088] openvswitch: netlink: Key type 29 is not supported
[  699.431802][T15092] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2890'.
[  699.700298][T15103] netlink: 'syz.1.2891': attribute type 3 has an invalid length.
[  699.731028][T15103] netlink: 'syz.1.2891': attribute type 1 has an invalid length.
[  699.753297][T15103] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2891'.
[  700.977413][T15116] netlink: 'syz.3.2898': attribute type 4 has an invalid length.
[  701.026754][T15116] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2898'.
[  702.707097][T15126] netlink: 'syz.3.2902': attribute type 10 has an invalid length.
[  702.748233][T15126] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2902'.
[  702.834814][T15122] veth0_vlan: left promiscuous mode
[  702.853903][T15124] FAULT_INJECTION: forcing a failure.
[  702.853903][T15124] name failslab, interval 1, probability 0, space 0, times 0
[  702.880989][T15124] CPU: 0 PID: 15124 Comm: syz.1.2901 Not tainted syzkaller #0
[  702.888947][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  702.900087][T15124] Call Trace:
[  702.903555][T15124]  <TASK>
[  702.906776][T15124]  dump_stack_lvl+0x18c/0x250
[  702.911770][T15124]  ? show_regs_print_info+0x20/0x20
[  702.918147][T15124]  ? load_image+0x420/0x420
[  702.923310][T15124]  ? trace_event_raw_event_lock+0x250/0x250
[  702.930191][T15124]  should_fail_ex+0x39d/0x4d0
[  702.935252][T15124]  should_failslab+0x9/0x20
[  702.940097][T15124]  slab_pre_alloc_hook+0x59/0x310
[  702.945527][T15124]  ? __hw_addr_add_ex+0x202/0x710
[  702.951479][T15124]  __kmem_cache_alloc_node+0x53/0x250
[  702.957343][T15124]  ? __hw_addr_add_ex+0x202/0x710
[  702.962920][T15124]  kmalloc_trace+0x2a/0xe0
[  702.968347][T15124]  __hw_addr_add_ex+0x202/0x710
[  702.973400][T15124]  dev_addr_init+0x15f/0x240
[  702.978381][T15124]  ? dev_addr_flush+0x210/0x210
[  702.983640][T15124]  alloc_netdev_mqs+0x2e4/0x1040
[  702.988953][T15124]  ? udp_tunnel_nic_device_sync_work+0x890/0x890
[  702.995524][T15124]  __ip_tunnel_create+0x303/0x4d0
[  703.000909][T15124]  ? ip_tunnel_init_net+0x790/0x790
[  703.006668][T15124]  ? security_capable+0x89/0xb0
[  703.012048][T15124]  ip_tunnel_ctl+0x98c/0x1970
[  703.017063][T15124]  vti_tunnel_ctl+0x1f9/0x390
[  703.021884][T15124]  ip_tunnel_siocdevprivate+0x138/0x1f0
[  703.028171][T15124]  ? dev_ioctl+0x83c/0x1140
[  703.033077][T15124]  ? ip_tunnel_update+0xb10/0xb10
[  703.038760][T15124]  ? dev_ifsioc+0x958/0xc40
[  703.043562][T15124]  dev_ioctl+0x84c/0x1140
[  703.048557][T15124]  sock_ioctl+0x74c/0x7e0
[  703.053180][T15124]  ? sock_poll+0x3e0/0x3e0
[  703.058356][T15124]  ? bpf_lsm_file_ioctl+0x9/0x10
[  703.064015][T15124]  ? security_file_ioctl+0x80/0xa0
[  703.070269][T15124]  ? sock_poll+0x3e0/0x3e0
[  703.075353][T15124]  __se_sys_ioctl+0xfd/0x170
[  703.081369][T15124]  do_syscall_64+0x55/0xb0
[  703.086413][T15124]  ? clear_bhb_loop+0x40/0x90
[  703.091284][T15124]  ? clear_bhb_loop+0x40/0x90
[  703.096334][T15124]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  703.102897][T15124] RIP: 0033:0x7f4c7699ce59
[  703.107429][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.130564][T15124] RSP: 002b:00007f4c74bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.140674][T15124] RAX: ffffffffffffffda RBX: 00007f4c76c15fa0 RCX: 00007f4c7699ce59
[  703.148937][T15124] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006
[  703.157645][T15124] RBP: 00007f4c74bf6090 R08: 0000000000000000 R09: 0000000000000000
[  703.165815][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  703.174235][T15124] R13: 00007f4c76c16038 R14: 00007f4c76c15fa0 R15: 00007fffbd7d40a8
[  703.183207][T15124]  </TASK>
[  703.215980][T15130] netlink: 'syz.3.2902': attribute type 4 has an invalid length.
[  703.594609][T15149] netlink: 'syz.0.2910': attribute type 4 has an invalid length.
[  703.770881][T15148] netlink: 'syz.1.2909': attribute type 3 has an invalid length.
[  703.781966][T15148] netlink: 'syz.1.2909': attribute type 1 has an invalid length.
[  703.809873][T15148] __nla_validate_parse: 1 callbacks suppressed
[  703.810652][T15148] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.2909'.
[  706.477248][T15168] netlink: 'syz.0.2915': attribute type 33 has an invalid length.
[  706.496206][T15168] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2915'.
[  706.569784][T15169] veth0_vlan: left promiscuous mode
[  706.847290][T15180] netlink: 'syz.0.2919': attribute type 10 has an invalid length.
[  706.866398][T15180] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2919'.
[  706.922622][T15180] netlink: 'syz.0.2919': attribute type 4 has an invalid length.
[  707.088131][T15185] netlink: 'syz.1.2920': attribute type 4 has an invalid length.
[  707.107945][T15185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2920'.
[  707.928075][T15208] netlink: 'syz.0.2925': attribute type 3 has an invalid length.
[  707.949388][T15208] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  708.011439][T15208] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2925'.
[  710.858400][T15223] netlink: 'syz.1.2928': attribute type 10 has an invalid length.
[  710.893461][T15223] team0: Device nlmon0 is of different type
[  711.336156][T15229] netlink: 'syz.2.2931': attribute type 4 has an invalid length.
[  711.358193][T15229] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2931'.
[  711.394894][T15231] netlink: 'syz.3.2933': attribute type 10 has an invalid length.
[  711.416124][T15231] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2933'.
[  711.462748][T15232] netlink: 'syz.3.2933': attribute type 4 has an invalid length.
[  711.755891][T15242] netlink: 'syz.2.2936': attribute type 6 has an invalid length.
[  711.813422][T15242] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2936'.
[  713.001793][T15264] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  713.040676][T15264] team0: Device nlmon0 is of different type
[  713.194610][T15270] netlink: 'syz.2.2944': attribute type 4 has an invalid length.
[  713.217547][T15270] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2944'.
[  713.662740][T15276] netlink: 'syz.2.2946': attribute type 10 has an invalid length.
[  713.686455][T15276] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2946'.
[  713.704391][T15276] netlink: 'syz.2.2946': attribute type 4 has an invalid length.
[  714.171886][T15295] netlink: 'syz.0.2954': attribute type 4 has an invalid length.
[  714.192426][T15295] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2954'.
[  714.362567][T15304] TCP: TCP_TX_DELAY enabled
[  714.812392][T15320] team0: Device nlmon0 is of different type
[  714.904755][T15322] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2964'.
[  715.059371][T15328] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2967'.
[  715.930666][T15353] validate_nla: 5 callbacks suppressed
[  715.930700][T15353] netlink: 'syz.2.2975': attribute type 10 has an invalid length.
[  715.981678][T15353] team0: Device nlmon0 is of different type
[  716.090882][T15357] netlink: 'syz.1.2984': attribute type 10 has an invalid length.
[  716.105138][T15357] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2984'.
[  716.122107][T15357] netlink: 'syz.1.2984': attribute type 4 has an invalid length.
[  716.132243][T15358] netlink: 'syz.3.2976': attribute type 10 has an invalid length.
[  716.150061][T15358] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.161706][T15358] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.319769][T15360] netlink: 'syz.2.2977': attribute type 4 has an invalid length.
[  716.337689][T15360] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2977'.
[  716.603957][T15366] syzkaller0: entered promiscuous mode
[  716.618540][T15366] syzkaller0: entered allmulticast mode
[  717.080414][T15379] netlink: 'syz.2.2986': attribute type 10 has an invalid length.
[  717.137688][T15379] team0: Device nlmon0 is of different type
[  717.242526][T15384] netlink: 'syz.0.2988': attribute type 4 has an invalid length.
[  717.287412][T15384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2988'.
[  717.521534][T15386] netlink: 'syz.3.2989': attribute type 29 has an invalid length.
[  717.551832][T15388] netlink: 'syz.2.2990': attribute type 10 has an invalid length.
[  717.570672][T15388] bridge0: port 3(hsr0) entered disabled state
[  717.580315][T15388] bridge0: port 2(bridge_slave_1) entered disabled state
[  717.665477][T15386] netlink: 'syz.3.2989': attribute type 29 has an invalid length.
[  717.754569][T15395] netlink: 148156 bytes leftover after parsing attributes in process `syz.0.2992'.
[  717.885586][T15395] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2992'.
[  718.007033][T15402] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2994'.
[  718.030679][T15406] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2995'.
[  718.205422][T15407] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2994'.
[  719.306640][T15422] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3000'.
[  719.413132][T15424] team0: Device nlmon0 is of different type
[  719.938256][T15439] bridge0: port 3(hsr0) entered disabled state
[  719.945918][T15439] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.957140][T15439] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.027601][T15439] .`: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  720.078427][T15439] bridge0: port 3(hsr0) entered blocking state
[  720.084920][T15439] bridge0: port 3(hsr0) entered forwarding state
[  720.093193][T15439] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.101642][T15439] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.111090][T15439] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.119964][T15439] bridge0: port 1(bridge_slave_0) entered forwarding state
[  720.208000][T15439] .`: (slave bridge0): Enslaving as an active interface with an up link
[  720.218526][T15444] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3008'.
