last executing test programs:

3m5.433855247s ago: executing program 4 (id=2194):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r0=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)="456a0884d4fd6da1da30"}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fa, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES32=0x0], 0x50)
close(r1)

3m5.32822004s ago: executing program 4 (id=2195):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (fail_nth: 3)

3m4.98666274s ago: executing program 4 (id=2200):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x6)

3m4.166240002s ago: executing program 4 (id=2204):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000200), 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$SIOCSIFHWADDR(r1, 0x8b1b, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x1})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000180)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
r4 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x4, 0x0, 0xb1, 0x0, 0x6, 0x10000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x260, 0x436b, 0x3, 0x9, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb6}, r3, 0xb, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8}, 0x2000, 0x800, 0x0, 0x0, 0x46fa, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))

3m4.028146376s ago: executing program 4 (id=2209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)="0204010000000000000000001eafbcf706e1050000000000fc", 0x19}], 0x1}, 0x400c080)

3m3.929456709s ago: executing program 4 (id=2210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000000)="a08e7bb6b9ef05102197c709de139d0ac1a6e0bc22dffcbd5d87e2ec9e23e9cd1733cd51588513251dd55a24ef7a1fe456e6b5c3a16294b9c214", &(0x7f0000000280)=""/215}, 0x20)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

2m48.732787245s ago: executing program 32 (id=2210):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x184104, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x4}, 0x100600, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfdd9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00')
perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4060, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, &(0x7f0000000000)="a08e7bb6b9ef05102197c709de139d0ac1a6e0bc22dffcbd5d87e2ec9e23e9cd1733cd51588513251dd55a24ef7a1fe456e6b5c3a16294b9c214", &(0x7f0000000280)=""/215}, 0x20)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.151167561s ago: executing program 3 (id=3754):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x2c, &(0x7f0000000180), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xf, &(0x7f0000000340)=@ringbuf, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21)

1.888308218s ago: executing program 3 (id=3755):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)="020401000000000000", 0x9}], 0x1}, 0x400c080)

1.82002337s ago: executing program 3 (id=3758):
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, &(0x7f0000002080)=""/234, 0xea}, 0x122)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0xd, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'cpuset'}]}, 0x8)

1.704582093s ago: executing program 3 (id=3760):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x11, 0x800, 0x6eac, &(0x7f0000000580))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x101d0}}}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000000000000060000009500"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, @fallback=0x27366a95717eb0be, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0xe1, 0x11, 0xf, 0x0, 0xe9, 0x7a5f4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3fc, 0x2, @perf_bp={0x0, 0xf}, 0xc90a, 0xd, 0x6, 0x4, 0xc6, 0x4, 0x3, 0x0, 0xfffffff9, 0x0, 0x8}, 0x0, 0x100800000000000b, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

1.571284877s ago: executing program 2 (id=3762):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xa}, 0x929, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x19)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0xb, 0x1, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280))
close(0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
sendmsg$unix(r0, 0x0, 0x4010)

1.493425179s ago: executing program 3 (id=3764):
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000150081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x300}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0xffffffffffffff20, &(0x7f0000000080)="0666", 0x0, 0x2, 0x0, 0x80000000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x8a, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r1, &(0x7f0000000840)={&(0x7f0000001200)=@nl=@unspec, 0x80, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000680)=""/71, 0x47}], 0x2, &(0x7f0000000740)=""/219, 0xdb}, 0x40000102)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe0e)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r5, 0x0, 0x10, 0x0, 0xc)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe884700121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025c4679ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e78", 0xd8}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8947, &(0x7f00000002c0)={'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r8 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x0, 0xffffffffffffda7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x2, 0x1, 0x4, 0x0, 0x9, 0x8800, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb98, 0x4, @perf_config_ext={0x2}, 0x4004, 0x5, 0x800, 0x3, 0x9, 0xfff, 0x4, 0x0, 0xa, 0x0, 0x8ce}, 0x0, 0x5, r8, 0x11)

1.487382549s ago: executing program 0 (id=3765):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x4a041280, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x40810)
recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0)

1.400284251s ago: executing program 5 (id=3766):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x2, 0x200000000000006, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x8}, 0x117581, 0x5, 0xfffffffe, 0x7, 0x100000007f, 0x4, 0x1}, 0x0, 0x1, r0, 0x9)
ioctl$TUNGETVNETLE(r0, 0x8953, &(0x7f0000000040))
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001840)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2, 0x4, 0x1}, {0xb, 0x3}]}]}, {0x0, [0x61, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000840)=""/4096, 0x42, 0x1000, 0x0, 0x4}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10)

1.385748582s ago: executing program 2 (id=3767):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async, rerun: 32)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2) (async)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_macvtap\x00', 0xbd02}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f00000009c0)='\xa6j\x87Fd\xf6\xb3\xcb\xfb\xb6l\xc3\amz\xa7\x86\x16T\x0e i\xeeV\xa6\x85\xa3\x1c\x81\xd4\xce\xe4\x11Y\xdb\xbe\xa3\x0f@\x9a]o\xac\xc4P\bO\xbd\x1f\b\xb1\x97\x04! \x8ba\f\xd9zD\x98\xe1\x96F\xc1&*\x9d\x8b\xd9\a\xc7\xa4\x9e:\x14\xea\aI\xf7\xf7\xa4[\x88\xb9\xc0\xd9i\x81\xd1*\xac\xeaR\x1f^\xef\xeaH\x00\xf1{\xb5\x82\xaeo\xf6\xffB\xc5\xacR\xd4}\xfc3\x9aXk\b\rD\xf8\x1c\xe9]Z\x87\xbfN\x9dz\xd8\xabK}\xa6\xe9t\xd3\x05w7P\xbe\x8d8\v~\xb8\xc6\x88gI\xd0\xfd\x8a\xd3\xd2\xd6\x94\xa0\x7fv\x94Q\xa6\xc0\xdb\xce\x8d\x8c\xd5=\xcc\"\x9c\xe9F\xbf,A1Z\xf6\x87\xa1\xe9\xba)+\xb12\xa4n\x11K\xcaa\xc6\x8b\xbb\xe43\x0fb\xd8g\xb6\xf4') (async)
r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0)
ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000000880))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x11, 0xa, 0x300) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) (async)
socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
close(0xffffffffffffffff) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

1.343121263s ago: executing program 5 (id=3768):
r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_config_ext={0x8, 0x100000001}, 0xa89, 0x800, 0x1, 0x0, 0x0, 0x27, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33)
perf_event_open$cgroup(&(0x7f0000000680)={0x4, 0x80, 0x2, 0x0, 0x8, 0x2, 0x0, 0xfffffffffffffffa, 0x1000, 0x18, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x4, @perf_config_ext={0x5, 0xfffffffffffffffb}, 0x8, 0x6, 0x38d, 0x0, 0x2, 0x6, 0x2, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x3, r0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r4 = socket$kcm(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4}, 0x0)
openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002400)=""/4098, 0x1002}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x0, 0x0}, 0x30)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4)
close(r1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1.284339325s ago: executing program 1 (id=3769):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.237704356s ago: executing program 2 (id=3770):
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, &(0x7f0000002080)=""/234, 0xea}, 0x122)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0xd, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'cpuset'}]}, 0x8)

1.230677236s ago: executing program 0 (id=3771):
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x10, 0x400000002, 0x0)
unlink(0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37c, 0x0, 0x0, 0x80000000, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xb, 0x5, 0x7, 0xa2, 0x0, 0x3c, 0xc002, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x239, 0x3}, 0x18a62, 0x5, 0x7ffffff9, 0x3, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x40, 0x0, 0x0, 0x9, 0x740b9, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0xb, 0x6, 0x7, 0x0, 0xa1e, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000840))
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_config_ext={0xc}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x8d, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459000ec82c600374", 0x18}], 0x2}, 0x20000884)

1.169382458s ago: executing program 1 (id=3772):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0) (async)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0x17, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x2b, 0x1, 0x907, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], <r4=>0x0}, 0x40) (async)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) (async)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="1600000011200000", @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="ffbc442d77d6b8eba38b0c0091da7ad74855932bdec1ec31023e99ed280d36d5d966118800000000033963e184edfe406af09d4b", @ANYRES64=r4], 0x20)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) (async)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000000c0))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$kcm(0x21, 0x2, 0x2) (async)
r9 = socket$kcm(0x2, 0x1, 0x84)
write$cgroup_pressure(r9, &(0x7f0000000280)={'some', 0x20, 0x7, 0x20, 0x10}, 0x2f) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_bp={0x0, 0x1}, 0x4a61, 0x2, 0xfffffdfe, 0x1, 0x0, 0xfffffffd}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) (async)
r10 = socket$kcm(0x18, 0x0, 0x0)
close(r10)

1.125187729s ago: executing program 2 (id=3773):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close(0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
r1 = socket$kcm(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x3, 0x87)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x8020)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef)
bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000323fffffff50000", 0x5dc}], 0x1}, 0x0)

983.174723ms ago: executing program 1 (id=3774):
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0}, 0x18)
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x11)
sendmsg$sock(r1, 0x0, 0x8010)
socketpair(0x5, 0x800, 0xffff, &(0x7f0000000000))
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x7fff}, 0x15011, 0x0, 0x3, 0x1, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x8000, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007917b0000000000025000000000000000f7130576c12acd9"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x61}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90524fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000040000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b3d86fc431fc2d9700"/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c96800"/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7a0a80169f409b00ff0000000061101d0000000000950000eeffffff00ad961bad09d907e79ee52631fa6049bd72c2e51ccb3560cc0be0acdb06faabb73e6dd5edc27013b2ed2673001df862f310483cd07b8943a76dd6a5d2499fafa845a0ec60be3d51a28f98ab91f7e2ab3014e2a1d6410db659cad0cc87244af41941990407b2aec1ff824b3c9152"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
sendmsg$inet(r6, 0x0, 0x4000000)
close(r6)