[  720.460323][T15457] team0: Device nlmon0 is of different type
[  720.968987][T15473] validate_nla: 12 callbacks suppressed
[  720.969024][T15473] netlink: 'syz.3.3018': attribute type 10 has an invalid length.
[  721.023602][T15473] team0: Device nlmon0 is of different type
[  721.149541][T15479] netlink: 'syz.2.3022': attribute type 10 has an invalid length.
[  721.303127][T15481] netlink: 'syz.3.3023': attribute type 10 has an invalid length.
[  721.331820][T15481] team0: Device nlmon0 is of different type
[  721.384992][T15485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3024'.
[  721.408533][T15485] FAULT_INJECTION: forcing a failure.
[  721.408533][T15485] name failslab, interval 1, probability 0, space 0, times 0
[  721.454884][T15485] CPU: 1 PID: 15485 Comm: syz.2.3024 Not tainted syzkaller #0
[  721.463108][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  721.474272][T15485] Call Trace:
[  721.477580][T15485]  <TASK>
[  721.480540][T15485]  dump_stack_lvl+0x18c/0x250
[  721.485255][T15485]  ? show_regs_print_info+0x20/0x20
[  721.490668][T15485]  ? load_image+0x420/0x420
[  721.495300][T15485]  ? __might_sleep+0xe0/0xe0
[  721.500181][T15485]  ? __lock_acquire+0x7d40/0x7d40
[  721.505775][T15485]  should_fail_ex+0x39d/0x4d0
[  721.512173][T15485]  should_failslab+0x9/0x20
[  721.517039][T15485]  slab_pre_alloc_hook+0x59/0x310
[  721.522347][T15485]  ? __lock_acquire+0x7d40/0x7d40
[  721.527813][T15485]  ? trace_contention_end+0x39/0xe0
[  721.533074][T15485]  ? nf_nat_masq_schedule+0x246/0x560
[  721.538698][T15485]  __kmem_cache_alloc_node+0x53/0x250
[  721.544189][T15485]  ? nf_nat_masq_schedule+0x246/0x560
[  721.549657][T15485]  kmalloc_trace+0x2a/0xe0
[  721.554448][T15485]  nf_nat_masq_schedule+0x246/0x560
[  721.559851][T15485]  ? mutex_unlock+0x10/0x10
[  721.564713][T15485]  ? nf_nat_masq_schedule+0x560/0x560
[  721.570268][T15485]  ? masq_device_event+0xd0/0xd0
[  721.575560][T15485]  ? nfqnl_rcv_dev_event+0xb1/0x770
[  721.580862][T15485]  masq_device_event+0xa2/0xd0
[  721.585890][T15485]  notifier_call_chain+0x197/0x380
[  721.591828][T15485]  dev_close_many+0x2a9/0x410
[  721.596719][T15485]  ? __dev_open+0x430/0x430
[  721.601812][T15485]  unregister_netdevice_many_notify+0x4c4/0x1900
[  721.608675][T15485]  ? __nla_validate+0x50/0x50
[  721.614493][T15485]  ? mark_lock+0x94/0x320
[  721.619190][T15485]  ? __lock_acquire+0x1273/0x7d40
[  721.624462][T15485]  ? mark_lock+0x94/0x320
[  721.629660][T15485]  ? unregister_netdevice_many+0x20/0x20
[  721.636276][T15485]  ? unregister_netdevice_queue+0x1ae/0x370
[  721.642549][T15485]  ? list_netdevice+0x730/0x730
[  721.647692][T15485]  ? __nla_parse+0x40/0x50
[  721.652818][T15485]  ? list_netdevice+0x730/0x730
[  721.657858][T15485]  rtnl_dellink+0x500/0x7c0
[  721.663071][T15485]  ? rtnl_newlink+0x20a0/0x20a0
[  721.667931][T15485]  ? __lock_acquire+0x1273/0x7d40
[  721.673192][T15485]  ? mutex_lock_nested+0x20/0x20
[  721.678148][T15485]  ? rtnl_newlink+0x20a0/0x20a0
[  721.683084][T15485]  rtnetlink_rcv_msg+0x869/0xfa0
[  721.688123][T15485]  ? rtnetlink_rcv_msg+0x221/0xfa0
[  721.693327][T15485]  ? rtnetlink_bind+0x80/0x80
[  721.698474][T15485]  ? mark_lock+0x94/0x320
[  721.703083][T15485]  ? __lock_acquire+0x1273/0x7d40
[  721.708651][T15485]  ? __kernel_text_address+0xd/0x30
[  721.714390][T15485]  ? mark_lock+0x94/0x320
[  721.718905][T15485]  ? mark_lock+0x94/0x320
[  721.723325][T15485]  ? __lock_acquire+0x1273/0x7d40
[  721.728902][T15485]  ? kmalloc_reserve+0x95/0x240
[  721.733869][T15485]  ? verify_lock_unused+0x140/0x140
[  721.739084][T15485]  ? verify_lock_unused+0x140/0x140
[  721.744478][T15485]  netlink_rcv_skb+0x241/0x4d0
[  721.749523][T15485]  ? rtnetlink_bind+0x80/0x80
[  721.754854][T15485]  ? netlink_ack+0x1180/0x1180
[  721.759878][T15485]  ? __lock_acquire+0x7d40/0x7d40
[  721.765328][T15485]  ? net_generic+0x1e/0x240
[  721.770098][T15485]  ? netlink_deliver_tap+0x2e/0x1b0
[  721.775477][T15485]  netlink_unicast+0x751/0x8d0
[  721.780436][T15485]  netlink_sendmsg+0x8d0/0xbf0
[  721.785520][T15485]  ? netlink_getsockopt+0x590/0x590
[  721.790731][T15485]  ? aa_sock_msg_perm+0x94/0x150
[  721.795849][T15485]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  721.801232][T15485]  ? security_socket_sendmsg+0x80/0xa0
[  721.806909][T15485]  ? netlink_getsockopt+0x590/0x590
[  721.812551][T15485]  ____sys_sendmsg+0x5ba/0x960
[  721.817865][T15485]  ? __asan_memset+0x22/0x40
[  721.822555][T15485]  ? __sys_sendmsg_sock+0x30/0x30
[  721.827904][T15485]  ? __import_iovec+0x5f2/0x850
[  721.833200][T15485]  ? import_iovec+0x73/0xa0
[  721.838084][T15485]  ___sys_sendmsg+0x2a6/0x360
[  721.842854][T15485]  ? get_pid_task+0x20/0x1e0
[  721.847656][T15485]  ? __sys_sendmsg+0x2a0/0x2a0
[  721.852526][T15485]  ? __lock_acquire+0x7d40/0x7d40
[  721.857753][T15485]  __se_sys_sendmsg+0x1c2/0x2b0
[  721.863217][T15485]  ? __x64_sys_sendmsg+0x80/0x80
[  721.868701][T15485]  ? lockdep_hardirqs_on+0x98/0x150
[  721.874348][T15485]  do_syscall_64+0x55/0xb0
[  721.878785][T15485]  ? clear_bhb_loop+0x40/0x90
[  721.883858][T15485]  ? clear_bhb_loop+0x40/0x90
[  721.888719][T15485]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  721.894892][T15485] RIP: 0033:0x7f202619ce59
[  721.899600][T15485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.919998][T15485] RSP: 002b:00007f202712b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  721.928506][T15485] RAX: ffffffffffffffda RBX: 00007f2026415fa0 RCX: 00007f202619ce59
[  721.937188][T15485] RDX: 0000000020048020 RSI: 0000200000000000 RDI: 0000000000000007
[  721.946053][T15485] RBP: 00007f202712b090 R08: 0000000000000000 R09: 0000000000000000
[  721.955033][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.963532][T15485] R13: 00007f2026416038 R14: 00007f2026415fa0 R15: 00007ffd59c11f48
[  721.971878][T15485]  </TASK>
[  722.060505][T15494] netlink: 'syz.3.3028': attribute type 10 has an invalid length.
[  722.071959][T15494] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3028'.
[  722.088121][T15495] netlink: 'syz.3.3028': attribute type 4 has an invalid length.
[  722.397849][T15507] netlink: 'syz.2.3032': attribute type 10 has an invalid length.
[  722.796767][T15520] netlink: 'syz.2.3039': attribute type 10 has an invalid length.
[  722.834133][T15520] team0: Device nlmon0 is of different type
[  723.150947][T15533] netlink: 'syz.1.3044': attribute type 10 has an invalid length.
[  723.277600][T15535] netlink: 'syz.0.3045': attribute type 23 has an invalid length.
[  723.448449][T15545] netlink: 'syz.0.3050': attribute type 10 has an invalid length.
[  723.465552][T15547] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.3048'.
[  723.494876][T15545] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3050'.
[  724.708374][T15564] team0: Device nlmon0 is of different type
[  726.443346][T15588] validate_nla: 4 callbacks suppressed
[  726.443396][T15588] netlink: 'syz.0.3062': attribute type 1 has an invalid length.
[  726.473962][T15588] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3062'.
[  726.484986][T15588] netlink: 'syz.0.3062': attribute type 1 has an invalid length.
[  726.628363][T15593] netlink: 'syz.1.3065': attribute type 10 has an invalid length.
[  726.656124][T15593] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3065'.
[  726.684010][T15593] netlink: 'syz.1.3065': attribute type 4 has an invalid length.