983.013103ms ago: executing program 0 (id=3775):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x4a041280, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

775.988688ms ago: executing program 0 (id=3776):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x11, 0x800, 0x6eac, &(0x7f0000000580))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x101d0}}}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000800000000000000060000009500"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, @fallback=0x27366a95717eb0be, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0xe1, 0x11, 0xf, 0x0, 0xe9, 0x7a5f4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3fc, 0x2, @perf_bp={0x0, 0xf}, 0xc90a, 0xd, 0x6, 0x4, 0xc6, 0x4, 0x3, 0x0, 0xfffffff9, 0x0, 0x8}, 0x0, 0x100800000000000b, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080))

762.882349ms ago: executing program 5 (id=3777):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x1a, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0xa}, 0x929, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x19)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0xb, 0x1, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000280))
close(0xffffffffffffffff)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
sendmsg$unix(r0, 0x0, 0x4010)

676.035401ms ago: executing program 1 (id=3778):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x9}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x20000, 0x2, 0x0, 0x349b, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r3, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}, {0x0}], 0x2}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc)
gettid()
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

607.547193ms ago: executing program 3 (id=3779):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x4}, 0x94)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x8}, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000fc0)={0x1, 0xffffffffffffff31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x407, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x4, 0x0, 0x4b571f96}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000005c0), 0x12)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[], 0x0, 0x26, 0x0, 0x1}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

601.411013ms ago: executing program 2 (id=3780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x13, 0x0}, 0x63)
socket$kcm(0x29, 0x7, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000250081044e81f782db44b904021d0803070000000300000088a8ffff060003600e1208000f0000810401a80016000a00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbacec017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97013d2c", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000210081044e81f782db44b904020000030080000000000000e80c0d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8db52b46481277cf4090000001fb791643a101ecec9456d6845dfe1d9db22f3d233de7929623df5c74ffe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40deee4edef3d939acd92954b43370e", 0xd8}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6)

574.169434ms ago: executing program 0 (id=3781):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb01001800000000000000a4000000a4000000060000000000000000000003000000000100000004000000050000000a0000000100000604000d0a06000000020000000f000000020000930b0000000900000081000000000000000d0000004f2bffff01000000010000000000000801000000070000000000000c0500000004000000020000"], &(0x7f0000000040)=""/73, 0xc2, 0x49, 0x1, 0xfffff0df}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000000200010000000000", @ANYRES32, @ANYBLOB="0000000000000000cdda0dffa24420aada79dd40", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002300)={&(0x7f0000000140)="9df660184b7993c206156cdf530c7f8b4ce9f969b88be7f4d964af1e0632735e2730f1fe1675b5b1836f9ad5a7661f85bb684275e971b4e4cc766f7979ca647e25ddff77d2d8ac1fc9345eecbcdb25e617107b9fb799ec463f", &(0x7f00000002c0)=""/117, &(0x7f0000000340)="f27f290c06dd273d19c39dbf", &(0x7f0000001300)="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", 0x2, r0}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tmm'], 0xa)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d080000000000000000070a000a", 0x1f}], 0x1}, 0x14)

455.757257ms ago: executing program 1 (id=3782):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$sock(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x44801)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

446.195297ms ago: executing program 5 (id=3783):
socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, &(0x7f0000002080)=""/234, 0xea}, 0x122)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0xd, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2b, 'cpuset'}]}, 0x8)

366.139899ms ago: executing program 5 (id=3784):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0)

335.103871ms ago: executing program 5 (id=3785):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) (fail_nth: 2)

261.839182ms ago: executing program 1 (id=3786):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x16, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000e007110690000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = socket$kcm(0x11, 0x2, 0x300)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb17}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x200052cc)
sendmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="a512", 0x2}], 0x1}, 0x0)

316.39µs ago: executing program 0 (id=3787):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x4a041280, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

0s ago: executing program 2 (id=3788):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, &(0x7f0000000340)}, 0x94)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)

kernel console output (not intermixed with test programs):

DEV_CHANGE): vlan1: link becomes ready
[  424.516741][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  424.526755][T13062] CPU: 0 PID: 13062 Comm: syz.3.2965 Not tainted syzkaller #0
[  424.534245][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  424.544311][T13062] Call Trace:
[  424.547608][T13062]  <TASK>
[  424.550545][T13062]  dump_stack_lvl+0x188/0x250
[  424.555238][T13062]  ? show_regs_print_info+0x20/0x20
[  424.560444][T13062]  ? load_image+0x400/0x400
[  424.564936][T13062]  ? __lock_acquire+0x7d10/0x7d10
[  424.569950][T13062]  should_fail+0x38c/0x4c0
[  424.574353][T13062]  _copy_from_user+0x2e/0x170
[  424.579017][T13062]  kstrtouint_from_user+0xd3/0x220
[  424.584112][T13062]  ? kstrtol_from_user+0x2a0/0x2a0
[  424.589219][T13062]  proc_fail_nth_write+0x8b/0x200
[  424.594225][T13062]  ? proc_fail_nth_read+0x220/0x220
[  424.599408][T13062]  ? common_file_perm+0x171/0x1c0
[  424.604454][T13062]  ? proc_fail_nth_read+0x220/0x220
[  424.609686][T13062]  vfs_write+0x30b/0xd60
[  424.613932][T13062]  ? file_end_write+0x250/0x250
[  424.618786][T13062]  ? __fget_files+0x40f/0x480
[  424.623470][T13062]  ? mutex_lock_nested+0x17/0x20
[  424.628400][T13062]  ? __fdget_pos+0x2bf/0x370
[  424.632979][T13062]  ? ksys_write+0x71/0x260
[  424.637388][T13062]  ksys_write+0x152/0x260
[  424.641713][T13062]  ? __ia32_sys_read+0x80/0x80
[  424.646470][T13062]  ? lockdep_hardirqs_on+0x94/0x140
[  424.651664][T13062]  do_syscall_64+0x4c/0xa0
[  424.656100][T13062]  ? clear_bhb_loop+0x30/0x80
[  424.660769][T13062]  ? clear_bhb_loop+0x30/0x80
[  424.665434][T13062]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  424.671316][T13062] RIP: 0033:0x7ffbd4b8860e
[  424.675722][T13062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  424.695331][T13062] RSP: 002b:00007ffbd2e20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  424.703735][T13062] RAX: ffffffffffffffda RBX: 00007ffbd2e216c0 RCX: 00007ffbd4b8860e
[  424.711695][T13062] RDX: 0000000000000001 RSI: 00007ffbd2e210a0 RDI: 0000000000000004
[  424.719654][T13062] RBP: 00007ffbd2e21090 R08: 0000000000000000 R09: 0000000000000000
[  424.727608][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  424.735566][T13062] R13: 00007ffbd4e41038 R14: 00007ffbd4e40fa0 R15: 00007fff9398a8b8
[  424.743540][T13062]  </TASK>
[  424.785963][ T4235] device hsr_slave_0 left promiscuous mode
[  424.832523][ T4235] device hsr_slave_1 left promiscuous mode
[  424.840104][ T4235] bridge0: port 3(hsr0) entered disabled state
[  424.854798][ T4235] device bridge_slave_1 left promiscuous mode
[  424.872271][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.898996][ T4235] device bridge_slave_0 left promiscuous mode
[  424.911910][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.931179][ T4235] device veth1_vlan left promiscuous mode
[  424.941401][ T4235] device veth0_vlan left promiscuous mode
[  425.087541][T13081] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2969'.
[  425.316501][ T4235] team0 (unregistering): Port device team_slave_1 removed
[  425.335821][ T4235] team0 (unregistering): Port device team_slave_0 removed
[  425.357303][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.371288][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.444134][ T4235] bond0 (unregistering): Released all slaves
[  425.541909][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  425.550512][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  425.593611][T12937] device veth0_macvtap entered promiscuous mode
[  425.644044][T12937] device veth1_macvtap entered promiscuous mode
[  425.666518][T12937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.697390][T12937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.734769][T12937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.747711][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  425.772683][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  425.780886][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  425.804148][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  425.815887][T12937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.840826][T12937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.859941][T12937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.876106][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  425.887657][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  425.911232][T12937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.924551][T12937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.939305][T12937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.953939][T12937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.301992][ T4227] Bluetooth: hci2: command 0x040f tx timeout
[  426.676781][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.710901][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.809635][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  426.856093][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.877668][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.878680][T13125] FAULT_INJECTION: forcing a failure.
[  426.878680][T13125] name failslab, interval 1, probability 0, space 0, times 0
[  426.896728][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  426.960015][T13126] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  426.980321][T13126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  426.991224][T13125] CPU: 1 PID: 13125 Comm: syz.5.2983 Not tainted syzkaller #0
[  427.002900][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  427.012957][T13125] Call Trace:
[  427.016234][T13125]  <TASK>
[  427.019168][T13125]  dump_stack_lvl+0x188/0x250
[  427.023853][T13125]  ? show_regs_print_info+0x20/0x20
[  427.029059][T13125]  ? load_image+0x400/0x400
[  427.033569][T13125]  ? __lock_acquire+0x7d10/0x7d10
[  427.038597][T13125]  ? rcu_lock_acquire+0x30/0x30
[  427.043447][T13125]  should_fail+0x38c/0x4c0
[  427.047871][T13125]  should_failslab+0x5/0x20
[  427.052376][T13125]  slab_pre_alloc_hook+0x51/0xc0
[  427.057320][T13125]  ? security_file_alloc+0x30/0x110
[  427.062513][T13125]  kmem_cache_alloc+0x3d/0x290
[  427.067271][T13125]  ? rcu_is_watching+0x11/0xa0
[  427.072037][T13125]  security_file_alloc+0x30/0x110
[  427.077053][T13125]  __alloc_file+0xc2/0x240
[  427.081457][T13125]  alloc_empty_file+0x90/0x180
[  427.086215][T13125]  path_openat+0x10f/0x2fa0
[  427.090718][T13125]  ? verify_lock_unused+0x140/0x140
[  427.095902][T13125]  ? __kasan_slab_alloc+0xb3/0xd0
[  427.100912][T13125]  ? __kasan_slab_alloc+0x9c/0xd0
[  427.105921][T13125]  ? slab_post_alloc_hook+0x4c/0x380
[  427.111189][T13125]  ? __x64_sys_openat+0x135/0x160
[  427.116201][T13125]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  427.122255][T13125]  ? do_filp_open+0x410/0x410
[  427.126932][T13125]  do_filp_open+0x1e2/0x410
[  427.131424][T13125]  ? vfs_tmpfile+0x300/0x300
[  427.136011][T13125]  ? _raw_spin_unlock+0x24/0x40
[  427.140848][T13125]  ? alloc_fd+0x598/0x630
[  427.145165][T13125]  do_sys_openat2+0x150/0x4b0
[  427.149829][T13125]  ? __lock_acquire+0x7d10/0x7d10
[  427.154843][T13125]  ? do_sys_open+0xe0/0xe0
[  427.159245][T13125]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  427.165216][T13125]  ? lock_chain_count+0x20/0x20
[  427.170054][T13125]  ? vtime_user_exit+0x2c8/0x3e0
[  427.175032][T13125]  __x64_sys_openat+0x135/0x160
[  427.179877][T13125]  do_syscall_64+0x4c/0xa0
[  427.184283][T13125]  ? clear_bhb_loop+0x30/0x80
[  427.188947][T13125]  ? clear_bhb_loop+0x30/0x80
[  427.193608][T13125]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  427.199486][T13125] RIP: 0033:0x7fa9be8ffdd9
[  427.203889][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  427.223486][T13125] RSP: 002b:00007fa9bcb38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  427.231887][T13125] RAX: ffffffffffffffda RBX: 00007fa9beb79090 RCX: 00007fa9be8ffdd9
[  427.239863][T13125] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  427.247823][T13125] RBP: 00007fa9bcb38090 R08: 0000000000000000 R09: 0000000000000000
[  427.255778][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.263821][T13125] R13: 00007fa9beb79128 R14: 00007fa9beb79090 R15: 00007fff5dded618
[  427.271793][T13125]  </TASK>
[  427.433959][T13138] netlink: 'syz.2.2930': attribute type 10 has an invalid length.
[  427.482194][T13138] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2930'.
[  427.525734][T13138] device hsr0 entered promiscuous mode
[  427.562865][T13138] bridge0: port 3(hsr0) entered blocking state
[  427.596817][T13138] bridge0: port 3(hsr0) entered disabled state
[  427.635947][T13138] bridge0: port 3(hsr0) entered blocking state
[  427.642233][T13138] bridge0: port 3(hsr0) entered forwarding state
[  428.230730][T13144] chnl_net:caif_netlink_parms(): no params data found
[  428.359090][T13144] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.372183][ T4659] Bluetooth: hci2: command 0x0419 tx timeout
[  428.378998][T13144] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.415835][T13144] device bridge_slave_0 entered promiscuous mode
[  428.430976][T13144] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.440443][T13144] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.450173][T13144] device bridge_slave_1 entered promiscuous mode
[  428.496482][T13168] netlink: 'syz.2.2995': attribute type 21 has an invalid length.
[  428.509287][T13168] netlink: 'syz.2.2995': attribute type 6 has an invalid length.
[  428.535351][T13168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2995'.
[  428.569474][T13171] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2996'.
[  428.596571][T13144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  428.649100][T13144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  428.761521][T13144] team0: Port device team_slave_0 added
[  428.786234][T13180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  428.841062][T13180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  428.906436][T13188] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3002'.
[  428.972846][T13144] team0: Port device team_slave_1 added
[  428.996152][T13186] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3000'.
[  429.032814][T13144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.069270][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.159416][T13144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.220173][T13144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.242572][T13144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  429.375228][T13144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.606921][T13144] device hsr_slave_0 entered promiscuous mode
[  429.635807][T13144] device hsr_slave_1 entered promiscuous mode
[  429.643377][T13144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.659994][T13144] Cannot create hsr debugfs directory
[  429.829010][ T4557] Bluetooth: hci3: command 0x0409 tx timeout
[  430.038567][T13144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.214357][T13231] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3014'.
[  430.267566][T13144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.405373][T13144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.532663][T13144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.574647][T13236] netlink: 'syz.1.3017': attribute type 10 has an invalid length.
[  430.610490][T13236] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3017'.
[  430.679369][T13243] netlink: 'syz.3.3019': attribute type 10 has an invalid length.
[  430.699231][T13243] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3019'.