[  726.822087][T15595] netlink: 'syz.2.3066': attribute type 3 has an invalid length.
[  726.835489][T15598] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3067'.
[  726.865628][T15595] netlink: 'syz.2.3066': attribute type 1 has an invalid length.
[  726.875095][T15595] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3066'.
[  727.455297][T15606] netlink: 'syz.0.3069': attribute type 10 has an invalid length.
[  727.502386][T15606] team0: Device nlmon0 is of different type
[  728.040126][T15615] FAULT_INJECTION: forcing a failure.
[  728.040126][T15615] name failslab, interval 1, probability 0, space 0, times 0
[  728.059061][T15615] CPU: 1 PID: 15615 Comm: syz.2.3071 Not tainted syzkaller #0
[  728.069212][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  728.081039][T15615] Call Trace:
[  728.084772][T15615]  <TASK>
[  728.087898][T15615]  dump_stack_lvl+0x18c/0x250
[  728.092893][T15615]  ? sctp_sendmsg+0x15d2/0x2910
[  728.098041][T15615]  ? ___sys_sendmsg+0x2a6/0x360
[  728.103455][T15615]  ? show_regs_print_info+0x20/0x20
[  728.109049][T15615]  ? load_image+0x420/0x420
[  728.114410][T15615]  ? mark_lock+0x94/0x320
[  728.119385][T15615]  should_fail_ex+0x39d/0x4d0
[  728.124578][T15615]  should_failslab+0x9/0x20
[  728.129442][T15615]  slab_pre_alloc_hook+0x59/0x310
[  728.135891][T15615]  ? sctp_add_bind_addr+0x8c/0x360
[  728.141479][T15615]  __kmem_cache_alloc_node+0x53/0x250
[  728.147852][T15615]  ? sctp_add_bind_addr+0x8c/0x360
[  728.153602][T15615]  kmalloc_trace+0x2a/0xe0
[  728.158338][T15615]  sctp_add_bind_addr+0x8c/0x360
[  728.163967][T15615]  sctp_copy_local_addr_list+0x315/0x4f0
[  728.170084][T15615]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  728.176103][T15615]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  728.182799][T15615]  ? sctp_v4_is_any+0x35/0x60
[  728.187935][T15615]  ? sctp_copy_one_addr+0x8c/0x350
[  728.193583][T15615]  sctp_bind_addr_copy+0xb3/0x3c0
[  728.199056][T15615]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  728.206051][T15615]  sctp_connect_new_asoc+0x2f9/0x6a0
[  728.211943][T15615]  ? __sctp_connect+0xd80/0xd80
[  728.217827][T15615]  ? __local_bh_enable_ip+0x13a/0x1c0
[  728.223740][T15615]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  728.229810][T15615]  ? security_sctp_bind_connect+0x89/0xb0
[  728.235885][T15615]  sctp_sendmsg+0x15d2/0x2910
[  728.243141][T15615]  ? sctp_getsockopt+0xb60/0xb60
[  728.249003][T15615]  ? lock_chain_count+0x20/0x20
[  728.254849][T15615]  ? inet_send_prepare+0x260/0x260
[  728.261336][T15615]  ? sctp_getsockopt+0xb60/0xb60
[  728.266646][T15615]  ? inet_send_prepare+0x260/0x260
[  728.272417][T15615]  ____sys_sendmsg+0x5ba/0x960
[  728.277563][T15615]  ? __lock_acquire+0x7d40/0x7d40
[  728.283578][T15615]  ? __asan_memset+0x22/0x40
[  728.288716][T15615]  ? __sys_sendmsg_sock+0x30/0x30
[  728.295145][T15615]  ? __import_iovec+0x5f2/0x850
[  728.300097][T15615]  ? import_iovec+0x73/0xa0
[  728.305945][T15615]  ___sys_sendmsg+0x2a6/0x360
[  728.311852][T15615]  ? __sys_sendmsg+0x2a0/0x2a0
[  728.317600][T15615]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  728.324470][T15615]  __se_sys_sendmsg+0x1c2/0x2b0
[  728.329954][T15615]  ? hrtimer_interrupt+0x7bb/0x9c0
[  728.337036][T15615]  ? __x64_sys_sendmsg+0x80/0x80
[  728.342564][T15615]  ? lockdep_hardirqs_on+0x98/0x150
[  728.350054][T15615]  do_syscall_64+0x55/0xb0
[  728.354943][T15615]  ? clear_bhb_loop+0x40/0x90
[  728.361235][T15615]  ? clear_bhb_loop+0x40/0x90
[  728.366185][T15615]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  728.372783][T15615] RIP: 0033:0x7f202619ce59
[  728.378449][T15615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.400365][T15615] RSP: 002b:00007f202712b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  728.410062][T15615] RAX: ffffffffffffffda RBX: 00007f2026415fa0 RCX: 00007f202619ce59
[  728.419635][T15615] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006
[  728.429426][T15615] RBP: 00007f202712b090 R08: 0000000000000000 R09: 0000000000000000
[  728.439009][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  728.449024][T15615] R13: 00007f2026416038 R14: 00007f2026415fa0 R15: 00007ffd59c11f48
[  728.458361][T15615]  </TASK>
[  728.933868][T15631] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3077'.
[  729.003253][T15634] netlink: 'syz.1.3079': attribute type 3 has an invalid length.
[  729.013736][T15634] netlink: 'syz.1.3079': attribute type 1 has an invalid length.
[  729.024021][T15634] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.3079'.
[  729.054505][T15641] netlink: 'syz.3.3080': attribute type 1 has an invalid length.
[  729.085930][T15641] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3080'.
[  729.149596][T15645] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3081'.
[  736.667838][T15681] validate_nla: 3 callbacks suppressed
[  736.667893][T15681] netlink: 'syz.1.3091': attribute type 1 has an invalid length.
[  736.705213][T15679] syzkaller1: tun_chr_ioctl cmd 1074025677
[  736.705323][T15681] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3091'.
[  736.722841][T15679] syzkaller1: linktype set to 769
[  736.731251][T15679] syz.3.3099[15679] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  736.756025][T15681] netlink: 'syz.1.3091': attribute type 1 has an invalid length.
[  736.844366][T15682] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3098'.
[  736.941154][T15690] FAULT_INJECTION: forcing a failure.
[  736.941154][T15690] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  736.959627][T15691] netlink: 'syz.1.3093': attribute type 10 has an invalid length.
[  736.969043][T15691] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3093'.
[  736.975869][T15690] CPU: 0 PID: 15690 Comm: syz.2.3094 Not tainted syzkaller #0
[  736.986380][T15690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  736.996644][T15690] Call Trace:
[  736.997488][T15691] netlink: 'syz.1.3093': attribute type 4 has an invalid length.
[  737.000229][T15690]  <TASK>
[  737.000243][T15690]  dump_stack_lvl+0x18c/0x250
[  737.000268][T15690]  ? show_regs_print_info+0x20/0x20
[  737.000284][T15690]  ? load_image+0x420/0x420
[  737.000299][T15690]  ? __might_fault+0xaa/0x120
[  737.000315][T15690]  ? __lock_acquire+0x7d40/0x7d40
[  737.000335][T15690]  should_fail_ex+0x39d/0x4d0
[  737.000362][T15690]  _copy_from_iter+0x1d9/0x12e0
[  737.000384][T15690]  ? __virt_addr_valid+0x18c/0x540
[  737.000405][T15690]  ? __lock_acquire+0x7d40/0x7d40
[  737.000430][T15690]  ? copyout_mc+0x70/0x70
[  737.065291][T15690]  ? __virt_addr_valid+0x18c/0x540
[  737.070700][T15690]  ? __virt_addr_valid+0x18c/0x540
[  737.076125][T15690]  ? __virt_addr_valid+0x469/0x540
[  737.081368][T15690]  ? __check_object_size+0x506/0xa20
[  737.087014][T15690]  kernfs_fop_write_iter+0x1a4/0x520
[  737.092610][T15690]  vfs_write+0x46c/0x990
[  737.097421][T15690]  ? file_end_write+0x250/0x250
[  737.102822][T15690]  ? __fget_files+0x43d/0x4b0
[  737.108213][T15690]  ? __fdget_pos+0x2a3/0x330
[  737.113592][T15690]  ? ksys_write+0x75/0x260
[  737.118621][T15690]  ksys_write+0x150/0x260
[  737.123323][T15690]  ? __ia32_sys_read+0x90/0x90
[  737.129017][T15690]  ? lockdep_hardirqs_on+0x98/0x150
[  737.135175][T15690]  do_syscall_64+0x55/0xb0
[  737.140500][T15690]  ? clear_bhb_loop+0x40/0x90
[  737.146025][T15690]  ? clear_bhb_loop+0x40/0x90
[  737.151067][T15690]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  737.157586][T15690] RIP: 0033:0x7f202619ce59
[  737.162265][T15690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.183030][T15690] RSP: 002b:00007f202712b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  737.192762][T15690] RAX: ffffffffffffffda RBX: 00007f2026415fa0 RCX: 00007f202619ce59
[  737.201270][T15690] RDX: 000000000000000a RSI: 0000200000000280 RDI: 0000000000000005
[  737.210646][T15690] RBP: 00007f202712b090 R08: 0000000000000000 R09: 0000000000000000
[  737.219164][T15690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.227668][T15690] R13: 00007f2026416038 R14: 00007f2026415fa0 R15: 00007ffd59c11f48
[  737.236028][T15690]  </TASK>
[  737.289152][T15693] netlink: 'syz.3.3095': attribute type 10 has an invalid length.
[  740.559650][T15727] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  740.656045][T15727] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3105'.
[  740.722272][T15727] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  740.841105][T15730] FAULT_INJECTION: forcing a failure.