[  430.818402][T13144] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  430.839973][T13144] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  430.868733][T13251] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3021'.
[  430.901790][T13144] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  430.980445][T13144] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  431.158064][T13258] netlink: 'syz.1.3024': attribute type 10 has an invalid length.
[  431.170594][T13258] team0: Device veth1_macvtap failed to register rx_handler
[  431.243488][T13144] 8021q: adding VLAN 0 to HW filter on device bond0
[  431.328212][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  431.348784][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  431.388093][T13144] 8021q: adding VLAN 0 to HW filter on device team0
[  431.479984][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  431.500245][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  431.531466][T13267] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3026'.
[  431.543379][T12101] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.550525][T12101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  431.607393][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  431.622261][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  431.631435][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  431.644039][T12101] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.651185][T12101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  431.670996][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  431.708634][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  431.748641][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  431.797462][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  431.870648][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  431.887727][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  431.897448][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  431.902140][ T4557] Bluetooth: hci3: command 0x041b tx timeout
[  431.929278][T13144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  431.955170][T13144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  431.974192][T13272] netlink: 'syz.5.3030': attribute type 10 has an invalid length.
[  431.994829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  432.009557][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  432.044666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  432.072765][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  432.086844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  432.104035][T13278] pim6reg0: tun_chr_ioctl cmd 21531
[  432.539551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  432.555247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  432.569871][T13144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.604237][ T4235] device hsr_slave_0 left promiscuous mode
[  432.615325][ T4235] device hsr_slave_1 left promiscuous mode
[  432.635612][ T4235] bridge0: port 4(team0) entered disabled state
[  432.665961][ T4235] bridge0: port 3(hsr0) entered disabled state
[  432.677047][ T4235] device bridge_slave_1 left promiscuous mode
[  432.684693][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.706439][ T4235] device bridge_slave_0 left promiscuous mode
[  432.713082][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.726368][ T4235] device veth0_macvtap left promiscuous mode
[  432.733815][ T4235] device veth1_vlan left promiscuous mode
[  432.739664][ T4235] device veth0_vlan left promiscuous mode
[  432.848882][T13304] __nla_validate_parse: 2 callbacks suppressed
[  432.848899][T13304] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3039'.
[  433.057828][ T4235] device team_slave_1 left promiscuous mode
[  433.068815][ T4235] team0 (unregistering): Port device team_slave_1 removed
[  433.084477][ T4235] device team_slave_0 left promiscuous mode
[  433.093640][ T4235] team0 (unregistering): Port device team_slave_0 removed
[  433.107839][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.123407][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.244348][ T4235] bond0 (unregistering): Released all slaves
[  433.264946][T13308] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3041'.
[  433.328648][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  433.348205][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  433.395769][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  433.411111][T13310] FAULT_INJECTION: forcing a failure.
[  433.411111][T13310] name failslab, interval 1, probability 0, space 0, times 0
[  433.425191][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  433.469133][T13310] CPU: 1 PID: 13310 Comm: syz.1.3043 Not tainted syzkaller #0
[  433.476309][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  433.476630][T13310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  433.486202][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  433.493859][T13310] Call Trace:
[  433.493869][T13310]  <TASK>
[  433.493877][T13310]  dump_stack_lvl+0x188/0x250
[  433.493902][T13310]  ? show_regs_print_info+0x20/0x20
[  433.493919][T13310]  ? load_image+0x400/0x400
[  433.493941][T13310]  ? rcu_lock_release+0x5/0x20
[  433.493960][T13310]  should_fail+0x38c/0x4c0
[  433.493986][T13310]  should_failslab+0x5/0x20
[  433.494003][T13310]  slab_pre_alloc_hook+0x51/0xc0
[  433.494019][T13310]  ? __nf_conntrack_alloc+0x99/0x380
[  433.494036][T13310]  kmem_cache_alloc+0x3d/0x290
[  433.494053][T13310]  __nf_conntrack_alloc+0x99/0x380
[  433.494073][T13310]  init_conntrack+0x258/0x14d0
[  433.494091][T13310]  ? __nf_conntrack_find_get+0x581/0x650
[  433.494108][T13310]  ? early_drop+0x810/0x810
[  433.494127][T13310]  ? nf_conntrack_find_get+0x670/0x670
[  433.494144][T13310]  ? __siphash_unaligned+0x258/0x3a0
[  433.494168][T13310]  nf_conntrack_in+0xd38/0x1730
[  433.494202][T13310]  ? nf_ct_pernet+0x240/0x240
[  433.494242][T13310]  ? __lock_acquire+0x12e8/0x7d10
[  433.595481][T13310]  ? ipv4_conntrack_defrag+0x284/0x590
[  433.600942][T13310]  ? ipv4_conntrack_local+0x11f/0x200
[  433.606309][T13310]  ? ipv4_conntrack_in+0x20/0x20
[  433.611237][T13310]  nf_hook_slow+0xb9/0x200
[  433.615644][T13310]  ? nf_hook+0x360/0x360
[  433.619880][T13310]  nf_hook+0x205/0x360
[  433.623941][T13310]  ? __ip_local_out+0x5e0/0x5e0
[  433.628783][T13310]  ? nf_hook+0x360/0x360
[  433.633012][T13310]  ? prandom_u32+0x217/0x250
[  433.637591][T13310]  ? __ip_make_skb+0x11cd/0x18a0
[  433.642520][T13310]  __ip_local_out+0x4b7/0x5e0
[  433.647182][T13310]  ? nf_hook+0x360/0x360
[  433.651421][T13310]  ip_send_skb+0x48/0x1c0
[  433.655742][T13310]  udp_send_skb+0x94a/0x1330
[  433.660336][T13310]  udp_sendmsg+0x733/0x2370
[  433.664823][T13310]  ? verify_lock_unused+0x140/0x140
[  433.670013][T13310]  ? aa_sk_perm+0x910/0x910
[  433.674508][T13310]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  433.679364][T13310]  ? __lock_acquire+0x12e8/0x7d10
[  433.684377][T13310]  ? udp_cmsg_send+0x350/0x350
[  433.689150][T13310]  ? aa_af_perm+0x340/0x340
[  433.693638][T13310]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  433.700040][T13310]  ? sock_rps_record_flow+0x17/0x3b0
[  433.705318][T13310]  ? inet_sendmsg+0x78/0x2f0
[  433.709896][T13310]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  433.715171][T13310]  ? security_socket_sendmsg+0x7c/0xa0
[  433.720619][T13310]  ? inet_send_prepare+0x260/0x260
[  433.725726][T13310]  ____sys_sendmsg+0x5b7/0x8f0
[  433.730487][T13310]  ? __sys_sendmsg_sock+0x30/0x30
[  433.735508][T13310]  ? import_iovec+0x6f/0xa0
[  433.740002][T13310]  ___sys_sendmsg+0x236/0x2e0
[  433.744676][T13310]  ? __sys_sendmsg+0x2a0/0x2a0
[  433.749437][T13310]  ? vfs_write+0x8b2/0xd60
[  433.753858][T13310]  __se_sys_sendmsg+0x1af/0x290
[  433.758708][T13310]  ? __x64_sys_sendmsg+0x80/0x80
[  433.763639][T13310]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  433.769621][T13310]  ? lockdep_hardirqs_on+0x94/0x140
[  433.774813][T13310]  do_syscall_64+0x4c/0xa0
[  433.779220][T13310]  ? clear_bhb_loop+0x30/0x80
[  433.783884][T13310]  ? clear_bhb_loop+0x30/0x80
[  433.788550][T13310]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  433.794429][T13310] RIP: 0033:0x7fa642f78dd9
[  433.798841][T13310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.818448][T13310] RSP: 002b:00007fa6411d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  433.826856][T13310] RAX: ffffffffffffffda RBX: 00007fa6431f1fa0 RCX: 00007fa642f78dd9
[  433.834821][T13310] RDX: 0000000004000800 RSI: 0000200000000400 RDI: 0000000000000003
[  433.842782][T13310] RBP: 00007fa6411d2090 R08: 0000000000000000 R09: 0000000000000000
[  433.850740][T13310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.858699][T13310] R13: 00007fa6431f2038 R14: 00007fa6431f1fa0 R15: 00007ffc20a4b668
[  433.866677][T13310]  </TASK>
[  433.884991][T13144] device veth0_vlan entered promiscuous mode
[  433.937728][T13144] device veth1_vlan entered promiscuous mode
[  433.965974][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  433.982048][ T4227] Bluetooth: hci3: command 0x040f tx timeout
[  434.073311][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  434.087959][T13144] device veth0_macvtap entered promiscuous mode
[  434.097050][T13318] netlink: 'syz.5.3044': attribute type 10 has an invalid length.
[  434.105514][T13318] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3044'.
[  434.114746][T13321] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3046'.
[  434.130249][T13322] netlink: 'syz.1.3046': attribute type 39 has an invalid length.
[  434.219373][T13144] device veth1_macvtap entered promiscuous mode
[  434.320642][T13328] netlink: 'syz.5.3048': attribute type 10 has an invalid length.
[  434.402799][T13328] team0: Port device macvlan0 added
[  434.413447][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.431851][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.444073][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  434.455359][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.469779][T13144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  434.484139][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.495409][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.506439][T13144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  434.517979][T13144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  434.548747][T13144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  434.608530][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  434.629028][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  434.648131][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  434.669954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  434.688319][T13336] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3049'.
[  434.702146][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  434.711220][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  434.742530][T13144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.770144][T13144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.783072][T13144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.792270][T13144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.944315][T13341] netlink: 'syz.2.3052': attribute type 46 has an invalid length.
[  435.101212][  T474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.115628][  T474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.154590][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  435.231644][  T474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.249820][  T474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.278364][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  436.062192][ T4712] Bluetooth: hci3: command 0x0419 tx timeout
[  436.540188][T13372] chnl_net:caif_netlink_parms(): no params data found
[  436.576652][T13385] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3063'.
[  436.625047][T13372] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.632366][T13372] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.640497][T13372] device bridge_slave_0 entered promiscuous mode
[  436.649801][T13372] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.657260][T13372] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.665832][T13372] device bridge_slave_1 entered promiscuous mode
[  436.697783][T13372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.713739][T13372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.780861][T13372] team0: Port device team_slave_0 added
[  436.799724][T13372] team0: Port device team_slave_1 added
[  436.828529][T13372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.835723][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.890893][T13372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.905277][T13372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.915085][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.943286][T13372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  437.104345][T13372] device hsr_slave_0 entered promiscuous mode
[  437.128259][T13372] device hsr_slave_1 entered promiscuous mode
[  437.177572][T13372] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  437.201940][T13372] Cannot create hsr debugfs directory
[  437.763795][T13421] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.3074'.
[  437.977942][T13372] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.163545][T13372] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.245623][T13426] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3075'.
[  438.291876][ T4659] Bluetooth: hci0: command 0x0409 tx timeout
[  438.401856][T13372] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.456431][T13372] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.730282][T13372] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  438.770403][T13452] FAULT_INJECTION: forcing a failure.
[  438.770403][T13452] name failslab, interval 1, probability 0, space 0, times 0
[  438.771311][T13372] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  438.812440][T13452] CPU: 1 PID: 13452 Comm: syz.2.3084 Not tainted syzkaller #0
[  438.815820][T13372] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  438.819940][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  438.819957][T13452] Call Trace:
[  438.819967][T13452]  <TASK>
[  438.819978][T13452]  dump_stack_lvl+0x188/0x250
[  438.820014][T13452]  ? show_regs_print_info+0x20/0x20
[  438.852816][T13452]  ? load_image+0x400/0x400
[  438.857360][T13452]  ? __might_sleep+0xf0/0xf0
[  438.861992][T13452]  ? __lock_acquire+0x7d10/0x7d10
[  438.867054][T13452]  should_fail+0x38c/0x4c0
[  438.871482][T13452]  should_failslab+0x5/0x20
[  438.875989][T13452]  slab_pre_alloc_hook+0x51/0xc0
[  438.880956][T13452]  __kmalloc_node_track_caller+0x68/0x3a0
[  438.886698][T13452]  ? netlink_sendmsg+0x654/0xbe0
[  438.891664][T13452]  ? kmem_cache_alloc_node+0x162/0x2d0
[  438.897154][T13452]  ? __alloc_skb+0xf4/0x750
[  438.901692][T13452]  ? netlink_sendmsg+0x654/0xbe0
[  438.906658][T13452]  __alloc_skb+0x22c/0x750
[  438.911134][T13452]  netlink_sendmsg+0x654/0xbe0
[  438.915934][T13452]  ? netlink_getsockopt+0x570/0x570
[  438.921163][T13452]  ? aa_sock_msg_perm+0x94/0x150
[  438.926130][T13452]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  438.931432][T13452]  ? security_socket_sendmsg+0x7c/0xa0
[  438.936912][T13452]  ? netlink_getsockopt+0x570/0x570
[  438.942124][T13452]  ____sys_sendmsg+0x5b7/0x8f0
[  438.946918][T13452]  ? __sys_sendmsg_sock+0x30/0x30
[  438.951964][T13452]  ? import_iovec+0x6f/0xa0
[  438.956479][T13452]  ___sys_sendmsg+0x236/0x2e0
[  438.961192][T13452]  ? __sys_sendmsg+0x2a0/0x2a0
[  438.965980][T13452]  ? trace_event_raw_event_lock+0x270/0x270
[  438.971869][T13452]  ? vfs_write+0x8b2/0xd60
[  438.976331][T13452]  __se_sys_sendmsg+0x1af/0x290
[  438.981186][T13452]  ? __x64_sys_sendmsg+0x80/0x80
[  438.986121][T13452]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  438.992132][T13452]  ? lockdep_hardirqs_on+0x94/0x140
[  438.997340][T13452]  do_syscall_64+0x4c/0xa0
[  439.001755][T13452]  ? clear_bhb_loop+0x30/0x80
[  439.006431][T13452]  ? clear_bhb_loop+0x30/0x80
[  439.011115][T13452]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  439.017005][T13452] RIP: 0033:0x7f8e0d19edd9
[  439.021420][T13452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.041028][T13452] RSP: 002b:00007f8e0b3f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  439.049444][T13452] RAX: ffffffffffffffda RBX: 00007f8e0d417fa0 RCX: 00007f8e0d19edd9
[  439.057409][T13452] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000005
[  439.065377][T13452] RBP: 00007f8e0b3f8090 R08: 0000000000000000 R09: 0000000000000000
[  439.073351][T13452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.081320][T13452] R13: 00007f8e0d418038 R14: 00007f8e0d417fa0 R15: 00007ffc7d142af8
[  439.089323][T13452]  </TASK>
[  439.109113][T13372] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  439.318509][T13372] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.363169][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  439.371564][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  439.386496][T13372] 8021q: adding VLAN 0 to HW filter on device team0
[  439.437865][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  439.459786][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  439.517966][T12101] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.525100][T12101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  439.701010][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  439.714492][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  439.733231][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  439.746327][T12101] bridge0: port 2(bridge_slave_1) entered blocking state
[  439.753470][T12101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  439.762291][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  439.798126][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  439.861856][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  439.893691][ T1426] ieee802154 phy0 wpan0: encryption failed: -22
[  439.900004][ T1426] ieee802154 phy1 wpan1: encryption failed: -22
[  439.919573][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  439.934158][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  439.943516][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  439.953018][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  439.961558][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  439.985530][T13372] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  440.029801][T13372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  440.053678][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  440.062647][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  440.071386][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  440.158924][T13470] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3090'.
[  440.376572][ T1106] Bluetooth: hci0: command 0x041b tx timeout
[  440.398028][T13494] FAULT_INJECTION: forcing a failure.
[  440.398028][T13494] name failslab, interval 1, probability 0, space 0, times 0
[  440.415727][T13494] CPU: 0 PID: 13494 Comm: syz.2.3097 Not tainted syzkaller #0
[  440.423221][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.433283][T13494] Call Trace:
[  440.436564][T13494]  <TASK>
[  440.439489][T13494]  dump_stack_lvl+0x188/0x250
[  440.444169][T13494]  ? show_regs_print_info+0x20/0x20
[  440.449359][T13494]  ? load_image+0x400/0x400
[  440.453849][T13494]  ? __might_sleep+0xf0/0xf0
[  440.458424][T13494]  ? __lock_acquire+0x7d10/0x7d10
[  440.463433][T13494]  ? netlink_insert+0xe95/0x11f0
[  440.468359][T13494]  should_fail+0x38c/0x4c0
[  440.472767][T13494]  should_failslab+0x5/0x20
[  440.477260][T13494]  slab_pre_alloc_hook+0x51/0xc0
[  440.482183][T13494]  kmem_cache_alloc_node+0x47/0x2d0
[  440.487375][T13494]  ? __alloc_skb+0xf4/0x750
[  440.491871][T13494]  __alloc_skb+0xf4/0x750
[  440.496193][T13494]  netlink_sendmsg+0x654/0xbe0
[  440.500946][T13494]  ? netlink_getsockopt+0x570/0x570
[  440.506129][T13494]  ? aa_sock_msg_perm+0x94/0x150
[  440.511056][T13494]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  440.516326][T13494]  ? security_socket_sendmsg+0x7c/0xa0
[  440.521771][T13494]  ? netlink_getsockopt+0x570/0x570
[  440.526958][T13494]  ____sys_sendmsg+0x5b7/0x8f0
[  440.531715][T13494]  ? __sys_sendmsg_sock+0x30/0x30
[  440.536729][T13494]  ? import_iovec+0x6f/0xa0
[  440.541222][T13494]  ___sys_sendmsg+0x236/0x2e0
[  440.545893][T13494]  ? __sys_sendmsg+0x2a0/0x2a0
[  440.550667][T13494]  __se_sys_sendmsg+0x1af/0x290
[  440.555507][T13494]  ? __x64_sys_sendmsg+0x80/0x80
[  440.560429][T13494]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  440.566402][T13494]  ? lockdep_hardirqs_on+0x94/0x140
[  440.571593][T13494]  do_syscall_64+0x4c/0xa0
[  440.575995][T13494]  ? clear_bhb_loop+0x30/0x80
[  440.580664][T13494]  ? clear_bhb_loop+0x30/0x80
[  440.585329][T13494]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  440.591295][T13494] RIP: 0033:0x7f8e0d19edd9
[  440.595699][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.615294][T13494] RSP: 002b:00007f8e0b3f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  440.623695][T13494] RAX: ffffffffffffffda RBX: 00007f8e0d417fa0 RCX: 00007f8e0d19edd9
[  440.631654][T13494] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  440.639617][T13494] RBP: 00007f8e0b3f8090 R08: 0000000000000000 R09: 0000000000000000
[  440.647577][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.655533][T13494] R13: 00007f8e0d418038 R14: 00007f8e0d417fa0 R15: 00007ffc7d142af8
[  440.663503][T13494]  </TASK>
[  440.810989][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  440.834936][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  440.869436][T13501] FAULT_INJECTION: forcing a failure.
[  440.869436][T13501] name failslab, interval 1, probability 0, space 0, times 0
[  440.917519][T13501] CPU: 0 PID: 13501 Comm: syz.2.3099 Not tainted syzkaller #0
[  440.925041][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  440.935213][T13501] Call Trace:
[  440.938539][T13501]  <TASK>
[  440.941484][T13501]  dump_stack_lvl+0x188/0x250
[  440.946167][T13501]  ? show_regs_print_info+0x20/0x20
[  440.951364][T13501]  ? load_image+0x400/0x400
[  440.955871][T13501]  ? __might_sleep+0xf0/0xf0
[  440.960461][T13501]  ? __lock_acquire+0x7d10/0x7d10
[  440.965499][T13501]  should_fail+0x38c/0x4c0
[  440.969951][T13501]  should_failslab+0x5/0x20
[  440.974649][T13501]  slab_pre_alloc_hook+0x51/0xc0
[  440.979619][T13501]  __kmalloc+0x6b/0x330
[  440.983796][T13501]  ? ethnl_default_notify+0xf9/0x5e0
[  440.989112][T13501]  ethnl_default_notify+0xf9/0x5e0
[  440.994228][T13501]  ? mutex_is_locked+0xe/0x40
[  440.998909][T13501]  ? rtnl_is_locked+0x11/0x20
[  441.003611][T13501]  ethnl_netdev_event+0x54/0x70
[  441.008461][T13501]  raw_notifier_call_chain+0xcb/0x160
[  441.013856][T13501]  netdev_update_features+0xb3/0x100
[  441.019135][T13501]  ? dev_disable_lro+0x290/0x290
[  441.024091][T13501]  ? veth_enable_xdp+0x2b0/0x4c0
[  441.029050][T13501]  veth_xdp+0x4ba/0x640
[  441.033209][T13501]  bond_xdp+0x3b2/0x850
[  441.037378][T13501]  ? bond_fix_features+0x2c0/0x2c0