[  740.841105][T15730] name failslab, interval 1, probability 0, space 0, times 0
[  740.880876][T15730] CPU: 0 PID: 15730 Comm: syz.0.3107 Not tainted syzkaller #0
[  740.888489][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  740.899110][T15730] Call Trace:
[  740.902479][T15730]  <TASK>
[  740.905583][T15730]  dump_stack_lvl+0x18c/0x250
[  740.910903][T15730]  ? sctp_sendmsg+0x15d2/0x2910
[  740.916256][T15730]  ? ___sys_sendmsg+0x2a6/0x360
[  740.922280][T15730]  ? show_regs_print_info+0x20/0x20
[  740.927935][T15730]  ? load_image+0x420/0x420
[  740.932540][T15730]  ? mark_lock+0x94/0x320
[  740.937173][T15730]  should_fail_ex+0x39d/0x4d0
[  740.941956][T15730]  should_failslab+0x9/0x20
[  740.946577][T15730]  slab_pre_alloc_hook+0x59/0x310
[  740.951703][T15730]  ? sctp_add_bind_addr+0x8c/0x360
[  740.956999][T15730]  __kmem_cache_alloc_node+0x53/0x250
[  740.963095][T15730]  ? sctp_add_bind_addr+0x8c/0x360
[  740.968304][T15730]  kmalloc_trace+0x2a/0xe0
[  740.973080][T15730]  sctp_add_bind_addr+0x8c/0x360
[  740.978125][T15730]  sctp_copy_local_addr_list+0x315/0x4f0
[  740.983942][T15730]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  740.989939][T15730]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  740.996023][T15730]  ? sctp_v4_is_any+0x35/0x60
[  741.001154][T15730]  ? sctp_copy_one_addr+0x8c/0x350
[  741.006532][T15730]  sctp_bind_addr_copy+0xb3/0x3c0
[  741.012084][T15730]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  741.018774][T15730]  sctp_connect_new_asoc+0x2f9/0x6a0
[  741.024163][T15730]  ? __sctp_connect+0xd80/0xd80
[  741.029059][T15730]  ? __local_bh_enable_ip+0x13a/0x1c0
[  741.035238][T15730]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  741.041136][T15730]  ? security_sctp_bind_connect+0x89/0xb0
[  741.047216][T15730]  sctp_sendmsg+0x15d2/0x2910
[  741.052261][T15730]  ? sctp_getsockopt+0xb60/0xb60
[  741.057687][T15730]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  741.064275][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  741.070015][T15730]  ? inet_sendmsg+0x18a/0x2f0
[  741.075685][T15730]  ? inet_sendmsg+0xe9/0x2f0
[  741.080604][T15730]  ? inet_send_prepare+0x260/0x260
[  741.085728][T15730]  ____sys_sendmsg+0x5ba/0x960
[  741.090596][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  741.096323][T15730]  ? __sys_sendmsg_sock+0x30/0x30
[  741.102086][T15730]  ? ___sys_sendmsg+0x28b/0x360
[  741.107471][T15730]  ___sys_sendmsg+0x2a6/0x360
[  741.112538][T15730]  ? __sys_sendmsg+0x2a0/0x2a0
[  741.117571][T15730]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  741.123915][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  741.129849][T15730]  ? kasan_check_range+0x89/0x290
[  741.134901][T15730]  __se_sys_sendmsg+0x1c2/0x2b0
[  741.139859][T15730]  ? __x64_sys_sendmsg+0x80/0x80
[  741.144875][T15730]  ? lockdep_hardirqs_on+0x98/0x150
[  741.150260][T15730]  do_syscall_64+0x55/0xb0
[  741.154901][T15730]  ? clear_bhb_loop+0x40/0x90
[  741.159951][T15730]  ? clear_bhb_loop+0x40/0x90
[  741.164727][T15730]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  741.170632][T15730] RIP: 0033:0x7fb38739ce59
[  741.175230][T15730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  741.196244][T15730] RSP: 002b:00007fb38818b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  741.205116][T15730] RAX: ffffffffffffffda RBX: 00007fb387615fa0 RCX: 00007fb38739ce59
[  741.213987][T15730] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006
[  741.222699][T15730] RBP: 00007fb38818b090 R08: 0000000000000000 R09: 0000000000000000
[  741.232432][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  741.240670][T15730] R13: 00007fb387616038 R14: 00007fb387615fa0 R15: 00007ffff1d66648
[  741.249192][T15730]  </TASK>
[  741.417883][T15735] netlink: 'syz.0.3109': attribute type 10 has an invalid length.
[  741.427741][T15735] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3109'.
[  741.440593][T15735] netlink: 'syz.0.3109': attribute type 4 has an invalid length.
[  741.578480][T15737] netlink: 'syz.1.3110': attribute type 10 has an invalid length.
[  741.621542][T15740] team0: Device nlmon0 is of different type
[  743.058594][T15769] validate_nla: 1 callbacks suppressed
[  743.058610][T15769] netlink: 'syz.2.3124': attribute type 10 has an invalid length.
[  743.130685][T15769] team0: Device nlmon0 is of different type
[  743.147248][T15772] netlink: 'syz.0.3125': attribute type 10 has an invalid length.
[  743.173947][T15772] bridge0: port 3(hsr0) entered disabled state
[  743.181687][T15772] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.189989][T15772] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.232414][T15774] netlink: 'syz.3.3126': attribute type 2 has an invalid length.
[  743.297901][T15774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3126'.
[  743.485093][T15779] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3127'.
[  743.566373][T15784] netlink: 'syz.0.3131': attribute type 10 has an invalid length.
[  743.575208][T15784] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3131'.
[  743.614305][T15786] FAULT_INJECTION: forcing a failure.
[  743.614305][T15786] name failslab, interval 1, probability 0, space 0, times 0
[  743.638659][T15786] CPU: 0 PID: 15786 Comm: syz.3.3130 Not tainted syzkaller #0
[  743.646545][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  743.656996][T15786] Call Trace:
[  743.660505][T15786]  <TASK>
[  743.663558][T15786]  dump_stack_lvl+0x18c/0x250
[  743.668290][T15786]  ? show_regs_print_info+0x20/0x20
[  743.673534][T15786]  ? load_image+0x420/0x420
[  743.678164][T15786]  ? __might_sleep+0xe0/0xe0
[  743.683330][T15786]  ? __lock_acquire+0x7d40/0x7d40
[  743.688745][T15786]  should_fail_ex+0x39d/0x4d0
[  743.693565][T15786]  should_failslab+0x9/0x20
[  743.698284][T15786]  slab_pre_alloc_hook+0x59/0x310
[  743.703806][T15786]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  743.710080][T15786]  ? __get_vm_area_node+0x125/0x370
[  743.715494][T15786]  __kmem_cache_alloc_node+0x53/0x250
[  743.721830][T15786]  ? __get_vm_area_node+0x125/0x370
[  743.727212][T15786]  kmalloc_node_trace+0x26/0xe0
[  743.732421][T15786]  __get_vm_area_node+0x125/0x370
[  743.737720][T15786]  __vmalloc_node_range+0x36e/0x1330
[  743.743293][T15786]  ? netlink_sendmsg+0x602/0xbf0
[  743.749168][T15786]  ? netlink_insert+0x109f/0x13a0
[  743.754230][T15786]  ? netlink_data_ready+0x10/0x10
[  743.759382][T15786]  ? free_vm_area+0x50/0x50
[  743.764033][T15786]  ? netlink_sendmsg+0x602/0xbf0
[  743.769099][T15786]  vmalloc+0x79/0x90
[  743.773375][T15786]  ? netlink_sendmsg+0x602/0xbf0
[  743.778497][T15786]  netlink_sendmsg+0x602/0xbf0
[  743.783584][T15786]  ? lockdep_hardirqs_on+0x98/0x150
[  743.789137][T15786]  ? netlink_getsockopt+0x590/0x590
[  743.794362][T15786]  ? aa_sock_msg_perm+0x94/0x150
[  743.799425][T15786]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  743.805070][T15786]  ? security_socket_sendmsg+0x80/0xa0
[  743.810706][T15786]  ? netlink_getsockopt+0x590/0x590
[  743.816172][T15786]  ____sys_sendmsg+0x5ba/0x960
[  743.821404][T15786]  ? __asan_memset+0x22/0x40
[  743.826264][T15786]  ? __sys_sendmsg_sock+0x30/0x30
[  743.831425][T15786]  ? __import_iovec+0x5f2/0x850
[  743.836504][T15786]  ? import_iovec+0x73/0xa0
[  743.841221][T15786]  ___sys_sendmsg+0x2a6/0x360
[  743.846344][T15786]  ? get_pid_task+0x20/0x1e0
[  743.851038][T15786]  ? __sys_sendmsg+0x2a0/0x2a0
[  743.856350][T15786]  ? __lock_acquire+0x7d40/0x7d40
[  743.861685][T15786]  __se_sys_sendmsg+0x1c2/0x2b0
[  743.866906][T15786]  ? __x64_sys_sendmsg+0x80/0x80
[  743.872396][T15786]  ? lockdep_hardirqs_on+0x98/0x150
[  743.877878][T15786]  do_syscall_64+0x55/0xb0
[  743.882394][T15786]  ? clear_bhb_loop+0x40/0x90
[  743.887347][T15786]  ? clear_bhb_loop+0x40/0x90