[  441.042483][T13501]  ? alloc_file+0x84/0x4f0
[  441.046910][T13501]  dev_xdp_install+0xf2/0x240
[  441.051581][T13501]  ? bond_fix_features+0x2c0/0x2c0
[  441.056686][T13501]  ? bpf_xdp_link_fill_link_info+0xc0/0xc0
[  441.062511][T13501]  ? bond_fix_features+0x2c0/0x2c0
[  441.067617][T13501]  dev_xdp_attach+0xc47/0xed0
[  441.072457][T13501]  bpf_xdp_link_attach+0x310/0x480
[  441.077604][T13501]  ? dev_xdp_prog_id+0xe0/0xe0
[  441.082414][T13501]  link_create+0x50e/0x690
[  441.086860][T13501]  __sys_bpf+0x645/0x6f0
[  441.091134][T13501]  ? bpf_link_show_fdinfo+0x380/0x380
[  441.096537][T13501]  ? vtime_user_exit+0x2c8/0x3e0
[  441.101486][T13501]  __x64_sys_bpf+0x78/0x90
[  441.105906][T13501]  do_syscall_64+0x4c/0xa0
[  441.110328][T13501]  ? clear_bhb_loop+0x30/0x80
[  441.115017][T13501]  ? clear_bhb_loop+0x30/0x80
[  441.119709][T13501]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  441.125613][T13501] RIP: 0033:0x7f8e0d19edd9
[  441.130037][T13501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.149642][T13501] RSP: 002b:00007f8e0b3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  441.158072][T13501] RAX: ffffffffffffffda RBX: 00007f8e0d417fa0 RCX: 00007f8e0d19edd9
[  441.166035][T13501] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c
[  441.174011][T13501] RBP: 00007f8e0b3f8090 R08: 0000000000000000 R09: 0000000000000000
[  441.181991][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  441.190077][T13501] R13: 00007f8e0d418038 R14: 00007f8e0d417fa0 R15: 00007ffc7d142af8
[  441.198092][T13501]  </TASK>
[  441.282388][T13372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.314396][T13511] FAULT_INJECTION: forcing a failure.
[  441.314396][T13511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  441.329441][T13511] CPU: 1 PID: 13511 Comm: syz.0.3103 Not tainted syzkaller #0
[  441.336968][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  441.347023][T13511] Call Trace:
[  441.350302][T13511]  <TASK>
[  441.353223][T13511]  dump_stack_lvl+0x188/0x250
[  441.357894][T13511]  ? show_regs_print_info+0x20/0x20
[  441.363080][T13511]  ? load_image+0x400/0x400
[  441.367573][T13511]  ? __lock_acquire+0x7d10/0x7d10
[  441.372585][T13511]  ? __lock_acquire+0x13bc/0x7d10
[  441.377599][T13511]  should_fail+0x38c/0x4c0
[  441.382010][T13511]  _copy_from_iter+0x22e/0x1170
[  441.386860][T13511]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  441.392225][T13511]  ? release_sock+0x2b/0x1b0
[  441.396805][T13511]  ? reacquire_held_locks+0x308/0x5a0
[  441.402164][T13511]  ? release_sock+0x2b/0x1b0
[  441.406758][T13511]  ? __check_object_size+0x87/0x410
[  441.411942][T13511]  ? ping_common_sendmsg+0x93/0x2a0
[  441.417132][T13511]  ping_common_sendmsg+0xb8/0x2a0
[  441.422154][T13511]  ping_v6_sendmsg+0x21c/0x1030
[  441.426999][T13511]  ? tcpv6_net_exit_batch+0x20/0x20
[  441.432184][T13511]  ? lock_chain_count+0x20/0x20
[  441.437027][T13511]  ? __local_bh_enable_ip+0x136/0x1c0
[  441.442387][T13511]  ? lockdep_hardirqs_on+0x94/0x140
[  441.447579][T13511]  ? __local_bh_enable_ip+0x136/0x1c0
[  441.452939][T13511]  ? _local_bh_enable+0xa0/0xa0
[  441.457781][T13511]  ? inet_sendmsg+0x147/0x2f0
[  441.462446][T13511]  ? inet_sendmsg+0x147/0x2f0
[  441.467119][T13511]  ? inet_send_prepare+0x260/0x260
[  441.472221][T13511]  ____sys_sendmsg+0x5b7/0x8f0
[  441.476980][T13511]  ? __sys_sendmsg_sock+0x30/0x30
[  441.481998][T13511]  ? import_iovec+0x6f/0xa0
[  441.486494][T13511]  ___sys_sendmsg+0x236/0x2e0
[  441.491171][T13511]  ? __sys_sendmsg+0x2a0/0x2a0
[  441.495930][T13511]  ? vfs_write+0x8b2/0xd60
[  441.500354][T13511]  __se_sys_sendmsg+0x1af/0x290
[  441.505196][T13511]  ? __x64_sys_sendmsg+0x80/0x80
[  441.510119][T13511]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  441.516103][T13511]  ? lockdep_hardirqs_on+0x94/0x140
[  441.521295][T13511]  do_syscall_64+0x4c/0xa0
[  441.525704][T13511]  ? clear_bhb_loop+0x30/0x80
[  441.530368][T13511]  ? clear_bhb_loop+0x30/0x80
[  441.535036][T13511]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  441.540917][T13511] RIP: 0033:0x7f088f35fdd9
[  441.545344][T13511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.564938][T13511] RSP: 002b:00007f088d5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  441.573342][T13511] RAX: ffffffffffffffda RBX: 00007f088f5d8fa0 RCX: 00007f088f35fdd9
[  441.581304][T13511] RDX: 0000000000008810 RSI: 0000200000000440 RDI: 0000000000000003
[  441.589261][T13511] RBP: 00007f088d5b9090 R08: 0000000000000000 R09: 0000000000000000
[  441.597215][T13511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.605174][T13511] R13: 00007f088f5d9038 R14: 00007f088f5d8fa0 R15: 00007ffd91f1e508
[  441.613165][T13511]  </TASK>
[  441.699587][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  441.718973][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  441.778300][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  441.796334][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  441.820086][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  441.833074][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  441.849029][T13372] device veth0_vlan entered promiscuous mode
[  441.904319][T13521] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3106'.
[  441.947136][T13372] device veth1_vlan entered promiscuous mode
[  442.006902][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  442.023979][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  442.071339][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  442.080409][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  442.096642][T13372] device veth0_macvtap entered promiscuous mode
[  442.155720][ T4235] device hsr_slave_0 left promiscuous mode
[  442.204243][ T4235] device hsr_slave_1 left promiscuous mode
[  442.230708][ T4235] bridge0: port 4(dummy0) entered disabled state
[  442.248570][ T4235] bridge0: port 3(hsr0) entered disabled state
[  442.260167][ T4235] device bridge_slave_1 left promiscuous mode
[  442.268896][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.284208][ T4235] device bridge_slave_0 left promiscuous mode
[  442.290798][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state
[  442.334403][ T4235] device veth1_vlan left promiscuous mode
[  442.358949][ T4235] device veth0_vlan left promiscuous mode
[  442.456263][ T4657] Bluetooth: hci0: command 0x040f tx timeout
[  442.843239][T13551] FAULT_INJECTION: forcing a failure.
[  442.843239][T13551] name failslab, interval 1, probability 0, space 0, times 0
[  442.859684][T13551] CPU: 0 PID: 13551 Comm: syz.5.3116 Not tainted syzkaller #0
[  442.867190][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  442.877257][T13551] Call Trace:
[  442.880535][T13551]  <TASK>
[  442.883456][T13551]  dump_stack_lvl+0x188/0x250
[  442.888130][T13551]  ? show_regs_print_info+0x20/0x20
[  442.893328][T13551]  ? load_image+0x400/0x400
[  442.897849][T13551]  ? __might_sleep+0xf0/0xf0
[  442.902458][T13551]  ? __lock_acquire+0x7d10/0x7d10
[  442.907499][T13551]  should_fail+0x38c/0x4c0
[  442.911923][T13551]  should_failslab+0x5/0x20
[  442.916446][T13551]  slab_pre_alloc_hook+0x51/0xc0
[  442.921397][T13551]  __kmalloc_node_track_caller+0x68/0x3a0
[  442.927114][T13551]  ? netlink_sendmsg+0x654/0xbe0
[  442.932055][T13551]  ? kmem_cache_alloc_node+0x162/0x2d0
[  442.937510][T13551]  ? __alloc_skb+0xf4/0x750
[  442.942014][T13551]  ? netlink_sendmsg+0x654/0xbe0
[  442.946949][T13551]  __alloc_skb+0x22c/0x750
[  442.951367][T13551]  netlink_sendmsg+0x654/0xbe0
[  442.956141][T13551]  ? netlink_getsockopt+0x570/0x570
[  442.961335][T13551]  ? aa_sock_msg_perm+0x94/0x150
[  442.966266][T13551]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  442.971546][T13551]  ? security_socket_sendmsg+0x7c/0xa0
[  442.977012][T13551]  ? netlink_getsockopt+0x570/0x570
[  442.982214][T13551]  ____sys_sendmsg+0x5b7/0x8f0
[  442.986989][T13551]  ? __sys_sendmsg_sock+0x30/0x30
[  442.992016][T13551]  ? import_iovec+0x6f/0xa0
[  442.996521][T13551]  ___sys_sendmsg+0x236/0x2e0
[  443.001194][T13551]  ? __sys_sendmsg+0x2a0/0x2a0
[  443.005974][T13551]  __se_sys_sendmsg+0x1af/0x290
[  443.010815][T13551]  ? __x64_sys_sendmsg+0x80/0x80
[  443.015745][T13551]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  443.021725][T13551]  ? lockdep_hardirqs_on+0x94/0x140
[  443.026913][T13551]  do_syscall_64+0x4c/0xa0
[  443.031314][T13551]  ? clear_bhb_loop+0x30/0x80
[  443.035983][T13551]  ? clear_bhb_loop+0x30/0x80
[  443.040645][T13551]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  443.046526][T13551] RIP: 0033:0x7fa9be8ffdd9
[  443.050930][T13551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.070529][T13551] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.078938][T13551] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  443.086982][T13551] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  443.094944][T13551] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  443.102901][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.110856][T13551] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  443.118835][T13551]  </TASK>
[  443.349275][ T4235] team0 (unregistering): Port device team_slave_1 removed
[  443.379937][ T4235] team0 (unregistering): Port device team_slave_0 removed
[  443.406105][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  443.429606][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  443.595460][ T4235] bond0 (unregistering): Released all slaves
[  443.608029][T13561] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3120'.
[  443.697812][T13372] device veth1_macvtap entered promiscuous mode
[  443.715622][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  443.724045][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  443.742900][T13563] netlink: 'syz.2.3121': attribute type 10 has an invalid length.
[  443.802609][T13563] team0: Port device wlan1 added
[  443.850137][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.871049][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.902706][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.917329][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.928210][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  443.939316][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  443.974612][T13372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  444.000096][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  444.022790][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  444.055563][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.099548][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.130859][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.160158][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.184879][T13372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  444.199637][T13372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  444.227386][T13372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  444.245708][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  444.259130][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  444.306621][T13372] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  444.341802][T13372] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  444.360782][T13372] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  444.405116][T13372] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  444.453700][T13583] delete_channel: no stack
[  444.548427][ T4658] Bluetooth: hci0: command 0x0419 tx timeout
[  444.604564][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.642439][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.796079][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  444.810289][T13594] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3131'.