[  743.892469][T15786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  743.898542][T15786] RIP: 0033:0x7f377e79ce59
[  743.903220][T15786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.923627][T15786] RSP: 002b:00007f377f6d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  743.932483][T15786] RAX: ffffffffffffffda RBX: 00007f377ea15fa0 RCX: 00007f377e79ce59
[  743.940857][T15786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  743.948923][T15786] RBP: 00007f377f6d6090 R08: 0000000000000000 R09: 0000000000000000
[  743.957119][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.966068][T15786] R13: 00007f377ea16038 R14: 00007f377ea15fa0 R15: 00007ffeb40f53a8
[  743.974584][T15786]  </TASK>
[  743.994577][T15786] syz.3.3130: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  744.034306][T15786] CPU: 1 PID: 15786 Comm: syz.3.3130 Not tainted syzkaller #0
[  744.042621][T15786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  744.053310][T15786] Call Trace:
[  744.056706][T15786]  <TASK>
[  744.060021][T15786]  dump_stack_lvl+0x18c/0x250
[  744.065330][T15786]  ? show_regs_print_info+0x20/0x20
[  744.070712][T15786]  ? load_image+0x420/0x420
[  744.075230][T15786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  744.081856][T15786]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  744.088650][T15786]  warn_alloc+0x246/0x340
[  744.093362][T15786]  ? __get_vm_area_node+0x125/0x370
[  744.098788][T15786]  ? zone_watermark_ok_safe+0x230/0x230
[  744.104436][T15786]  ? rcu_is_watching+0x15/0xb0
[  744.109538][T15786]  ? __get_vm_area_node+0x356/0x370
[  744.115100][T15786]  __vmalloc_node_range+0x393/0x1330
[  744.120715][T15786]  ? netlink_insert+0x109f/0x13a0
[  744.126207][T15786]  ? netlink_data_ready+0x10/0x10
[  744.131579][T15786]  ? free_vm_area+0x50/0x50
[  744.136201][T15786]  ? netlink_sendmsg+0x602/0xbf0
[  744.141329][T15786]  vmalloc+0x79/0x90
[  744.145229][T15786]  ? netlink_sendmsg+0x602/0xbf0
[  744.150340][T15786]  netlink_sendmsg+0x602/0xbf0
[  744.155112][T15786]  ? lockdep_hardirqs_on+0x98/0x150
[  744.160769][T15786]  ? netlink_getsockopt+0x590/0x590
[  744.166332][T15786]  ? aa_sock_msg_perm+0x94/0x150
[  744.171454][T15786]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  744.176914][T15786]  ? security_socket_sendmsg+0x80/0xa0
[  744.182544][T15786]  ? netlink_getsockopt+0x590/0x590
[  744.187750][T15786]  ____sys_sendmsg+0x5ba/0x960
[  744.192527][T15786]  ? __asan_memset+0x22/0x40
[  744.197211][T15786]  ? __sys_sendmsg_sock+0x30/0x30
[  744.202407][T15786]  ? __import_iovec+0x5f2/0x850
[  744.207455][T15786]  ? import_iovec+0x73/0xa0
[  744.211999][T15786]  ___sys_sendmsg+0x2a6/0x360
[  744.216888][T15786]  ? get_pid_task+0x20/0x1e0
[  744.221842][T15786]  ? __sys_sendmsg+0x2a0/0x2a0
[  744.227040][T15786]  ? __lock_acquire+0x7d40/0x7d40
[  744.232345][T15786]  __se_sys_sendmsg+0x1c2/0x2b0
[  744.237478][T15786]  ? __x64_sys_sendmsg+0x80/0x80
[  744.242446][T15786]  ? lockdep_hardirqs_on+0x98/0x150
[  744.247759][T15786]  do_syscall_64+0x55/0xb0
[  744.252561][T15786]  ? clear_bhb_loop+0x40/0x90
[  744.257430][T15786]  ? clear_bhb_loop+0x40/0x90
[  744.262322][T15786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.268306][T15786] RIP: 0033:0x7f377e79ce59
[  744.272811][T15786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.293224][T15786] RSP: 002b:00007f377f6d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  744.302176][T15786] RAX: ffffffffffffffda RBX: 00007f377ea15fa0 RCX: 00007f377e79ce59
[  744.310782][T15786] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  744.319702][T15786] RBP: 00007f377f6d6090 R08: 0000000000000000 R09: 0000000000000000
[  744.328313][T15786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  744.337461][T15786] R13: 00007f377ea16038 R14: 00007f377ea15fa0 R15: 00007ffeb40f53a8
[  744.345803][T15786]  </TASK>
[  744.358392][T15786] Mem-Info:
[  744.362430][T15786] active_anon:6211 inactive_anon:0 isolated_anon:0
[  744.362430][T15786]  active_file:19767 inactive_file:40207 isolated_file:0
[  744.362430][T15786]  unevictable:768 dirty:274 writeback:0
[  744.362430][T15786]  slab_reclaimable:10315 slab_unreclaimable:95395
[  744.362430][T15786]  mapped:25345 shmem:1361 pagetables:587
[  744.362430][T15786]  sec_pagetables:0 bounce:0
[  744.362430][T15786]  kernel_misc_reclaimable:0
[  744.362430][T15786]  free:1338402 free_pcp:12903 free_cma:0
[  744.431654][T15786] Node 0 active_anon:24944kB inactive_anon:0kB active_file:79036kB inactive_file:160628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101352kB dirty:1096kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10732kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no
[  744.478147][T15786] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  744.518144][T15786] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  744.565422][T15786] lowmem_reserve[]: 0 2521 2522 2522 2522
[  744.573146][T15786] Node 0 DMA32 free:1444828kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24808kB inactive_anon:0kB active_file:79036kB inactive_file:159800kB unevictable:1536kB writepending:1096kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:31576kB local_pcp:10084kB free_cma:0kB
[  744.606617][T15786] lowmem_reserve[]: 0 0 0 0 0
[  744.612205][T15786] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  744.647538][T15786] lowmem_reserve[]: 0 0 0 0 0
[  744.652578][T15786] Node 1 Normal free:3891852kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21988kB local_pcp:6052kB free_cma:0kB
[  744.690957][T15786] lowmem_reserve[]: 0 0 0 0 0
[  744.700814][T15786] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  744.717380][T15786] Node 0 DMA32: 1227*4kB (UE) 1286*8kB (UME) 1460*16kB (UME) 1050*32kB (UME) 752*64kB (UME) 582*128kB (UME) 185*256kB (UM) 61*512kB (UM) 26*1024kB (UME) 3*2048kB (UM) 278*4096kB (UM) = 1444828kB
[  744.798187][T15786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  744.816047][T15786] Node 1 Normal: 199*4kB (UME) 56*8kB (UME) 29*16kB (UME) 87*32kB (UE) 26*64kB (UE) 11*128kB (UME) 1*256kB (U) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3891852kB
[  744.836429][T15786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  744.866792][T15786] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  744.881162][T15804] netlink: 'syz.0.3136': attribute type 10 has an invalid length.
[  744.888075][T15786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  744.906013][T15786] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  744.915299][T15804] team0: Device nlmon0 is of different type
[  744.948202][T15786] 61335 total pagecache pages
[  744.975907][T15786] 0 pages in swap cache
[  744.980302][T15786] Free swap  = 124996kB
[  744.984934][T15786] Total swap = 124996kB
[  744.994414][T15786] 2097051 pages RAM
[  745.005105][T15786] 0 pages HighMem/MovableOnly
[  745.028352][T15786] 416932 pages reserved
[  745.032757][T15786] 0 pages cma reserved
[  745.463638][T15813] netlink: 'syz.0.3146': attribute type 10 has an invalid length.
[  745.489692][T15813] team0: Device nlmon0 is of different type
[  745.560000][T15817] netlink: 'syz.2.3138': attribute type 10 has an invalid length.
[  745.791832][T15827] netlink: 'syz.3.3144': attribute type 10 has an invalid length.
[  745.805786][T15827] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3144'.
[  745.865918][T15828] netlink: 'syz.3.3144': attribute type 4 has an invalid length.
[  746.288069][T15837] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3148'.
[  746.911926][T15847] netlink: 'syz.2.3150': attribute type 10 has an invalid length.
[  746.959840][T15847] team0: Device nlmon0 is of different type
[  747.088424][T15855] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3154'.
[  747.440927][T15865] FAULT_INJECTION: forcing a failure.