[  444.868454][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.926195][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  445.003288][  T474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  445.400020][T13613] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  445.481463][T13613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.499053][T13616] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3139'.
[  446.139579][T13637] netlink: 'syz.2.3147': attribute type 21 has an invalid length.
[  446.564157][T13647] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3149'.
[  446.965664][T13649] chnl_net:caif_netlink_parms(): no params data found
[  447.206109][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  447.237559][T13670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  447.395693][T13649] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.403400][T13649] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.411543][T13649] device bridge_slave_0 entered promiscuous mode
[  447.441899][T13649] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.458747][T13649] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.476445][T13649] device bridge_slave_1 entered promiscuous mode
[  447.596473][T13649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.650136][T13649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.775640][T13649] team0: Port device team_slave_0 added
[  447.795678][T13692] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3164'.
[  447.818188][T13649] team0: Port device team_slave_1 added
[  447.878301][T13649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  447.887071][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.914010][T13649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.926857][T13649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.934950][T13649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  447.980748][T13649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.087507][T13649] device hsr_slave_0 entered promiscuous mode
[  448.095828][T13649] device hsr_slave_1 entered promiscuous mode
[  448.106998][T13649] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  448.116734][T13649] Cannot create hsr debugfs directory
[  448.137304][T13696] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3168'.
[  448.154827][T13702] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  448.180071][T13702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.516919][T13716] netlink: 'syz.0.3174': attribute type 46 has an invalid length.
[  448.549726][T13716] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3174'.
[  448.617136][T13722] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3177'.
[  448.627066][ T4712] Bluetooth: hci4: command 0x0409 tx timeout
[  448.686016][T13649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.753344][T13649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.859120][T13727] netlink: 'syz.0.3189': attribute type 10 has an invalid length.
[  448.882984][T13727] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3189'.
[  448.912082][T13727] device hsr0 entered promiscuous mode
[  448.918848][T13727] bridge0: port 3(hsr0) entered blocking state
[  448.934574][T13727] bridge0: port 3(hsr0) entered disabled state
[  448.970393][T13727] bridge0: port 3(hsr0) entered blocking state
[  448.977063][T13727] bridge0: port 3(hsr0) entered forwarding state
[  449.005042][T13649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.097736][T13649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.155457][T13736] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  449.212799][T13736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  449.856114][T13751] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3190'.
[  450.702033][ T4711] Bluetooth: hci4: command 0x041b tx timeout
[  452.433108][T13757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3191'.
[  452.487604][T13757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3191'.
[  452.572435][T13757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.620794][T13757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.646546][T13757] bond0 (unregistering): Released all slaves
[  452.711036][T13764] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3191'.
[  452.721268][T13764] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.3191'.
[  452.731850][T13764] tc_dump_action: action bad kind
[  452.746414][T13649] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  452.782007][ T4712] Bluetooth: hci4: command 0x040f tx timeout
[  452.792021][T13779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  452.801008][T13779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.832171][T13649] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  452.861332][T13649] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  452.938759][T13649] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  453.196663][T13649] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.260615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  453.282829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  453.324742][T13649] 8021q: adding VLAN 0 to HW filter on device team0
[  453.389466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  453.423306][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  453.446706][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.453881][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.499907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  453.531101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  453.549930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  453.565952][T13802] FAULT_INJECTION: forcing a failure.
[  453.565952][T13802] name failslab, interval 1, probability 0, space 0, times 0
[  453.572665][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.585908][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.592932][T13802] CPU: 1 PID: 13802 Comm: syz.5.3208 Not tainted syzkaller #0
[  453.600560][T13802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  453.610630][T13802] Call Trace:
[  453.613923][T13802]  <TASK>
[  453.616856][T13802]  dump_stack_lvl+0x188/0x250
[  453.621542][T13802]  ? show_regs_print_info+0x20/0x20
[  453.626732][T13802]  ? load_image+0x400/0x400
[  453.631230][T13802]  ? __might_sleep+0xf0/0xf0
[  453.635812][T13802]  ? __lock_acquire+0x7d10/0x7d10
[  453.640824][T13802]  ? mark_lock+0x94/0x320
[  453.645150][T13802]  should_fail+0x38c/0x4c0
[  453.649560][T13802]  should_failslab+0x5/0x20
[  453.654051][T13802]  slab_pre_alloc_hook+0x51/0xc0
[  453.658983][T13802]  kmem_cache_alloc_node+0x47/0x2d0
[  453.664173][T13802]  ? __alloc_skb+0xf4/0x750
[  453.668671][T13802]  __alloc_skb+0xf4/0x750
[  453.672991][T13802]  __ip_append_data+0x2105/0x32d0
[  453.678021][T13802]  ? lockdep_hardirqs_on+0x94/0x140
[  453.683207][T13802]  ? raw_send_hdrinc+0x1110/0x1110
[  453.688323][T13802]  ? ip_setup_cork+0x890/0x890
[  453.693093][T13802]  ? ip_setup_cork+0x496/0x890
[  453.697866][T13802]  ip_append_data+0x132/0x1a0
[  453.702630][T13802]  ? raw_send_hdrinc+0x1110/0x1110
[  453.707737][T13802]  raw_sendmsg+0x1433/0x1aa0
[  453.712326][T13802]  ? compat_raw_ioctl+0x60/0x60
[  453.717176][T13802]  ? aa_sk_perm+0x7dc/0x910
[  453.721674][T13802]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  453.728170][T13802]  ? sock_rps_record_flow+0x17/0x3b0
[  453.733449][T13802]  ? inet_sendmsg+0x78/0x2f0
[  453.738029][T13802]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  453.743304][T13802]  ? security_socket_sendmsg+0x7c/0xa0
[  453.748752][T13802]  ? inet_send_prepare+0x260/0x260
[  453.753852][T13802]  ____sys_sendmsg+0x5b7/0x8f0
[  453.758616][T13802]  ? __sys_sendmsg_sock+0x30/0x30
[  453.763633][T13802]  ? import_iovec+0x6f/0xa0
[  453.768136][T13802]  ___sys_sendmsg+0x236/0x2e0
[  453.772809][T13802]  ? __sys_sendmsg+0x2a0/0x2a0
[  453.777572][T13802]  ? vfs_write+0x8b2/0xd60
[  453.781993][T13802]  __se_sys_sendmsg+0x1af/0x290
[  453.786843][T13802]  ? __x64_sys_sendmsg+0x80/0x80
[  453.791781][T13802]  ? syscall_enter_from_user_mode+0x2a/0x70
[  453.797678][T13802]  do_syscall_64+0x4c/0xa0
[  453.802085][T13802]  ? clear_bhb_loop+0x30/0x80
[  453.806752][T13802]  ? clear_bhb_loop+0x30/0x80
[  453.811535][T13802]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  453.817435][T13802] RIP: 0033:0x7fa9be8ffdd9
[  453.821855][T13802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.841462][T13802] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.849866][T13802] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  453.857837][T13802] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000005
[  453.865795][T13802] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  453.873753][T13802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.881720][T13802] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  453.889784][T13802]  </TASK>
[  453.973344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  454.000027][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  454.019463][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  454.026206][T13815] FAULT_INJECTION: forcing a failure.
[  454.026206][T13815] name failslab, interval 1, probability 0, space 0, times 0
[  454.056116][T13815] CPU: 0 PID: 13815 Comm: syz.0.3212 Not tainted syzkaller #0
[  454.063363][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  454.063621][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  454.081463][T13815] Call Trace:
[  454.084753][T13815]  <TASK>
[  454.087686][T13815]  dump_stack_lvl+0x188/0x250
[  454.092370][T13815]  ? show_regs_print_info+0x20/0x20
[  454.097565][T13815]  ? load_image+0x400/0x400
[  454.102062][T13815]  ? __might_sleep+0xf0/0xf0
[  454.106642][T13815]  ? __lock_acquire+0x7d10/0x7d10
[  454.111660][T13815]  should_fail+0x38c/0x4c0
[  454.116080][T13815]  should_failslab+0x5/0x20
[  454.120580][T13815]  slab_pre_alloc_hook+0x51/0xc0
[  454.125512][T13815]  __kmalloc_node_track_caller+0x68/0x3a0
[  454.131220][T13815]  ? netlink_sendmsg+0x654/0xbe0
[  454.136145][T13815]  ? kmem_cache_alloc_node+0x162/0x2d0
[  454.141590][T13815]  ? __alloc_skb+0xf4/0x750
[  454.146092][T13815]  ? netlink_sendmsg+0x654/0xbe0
[  454.151021][T13815]  __alloc_skb+0x22c/0x750
[  454.155429][T13815]  netlink_sendmsg+0x654/0xbe0
[  454.160190][T13815]  ? netlink_getsockopt+0x570/0x570
[  454.165379][T13815]  ? aa_sock_msg_perm+0x94/0x150
[  454.170309][T13815]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  454.175579][T13815]  ? security_socket_sendmsg+0x7c/0xa0
[  454.181030][T13815]  ? netlink_getsockopt+0x570/0x570
[  454.186216][T13815]  ____sys_sendmsg+0x5b7/0x8f0
[  454.190985][T13815]  ? __sys_sendmsg_sock+0x30/0x30
[  454.196009][T13815]  ? import_iovec+0x6f/0xa0
[  454.200506][T13815]  ___sys_sendmsg+0x236/0x2e0
[  454.205188][T13815]  ? __sys_sendmsg+0x2a0/0x2a0
[  454.209984][T13815]  __se_sys_sendmsg+0x1af/0x290
[  454.214829][T13815]  ? __x64_sys_sendmsg+0x80/0x80
[  454.219762][T13815]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  454.225819][T13815]  ? lockdep_hardirqs_on+0x94/0x140
[  454.231011][T13815]  do_syscall_64+0x4c/0xa0
[  454.235418][T13815]  ? clear_bhb_loop+0x30/0x80
[  454.240083][T13815]  ? clear_bhb_loop+0x30/0x80
[  454.244746][T13815]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  454.250629][T13815] RIP: 0033:0x7f088f35fdd9
[  454.255033][T13815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  454.274626][T13815] RSP: 002b:00007f088d5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  454.283031][T13815] RAX: ffffffffffffffda RBX: 00007f088f5d8fa0 RCX: 00007f088f35fdd9