[  747.440927][T15865] name failslab, interval 1, probability 0, space 0, times 0
[  747.479813][T15865] CPU: 0 PID: 15865 Comm: syz.0.3157 Not tainted syzkaller #0
[  747.488204][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  747.499734][T15865] Call Trace:
[  747.503038][T15865]  <TASK>
[  747.505998][T15865]  dump_stack_lvl+0x18c/0x250
[  747.511034][T15865]  ? sctp_sendmsg+0x15d2/0x2910
[  747.516257][T15865]  ? ___sys_sendmsg+0x2a6/0x360
[  747.521492][T15865]  ? show_regs_print_info+0x20/0x20
[  747.527080][T15865]  ? load_image+0x420/0x420
[  747.531903][T15865]  should_fail_ex+0x39d/0x4d0
[  747.537062][T15865]  should_failslab+0x9/0x20
[  747.541791][T15865]  slab_pre_alloc_hook+0x59/0x310
[  747.547217][T15865]  ? sctp_add_bind_addr+0x8c/0x360
[  747.552713][T15865]  __kmem_cache_alloc_node+0x53/0x250
[  747.558300][T15865]  ? sctp_add_bind_addr+0x8c/0x360
[  747.563800][T15865]  kmalloc_trace+0x2a/0xe0
[  747.568683][T15865]  sctp_add_bind_addr+0x8c/0x360
[  747.573922][T15865]  sctp_copy_local_addr_list+0x315/0x4f0
[  747.580063][T15865]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  747.586076][T15865]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  747.592423][T15865]  ? sctp_v4_is_any+0x35/0x60
[  747.597282][T15865]  ? sctp_copy_one_addr+0x8c/0x350
[  747.602751][T15865]  sctp_bind_addr_copy+0xb3/0x3c0
[  747.607951][T15865]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  747.614476][T15865]  sctp_connect_new_asoc+0x2f9/0x6a0
[  747.620309][T15865]  ? __sctp_connect+0xd80/0xd80
[  747.625446][T15865]  ? __local_bh_enable_ip+0x13a/0x1c0
[  747.631354][T15865]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  747.637335][T15865]  ? security_sctp_bind_connect+0x89/0xb0
[  747.643256][T15865]  sctp_sendmsg+0x15d2/0x2910
[  747.648218][T15865]  ? sctp_getsockopt+0xb60/0xb60
[  747.653159][T15865]  ? lock_chain_count+0x20/0x20
[  747.658296][T15865]  ? inet_send_prepare+0x260/0x260
[  747.663667][T15865]  ? sock_rps_record_flow+0x19/0x3f0
[  747.669142][T15865]  ? inet_sendmsg+0xe9/0x2f0
[  747.673999][T15865]  ? inet_send_prepare+0x260/0x260
[  747.679389][T15865]  ____sys_sendmsg+0x5ba/0x960
[  747.684269][T15865]  ? __lock_acquire+0x7d40/0x7d40
[  747.689405][T15865]  ? __asan_memset+0x22/0x40
[  747.694081][T15865]  ? __sys_sendmsg_sock+0x30/0x30
[  747.699453][T15865]  ? __import_iovec+0x5f2/0x850
[  747.704570][T15865]  ? import_iovec+0x73/0xa0
[  747.709607][T15865]  ___sys_sendmsg+0x2a6/0x360
[  747.714474][T15865]  ? __sys_sendmsg+0x2a0/0x2a0
[  747.720209][T15865]  ? __lock_acquire+0x7d40/0x7d40
[  747.725602][T15865]  __se_sys_sendmsg+0x1c2/0x2b0
[  747.730716][T15865]  ? __x64_sys_sendmsg+0x80/0x80
[  747.736717][T15865]  ? lockdep_hardirqs_on+0x98/0x150
[  747.743015][T15865]  do_syscall_64+0x55/0xb0
[  747.747782][T15865]  ? clear_bhb_loop+0x40/0x90
[  747.752729][T15865]  ? clear_bhb_loop+0x40/0x90
[  747.757840][T15865]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.764083][T15865] RIP: 0033:0x7fb38739ce59
[  747.768934][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.790204][T15865] RSP: 002b:00007fb38818b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  747.798887][T15865] RAX: ffffffffffffffda RBX: 00007fb387615fa0 RCX: 00007fb38739ce59
[  747.807562][T15865] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006
[  747.816140][T15865] RBP: 00007fb38818b090 R08: 0000000000000000 R09: 0000000000000000
[  747.824924][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  747.833266][T15865] R13: 00007fb387616038 R14: 00007fb387615fa0 R15: 00007ffff1d66648
[  747.841634][T15865]  </TASK>
[  747.895126][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  747.902269][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  747.993818][T15870] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3159'.
[  748.450465][T15876] validate_nla: 2 callbacks suppressed
[  748.450601][T15876] netlink: 'syz.0.3160': attribute type 10 has an invalid length.
[  749.305068][T15886] netlink: 'syz.1.3164': attribute type 10 has an invalid length.
[  749.342077][T15886] team0: Device nlmon0 is of different type
[  749.655395][T15895] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3165'.
[  750.714798][T15895] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode
[  750.771191][T15904] netlink: 'syz.3.3169': attribute type 10 has an invalid length.
[  750.796308][T15904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3169'.
[  750.830561][T15904] team0: entered promiscuous mode
[  750.881452][T15904] team_slave_0: entered promiscuous mode
[  750.920305][T15904] team_slave_1: entered promiscuous mode
[  750.940508][T15904] team0: entered allmulticast mode
[  750.990712][T15904] team_slave_0: entered allmulticast mode
[  751.005913][T15904] team_slave_1: entered allmulticast mode
[  751.016845][T15904] bridge0: port 3(team0) entered blocking state
[  751.033627][T15904] bridge0: port 3(team0) entered disabled state
[  751.049811][T15910] netlink: 'syz.2.3170': attribute type 10 has an invalid length.
[  751.064882][T15915] netlink: 'syz.1.3172': attribute type 10 has an invalid length.
[  751.073213][T15915] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3172'.
[  751.095936][T15915] netlink: 'syz.1.3172': attribute type 4 has an invalid length.
[  751.385134][T15923] netlink: 'syz.2.3175': attribute type 10 has an invalid length.
[  751.424267][T15923] team0: Device nlmon0 is of different type
[  751.755055][T15928] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3177'.
[  751.788445][T15928] openvswitch: netlink: Key type 4112 is out of range max 32
[  753.296526][T15936] netlink: 'syz.1.3179': attribute type 1 has an invalid length.
[  753.311067][T15936] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3179'.
[  753.661419][T15945] netlink: 'syz.1.3183': attribute type 10 has an invalid length.
[  753.682641][T15943] netlink: 'syz.0.3182': attribute type 10 has an invalid length.
[  753.857119][T15951] netlink: 'syz.1.3186': attribute type 10 has an invalid length.
[  753.881514][T15951] team0: Device nlmon0 is of different type
[  753.914081][T15956] netlink: 'syz.0.3187': attribute type 10 has an invalid length.
[  753.941762][T15956] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3187'.
[  753.993877][T15956] netlink: 'syz.0.3187': attribute type 4 has an invalid length.
[  754.024884][T15962] FAULT_INJECTION: forcing a failure.
[  754.024884][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.075824][T15962] CPU: 1 PID: 15962 Comm: syz.2.3190 Not tainted syzkaller #0
[  754.083523][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  754.094315][T15962] Call Trace:
[  754.097714][T15962]  <TASK>
[  754.100939][T15962]  dump_stack_lvl+0x18c/0x250
[  754.106087][T15962]  ? show_regs_print_info+0x20/0x20
[  754.111571][T15962]  ? load_image+0x420/0x420
[  754.116271][T15962]  ? __might_fault+0xaa/0x120
[  754.121541][T15962]  ? __lock_acquire+0x7d40/0x7d40
[  754.127566][T15962]  should_fail_ex+0x39d/0x4d0
[  754.132342][T15962]  _copy_from_user+0x2f/0xe0
[  754.137380][T15962]  ___sys_sendmsg+0x1c7/0x360
[  754.142495][T15962]  ? get_pid_task+0x20/0x1e0
[  754.147192][T15962]  ? __sys_sendmsg+0x2a0/0x2a0
[  754.152569][T15962]  ? __lock_acquire+0x7d40/0x7d40
[  754.158231][T15962]  __se_sys_sendmsg+0x1c2/0x2b0
[  754.163261][T15962]  ? __x64_sys_sendmsg+0x80/0x80
[  754.168209][T15962]  ? lockdep_hardirqs_on+0x98/0x150
[  754.173412][T15962]  do_syscall_64+0x55/0xb0
[  754.177828][T15962]  ? clear_bhb_loop+0x40/0x90
[  754.182596][T15962]  ? clear_bhb_loop+0x40/0x90
[  754.187463][T15962]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  754.193424][T15962] RIP: 0033:0x7f202619ce59
[  754.198034][T15962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.218660][T15962] RSP: 002b:00007f202712b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  754.227608][T15962] RAX: ffffffffffffffda RBX: 00007f2026415fa0 RCX: 00007f202619ce59
[  754.235668][T15962] RDX: 0000000000008000 RSI: 0000200000000600 RDI: 0000000000000003
[  754.243905][T15962] RBP: 00007f202712b090 R08: 0000000000000000 R09: 0000000000000000
[  754.252080][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.261047][T15962] R13: 00007f2026416038 R14: 00007f2026415fa0 R15: 00007ffd59c11f48
[  754.269737][T15962]  </TASK>
[  754.528932][T15976] netlink: 'syz.1.3195': attribute type 10 has an invalid length.
[  754.705354][T15980] netlink: 'syz.2.3197': attribute type 10 has an invalid length.
[  754.788297][T15984] netlink: 'syz.3.3199': attribute type 10 has an invalid length.
[  754.803223][T15983] netlink: 'syz.1.3198': attribute type 3 has an invalid length.
[  754.818373][T15984] nlmon0: entered promiscuous mode
[  754.824608][T15984] nlmon0: entered allmulticast mode
[  754.840058][T15987] FAULT_INJECTION: forcing a failure.
[  754.840058][T15987] name failslab, interval 1, probability 0, space 0, times 0
[  754.845315][T15983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3198'.
[  754.863534][T15984] team0: Device nlmon0 is of different type
[  754.871856][T15987] CPU: 0 PID: 15987 Comm: syz.0.3200 Not tainted syzkaller #0
[  754.879897][T15987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  754.890337][T15987] Call Trace:
[  754.893733][T15987]  <TASK>
[  754.896877][T15987]  dump_stack_lvl+0x18c/0x250
[  754.901833][T15987]  ? sctp_sendmsg+0x15d2/0x2910
[  754.906877][T15987]  ? ___sys_sendmsg+0x2a6/0x360
[  754.912014][T15987]  ? show_regs_print_info+0x20/0x20
[  754.917756][T15987]  ? load_image+0x420/0x420
[  754.922542][T15987]  should_fail_ex+0x39d/0x4d0
[  754.927693][T15987]  should_failslab+0x9/0x20
[  754.932499][T15987]  slab_pre_alloc_hook+0x59/0x310
[  754.937810][T15987]  ? sctp_add_bind_addr+0x8c/0x360
[  754.943107][T15987]  __kmem_cache_alloc_node+0x53/0x250
[  754.948598][T15987]  ? sctp_add_bind_addr+0x8c/0x360
[  754.954183][T15987]  kmalloc_trace+0x2a/0xe0
[  754.958628][T15987]  sctp_add_bind_addr+0x8c/0x360
[  754.963684][T15987]  sctp_copy_local_addr_list+0x315/0x4f0
[  754.969524][T15987]  ? sctp_copy_local_addr_list+0xa5/0x4f0
[  754.975353][T15987]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  754.981862][T15987]  ? sctp_v4_is_any+0x35/0x60
[  754.986925][T15987]  ? sctp_copy_one_addr+0x8c/0x350
[  754.992242][T15987]  sctp_bind_addr_copy+0xb3/0x3c0
[  754.997363][T15987]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  755.004050][T15987]  sctp_connect_new_asoc+0x2f9/0x6a0
[  755.009520][T15987]  ? __sctp_connect+0xd80/0xd80
[  755.014561][T15987]  ? sctp_epaddr_lookup_transport+0x202/0x230
[  755.020715][T15987]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  755.026907][T15987]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  755.033190][T15987]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  755.039117][T15987]  ? security_sctp_bind_connect+0x89/0xb0
[  755.044977][T15987]  sctp_sendmsg+0x15d2/0x2910
[  755.049781][T15987]  ? sctp_getsockopt+0xb60/0xb60
[  755.055000][T15987]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  755.061887][T15987]  ? lockdep_hardirqs_on+0x98/0x150
[  755.067122][T15987]  ? sock_rps_record_flow+0x19/0x3f0
[  755.072780][T15987]  ? inet_sendmsg+0x7c/0x2f0
[  755.077552][T15987]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  755.083114][T15987]  ? security_socket_sendmsg+0x80/0xa0
[  755.089023][T15987]  ? inet_send_prepare+0x260/0x260
[  755.094364][T15987]  ____sys_sendmsg+0x5ba/0x960
[  755.099509][T15987]  ? __lock_acquire+0x7d40/0x7d40
[  755.104728][T15987]  ? __asan_memset+0x22/0x40
[  755.109528][T15987]  ? __sys_sendmsg_sock+0x30/0x30
[  755.114656][T15987]  ? __import_iovec+0x5f2/0x850
[  755.119715][T15987]  ? import_iovec+0x73/0xa0
[  755.124330][T15987]  ___sys_sendmsg+0x2a6/0x360
[  755.129201][T15987]  ? get_pid_task+0x20/0x1e0
[  755.134125][T15987]  ? __sys_sendmsg+0x2a0/0x2a0
[  755.139015][T15987]  ? perf_trace_preemptirq_template+0xac/0x330
[  755.145189][T15987]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  755.151220][T15987]  ? lockdep_hardirqs_on+0x98/0x150
[  755.156818][T15987]  ? kasan_check_range+0x89/0x290
[  755.161856][T15987]  __se_sys_sendmsg+0x1c2/0x2b0
[  755.166833][T15987]  ? __x64_sys_sendmsg+0x80/0x80
[  755.171816][T15987]  ? lockdep_hardirqs_on+0x98/0x150
[  755.177238][T15987]  do_syscall_64+0x55/0xb0
[  755.181750][T15987]  ? clear_bhb_loop+0x40/0x90
[  755.186711][T15987]  ? clear_bhb_loop+0x40/0x90
[  755.191440][T15987]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  755.197620][T15987] RIP: 0033:0x7fb38739ce59
[  755.202065][T15987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.222122][T15987] RSP: 002b:00007fb38818b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  755.231323][T15987] RAX: ffffffffffffffda RBX: 00007fb387615fa0 RCX: 00007fb38739ce59
[  755.239655][T15987] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004
[  755.247986][T15987] RBP: 00007fb38818b090 R08: 0000000000000000 R09: 0000000000000000
[  755.256152][T15987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  755.264957][T15987] R13: 00007fb387616038 R14: 00007fb387615fa0 R15: 00007ffff1d66648
[  755.273422][T15987]  </TASK>
[  755.714290][T16004] netlink: 'syz.3.3206': attribute type 10 has an invalid length.
[  755.854208][T16010] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3208'.
[  756.439041][T16019] team0: Device nlmon0 is of different type
[  756.524043][T16021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3212'.
[  757.407130][T16045] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3220'.
[  757.755446][T16054] team0: Device nlmon0 is of different type
[  757.920238][T16057] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3225'.
[  758.308065][T16072] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3229'.
[  758.704115][T16079] team0: Device nlmon0 is of different type
[  758.781780][T16083] FAULT_INJECTION: forcing a failure.
[  758.781780][T16083] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  758.796967][T16083] CPU: 0 PID: 16083 Comm: syz.2.3233 Not tainted syzkaller #0
[  758.805240][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  758.815872][T16083] Call Trace:
[  758.819263][T16083]  <TASK>
[  758.822300][T16083]  dump_stack_lvl+0x18c/0x250
[  758.827099][T16083]  ? show_regs_print_info+0x20/0x20
[  758.832510][T16083]  ? load_image+0x420/0x420
[  758.837078][T16083]  ? __might_fault+0xaa/0x120
[  758.841978][T16083]  ? __lock_acquire+0x7d40/0x7d40
[  758.847214][T16083]  should_fail_ex+0x39d/0x4d0
[  758.852233][T16083]  _copy_from_user+0x2f/0xe0
[  758.857526][T16083]  generic_map_update_batch+0x54b/0x810
[  758.863229][T16083]  ? rcu_read_unlock+0xa0/0xa0
[  758.868397][T16083]  ? __fdget+0x180/0x210
[  758.873106][T16083]  ? rcu_read_unlock+0xa0/0xa0
[  758.877990][T16083]  bpf_map_do_batch+0x3d7/0x610
[  758.882852][T16083]  __sys_bpf+0x381/0x890
[  758.887218][T16083]  ? bpf_link_show_fdinfo+0x390/0x390
[  758.892781][T16083]  ? lock_chain_count+0x20/0x20
[  758.897874][T16083]  __x64_sys_bpf+0x7c/0x90
[  758.902654][T16083]  do_syscall_64+0x55/0xb0
[  758.907431][T16083]  ? clear_bhb_loop+0x40/0x90
[  758.912372][T16083]  ? clear_bhb_loop+0x40/0x90
[  758.917239][T16083]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  758.923307][T16083] RIP: 0033:0x7f202619ce59
[  758.928127][T16083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  758.949683][T16083] RSP: 002b:00007f202712b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  758.958932][T16083] RAX: ffffffffffffffda RBX: 00007f2026415fa0 RCX: 00007f202619ce59
[  758.967617][T16083] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a
[  758.976111][T16083] RBP: 00007f202712b090 R08: 0000000000000000 R09: 0000000000000000
[  758.984440][T16083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  758.992937][T16083] R13: 00007f2026416038 R14: 00007f2026415fa0 R15: 00007ffd59c11f48
[  759.001065][T16083]  </TASK>
[  759.213563][T16091] validate_nla: 13 callbacks suppressed
[  759.214651][T16091] netlink: 'syz.0.3237': attribute type 10 has an invalid length.
[  759.567572][T16103] FAULT_INJECTION: forcing a failure.
[  759.567572][T16103] name failslab, interval 1, probability 0, space 0, times 0
[  759.603657][T16103] CPU: 1 PID: 16103 Comm: syz.0.3241 Not tainted syzkaller #0
[  759.612277][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  759.623055][T16103] Call Trace:
[  759.626582][T16103]  <TASK>
[  759.629801][T16103]  dump_stack_lvl+0x18c/0x250
[  759.634521][T16103]  ? show_regs_print_info+0x20/0x20
[  759.640771][T16103]  ? load_image+0x420/0x420
[  759.645565][T16103]  ? __might_sleep+0xe0/0xe0
[  759.647231][T16107] netlink: 'syz.3.3243': attribute type 10 has an invalid length.
[  759.650251][T16103]  ? __lock_acquire+0x7d40/0x7d40
[  759.664464][T16103]  should_fail_ex+0x39d/0x4d0
[  759.669880][T16103]  should_failslab+0x9/0x20
[  759.674774][T16103]  slab_pre_alloc_hook+0x59/0x310
[  759.680016][T16103]  ? scm_fp_dup+0x57/0x350
[  759.684518][T16103]  ? scm_fp_dup+0x57/0x350
[  759.689239][T16107] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3243'.
[  759.689466][T16103]  __kmem_cache_alloc_node+0x53/0x250
[  759.689514][T16103]  ? scm_fp_dup+0x57/0x350
[  759.709125][T16103]  __kmalloc_node_track_caller+0xa2/0x230
[  759.715097][T16103]  kmemdup+0x2b/0x70
[  759.719510][T16103]  scm_fp_dup+0x57/0x350
[  759.724389][T16103]  ? __unix_dgram_recvmsg+0x90e/0xd80
[  759.730128][T16103]  __unix_dgram_recvmsg+0x916/0xd80
[  759.734256][T16107] netlink: 'syz.3.3243': attribute type 4 has an invalid length.
[  759.735612][T16103]  ? unix_unhash+0x10/0x10
[  759.735645][T16103]  ? aa_af_perm+0x330/0x330
[  759.735660][T16103]  ? __lock_acquire+0x1273/0x7d40
[  759.735688][T16103]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  759.735707][T16103]  ? security_socket_recvmsg+0x89/0xb0
[  759.770011][T16103]  ? unix_dgram_recvmsg+0xad/0xd0
[  759.775243][T16103]  ? unix_dgram_sendmsg+0x16d0/0x16d0
[  759.780929][T16103]  ____sys_recvmsg+0x2ce/0x5e0
[  759.786001][T16103]  ? __sys_recvmsg_sock+0x50/0x50
[  759.791067][T16103]  ? import_iovec+0x73/0xa0
[  759.795942][T16103]  ___sys_recvmsg+0x216/0x590
[  759.800996][T16103]  ? __sys_recvmsg+0x2a0/0x2a0
[  759.806339][T16103]  ? ktime_get+0x7f/0x280
[  759.810952][T16103]  ? __fget_files+0x43d/0x4b0
[  759.815822][T16103]  __x64_sys_recvmsg+0x20c/0x2e0
[  759.820775][T16103]  ? perf_trace_preemptirq_template+0x269/0x330
[  759.827929][T16103]  ? ___sys_recvmsg+0x590/0x590
[  759.833239][T16103]  ? lockdep_hardirqs_on+0x98/0x150
[  759.838710][T16103]  do_syscall_64+0x55/0xb0
[  759.843218][T16103]  ? clear_bhb_loop+0x40/0x90
[  759.848072][T16103]  ? clear_bhb_loop+0x40/0x90
[  759.853633][T16103]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  759.859800][T16103] RIP: 0033:0x7fb38739ce59
[  759.864572][T16103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.885833][T16103] RSP: 002b:00007fb38818b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  759.894604][T16103] RAX: ffffffffffffffda RBX: 00007fb387615fa0 RCX: 00007fb38739ce59
[  759.902964][T16103] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 0000000000000013
[  759.911122][T16103] RBP: 00007fb38818b090 R08: 0000000000000000 R09: 0000000000000000
[  759.919352][T16103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  759.927941][T16103] R13: 00007fb387616038 R14: 00007fb387615fa0 R15: 00007ffff1d66648
[  759.936518][T16103]  </TASK>
[  760.367089][T16118] netlink: 'syz.1.3246': attribute type 10 has an invalid length.
[  760.618645][T16118] team0: Device nlmon0 is of different type
[  760.830998][T16120] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3247'.
[  760.850408][    C1] 
[  760.850418][    C1] ================================
[  760.850423][    C1] WARNING: inconsistent lock state
[  760.850440][    C1] syzkaller #0 Not tainted
[  760.850448][    C1] --------------------------------
[  760.850453][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  760.850460][    C1] syz.0.3247/16120 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  760.850477][    C1] ffff88802e8da6a0 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  760.850534][    C1] {INITIAL USE} state was registered at:
[  760.850540][    C1]   lock_acquire+0x19e/0x420
[  760.850556][    C1]   _raw_spin_lock+0x2e/0x40
[  760.850573][    C1]   htab_lock_bucket+0x17d/0x300
[  760.850592][    C1]   htab_lru_map_update_elem+0x2c6/0x990
[  760.850607][    C1]   bpf_map_update_value+0x660/0x720
[  760.850620][    C1]   map_update_elem+0x57b/0x700
[  760.850634][    C1]   __sys_bpf+0x6b5/0x890
[  760.850648][    C1]   __x64_sys_bpf+0x7c/0x90
[  760.850662][    C1]   do_syscall_64+0x55/0xb0
[  760.850677][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  760.850696][    C1] irq event stamp: 5620
[  760.850701][    C1] hardirqs last  enabled at (5619): [<ffffffff81af0626>] perf_swevent_event+0x476/0x570
[  760.850724][    C1] hardirqs last disabled at (5620): [<ffffffff8a87e9a3>] exc_debug+0x73/0x140
[  760.850745][    C1] softirqs last  enabled at (4704): [<ffffffff815277e3>] __irq_exit_rcu+0xd3/0x190
[  760.850765][    C1] softirqs last disabled at (4683): [<ffffffff815277e3>] __irq_exit_rcu+0xd3/0x190
[  760.850784][    C1] 
[  760.850784][    C1] other info that might help us debug this:
[  760.850789][    C1]  Possible unsafe locking scenario:
[  760.850789][    C1] 
[  760.850794][    C1]        CPU0
[  760.850797][    C1]        ----
[  760.850804][    C1]   lock(&htab->lockdep_key#2);
[  760.850816][    C1]   <Interrupt>
[  760.850818][    C1]     lock(&htab->lockdep_key#2);
[  760.850829][    C1] 
[  760.850829][    C1]  *** DEADLOCK ***
[  760.850829][    C1] 
[  760.850833][    C1] no locks held by syz.0.3247/16120.
[  760.850839][    C1] 
[  760.850839][    C1] stack backtrace:
[  760.850844][    C1] CPU: 1 PID: 16120 Comm: syz.0.3247 Not tainted syzkaller #0
[  760.850857][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  760.850865][    C1] Call Trace:
[  760.850872][    C1]  <#DB>
[  760.850884][    C1]  dump_stack_lvl+0x18c/0x250
[  760.850917][    C1]  ? show_regs_print_info+0x20/0x20
[  760.850970][    C1]  ? print_usage_bug+0x475/0x690
[  760.850994][    C1]  ? verify_lock_unused+0x18/0x140
[  760.851035][    C1]  lock_acquire+0x2c2/0x420
[  760.851076][    C1]  ? htab_lock_bucket+0x17d/0x300
[  760.851110][    C1]  ? read_lock_is_recursive+0x20/0x20
[  760.851396][    C1]  _raw_spin_lock+0x2e/0x40
[  760.851417][    C1]  ? htab_lock_bucket+0x17d/0x300
[  760.851437][    C1]  htab_lock_bucket+0x17d/0x300
[  760.851466][    C1]  ? htab_lru_map_delete_node+0x760/0x760
[  760.851498][    C1]  ? verify_lock_unused+0x18/0x140
[  760.851526][    C1]  ? jhash+0x34e/0x740
[  760.851557][    C1]  htab_lru_map_delete_elem+0x1a4/0x650
[  760.851594][    C1]  ? htab_lru_map_update_elem+0x990/0x990
[  760.851616][    C1]  ? perf_callchain+0x220/0x220
[  760.851662][    C1]  bpf_prog_69bf374aa003a95d+0x46/0x4a
[  760.851694][    C1]  bpf_overflow_handler+0x1fc/0x510
[  760.851735][    C1]  ? bpf_overflow_handler+0xde/0x510
[  760.851762][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  760.851781][    C1]  ? rcu_is_watching+0x15/0xb0
[  760.851809][    C1]  ? lock_release+0xb5/0x8c0
[  760.851845][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  760.851881][    C1]  __perf_event_overflow+0x447/0x630
[  760.851933][    C1]  perf_swevent_event+0x319/0x570
[  760.851969][    C1]  ? perf_tp_event+0x1520/0x1520
[  760.851994][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[  760.852013][    C1]  ? perf_trace_lock+0xfc/0x3b0
[  760.852068][    C1]  perf_bp_event+0x319/0x430
[  760.852114][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  760.852263][    C1]  ? lock_acquire+0x2c2/0x420
[  760.852320][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  760.852366][    C1]  notifier_call_chain+0x197/0x380
[  760.852492][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  760.852522][    C1]  atomic_notifier_call_chain+0xda/0x180
[  760.852554][    C1]  notify_die+0x145/0x1a0
[  760.852587][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  760.852640][    C1]  ? rcu_is_watching+0x15/0xb0
[  760.852678][    C1]  notify_debug+0x2e/0x50
[  760.852700][    C1]  exc_debug+0xde/0x140
[  760.852737][    C1]  asm_exc_debug+0x1e/0x40
[  760.852758][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  760.852779][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  760.852792][    C1] RSP: 0018:ffffc90004127d50 EFLAGS: 00050202
[  760.852807][    C1] RAX: ffffffff842a6101 RBX: 0000000000000048 RCX: 0000000000000007
[  760.852818][    C1] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90004127e01
[  760.852829][    C1] RBP: ffffc90004127ee8 R08: ffffc90004127e07 R09: 1ffff92000824fc0
[  760.852841][    C1] R10: dffffc0000000000 R11: fffff52000824fc1 R12: 0000200000000308
[  760.852853][    C1] R13: 0000000000000048 R14: ffffc90004127dc0 R15: 00002000000002c0
[  760.852896][    C1]  ? rcuref_put_slowpath+0x111/0x150
[  760.852948][    C1]  </#DB>
[  760.852953][    C1]  <TASK>
[  760.852959][    C1]  _copy_from_user+0x8b/0xe0
[  760.852991][    C1]  __sys_bpf+0x23e/0x890
[  760.853026][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  760.853113][    C1]  ? lock_chain_count+0x20/0x20
[  760.853285][    C1]  __x64_sys_bpf+0x7c/0x90
[  760.853317][    C1]  do_syscall_64+0x55/0xb0
[  760.853344][    C1]  ? clear_bhb_loop+0x40/0x90
[  760.853365][    C1]  ? clear_bhb_loop+0x40/0x90
[  760.853395][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  760.853417][    C1] RIP: 0033:0x7fb38739ce59
[  760.853439][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  760.853454][    C1] RSP: 002b:00007fb38818b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  760.853469][    C1] RAX: ffffffffffffffda RBX: 00007fb387615fa0 RCX: 00007fb38739ce59
[  760.853481][    C1] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 0000000000000000
[  760.853492][    C1] RBP: 00007fb387432d6f R08: 0000000000000000 R09: 0000000000000000
[  760.853502][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  760.853512][    C1] R13: 00007fb387616038 R14: 00007fb387615fa0 R15: 00007ffff1d66648
[  760.853578][    C1]  </TASK>
[  760.879511][T16122] netlink: 'syz.3.3248': attribute type 12 has an invalid length.
[  761.013315][T16129] netlink: 'syz.3.3248': attribute type 3 has an invalid length.
[  761.061280][T16122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3248'.
[  761.085073][T16129] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3248'.
[  761.105941][T16125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3248'.
[  761.604561][T16124] netlink: 'syz.2.3249': attribute type 10 has an invalid length.