[  454.290991][T13815] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  454.298947][T13815] RBP: 00007f088d5b9090 R08: 0000000000000000 R09: 0000000000000000
[  454.306910][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  454.314867][T13815] R13: 00007f088f5d9038 R14: 00007f088f5d8fa0 R15: 00007ffd91f1e508
[  454.322853][T13815]  </TASK>
[  454.343492][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  454.362496][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  454.377460][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  454.387085][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  454.404905][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  454.425342][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  454.447636][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  454.481261][T13649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  454.545969][ T4235] device hsr_slave_0 left promiscuous mode
[  454.576434][ T4235] device hsr_slave_1 left promiscuous mode
[  454.611026][T13830] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3216'.
[  454.629022][ T4235] bridge0: port 3(hsr0) entered disabled state
[  454.638791][ T4235] device bridge_slave_1 left promiscuous mode
[  454.641864][T13830] netlink: 'syz.2.3216': attribute type 2 has an invalid length.
[  454.650252][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.851862][ T4712] Bluetooth: hci4: command 0x0419 tx timeout
[  455.416450][ T4235] device bridge_slave_0 left promiscuous mode
[  455.435281][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.472843][ T4235] device veth0_macvtap left promiscuous mode
[  455.490090][ T4235] device veth0_vlan left promiscuous mode
[  455.740826][ T4235] team0 (unregistering): Port device team_slave_1 removed
[  455.758649][ T4235] team0 (unregistering): Port device team_slave_0 removed
[  455.773100][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.834196][ T4235] bond0 (unregistering): Released all slaves
[  455.904946][T13836] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  455.918524][T13836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  456.108184][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  456.133092][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  456.176637][T13859] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3223'.
[  456.195967][T13649] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.284050][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  456.326500][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  456.413436][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  456.438290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  456.473674][T13872] netlink: 'syz.2.3232': attribute type 10 has an invalid length.
[  456.499677][T13872] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3232'.
[  456.535385][T13649] device veth0_vlan entered promiscuous mode
[  456.543317][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  456.553912][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  457.322556][T13882] netlink: 'syz.3.3233': attribute type 10 has an invalid length.
[  457.335965][T13882] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3233'.
[  457.369111][T13882] device hsr0 entered promiscuous mode
[  457.408373][T13882] bridge0: port 3(hsr0) entered blocking state
[  457.439271][T13882] bridge0: port 3(hsr0) entered disabled state
[  457.479341][T13882] bridge0: port 3(hsr0) entered blocking state
[  457.485617][T13882] bridge0: port 3(hsr0) entered forwarding state
[  457.504845][T13649] device veth1_vlan entered promiscuous mode
[  457.547931][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  457.568367][T13890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.644464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  457.658499][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  457.704364][T13649] device veth0_macvtap entered promiscuous mode
[  457.750364][T13649] device veth1_macvtap entered promiscuous mode
[  457.831355][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.861901][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.891836][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.938077][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.981264][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.021584][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.040016][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  458.054722][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.068528][T13649] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.079859][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  458.096457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  458.152713][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  458.161494][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  458.237074][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.281933][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.297715][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.308679][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.365183][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.385780][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.396923][T13649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.407942][T13649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.420514][T13649] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.430921][T13922] netlink: 'syz.0.3246': attribute type 10 has an invalid length.
[  458.440296][T13922] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3246'.
[  458.471523][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  458.492259][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  458.520202][T13649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.541817][T13649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.557994][T13649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.568440][T13649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.246636][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.259542][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.275620][T13931] FAULT_INJECTION: forcing a failure.
[  459.275620][T13931] name failslab, interval 1, probability 0, space 0, times 0
[  459.296452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  459.324450][T13931] CPU: 0 PID: 13931 Comm: syz.5.3251 Not tainted syzkaller #0
[  459.331984][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  459.342076][T13931] Call Trace:
[  459.345396][T13931]  <TASK>
[  459.348369][T13931]  dump_stack_lvl+0x188/0x250
[  459.353109][T13931]  ? show_regs_print_info+0x20/0x20
[  459.358349][T13931]  ? load_image+0x400/0x400
[  459.362904][T13931]  ? __might_sleep+0xf0/0xf0
[  459.367537][T13931]  ? __lock_acquire+0x7d10/0x7d10
[  459.372638][T13931]  should_fail+0x38c/0x4c0
[  459.377128][T13931]  should_failslab+0x5/0x20
[  459.381662][T13931]  slab_pre_alloc_hook+0x51/0xc0
[  459.386645][T13931]  kmem_cache_alloc_node+0x47/0x2d0
[  459.391881][T13931]  ? __alloc_skb+0xf4/0x750
[  459.396456][T13931]  __alloc_skb+0xf4/0x750
[  459.400863][T13931]  __ip_append_data+0x2105/0x32d0
[  459.406064][T13931]  ? raw_send_hdrinc+0x1110/0x1110
[  459.411232][T13931]  ? lock_chain_count+0x20/0x20
[  459.416131][T13931]  ? ip_setup_cork+0x890/0x890
[  459.420964][T13931]  ? ip_setup_cork+0x496/0x890
[  459.425804][T13931]  ip_append_data+0x132/0x1a0
[  459.430541][T13931]  ? raw_send_hdrinc+0x1110/0x1110
[  459.435721][T13931]  raw_sendmsg+0x1433/0x1aa0
[  459.440438][T13931]  ? compat_raw_ioctl+0x60/0x60
[  459.445415][T13931]  ? aa_sk_perm+0x7dc/0x910
[  459.449993][T13931]  ? tomoyo_socket_sendmsg_permission+0x212/0x2f0
[  459.456473][T13931]  ? sock_rps_record_flow+0x17/0x3b0
[  459.461816][T13931]  ? inet_sendmsg+0x78/0x2f0
[  459.466439][T13931]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  459.471779][T13931]  ? security_socket_sendmsg+0x7c/0xa0
[  459.477300][T13931]  ? inet_send_prepare+0x260/0x260
[  459.482455][T13931]  ____sys_sendmsg+0x5b7/0x8f0
[  459.487305][T13931]  ? __sys_sendmsg_sock+0x30/0x30
[  459.492414][T13931]  ? import_iovec+0x6f/0xa0
[  459.496977][T13931]  ___sys_sendmsg+0x236/0x2e0
[  459.501740][T13931]  ? __sys_sendmsg+0x2a0/0x2a0
[  459.506614][T13931]  ? trace_event_raw_event_lock+0x270/0x270
[  459.512533][T13931]  ? vfs_write+0x8b2/0xd60
[  459.517111][T13931]  __se_sys_sendmsg+0x1af/0x290
[  459.522017][T13931]  ? __x64_sys_sendmsg+0x80/0x80
[  459.526993][T13931]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  459.533078][T13931]  ? lockdep_hardirqs_on+0x94/0x140
[  459.538337][T13931]  do_syscall_64+0x4c/0xa0
[  459.542792][T13931]  ? clear_bhb_loop+0x30/0x80
[  459.547505][T13931]  ? clear_bhb_loop+0x30/0x80
[  459.552234][T13931]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  459.558148][T13931] RIP: 0033:0x7fa9be8ffdd9
[  459.562584][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.582316][T13931] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.590750][T13931] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  459.598738][T13931] RDX: 0000000000040800 RSI: 0000200000000100 RDI: 0000000000000005
[  459.606719][T13931] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  459.614698][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.622676][T13931] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  459.630718][T13931]  </TASK>
[  459.694429][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  459.707682][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.716474][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  459.913281][T13943] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  459.975137][T13943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  460.200446][T13960] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3259'.
[  460.532399][T13964] netlink: 'syz.2.3260': attribute type 10 has an invalid length.
[  460.549988][T13964] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3260'.
[  460.781623][T13980] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3264'.
[  460.924981][T13984] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3267'.
[  461.133131][T13995] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  461.188949][T13995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  461.368638][T14004] netlink: 'syz.1.3274': attribute type 10 has an invalid length.
[  461.377555][T14004] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3274'.
[  461.388380][T14004] device hsr0 entered promiscuous mode
[  461.395234][T14004] bridge0: port 3(hsr0) entered blocking state
[  461.402465][T14004] bridge0: port 3(hsr0) entered disabled state
[  461.426650][T14004] bridge0: port 3(hsr0) entered blocking state
[  461.433931][T14004] bridge0: port 3(hsr0) entered forwarding state
[  461.669364][T14013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3277'.
[  461.989212][T14028] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3280'.
[  462.188503][T14035] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3283'.
[  462.318854][T14040] netlink: 'syz.0.3286': attribute type 10 has an invalid length.
[  462.350248][T14040] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3286'.
[  462.519373][T14051] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3290'.
[  462.565093][T14054] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  462.584821][T14054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.700570][T14061] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  462.782066][T14061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  463.133314][T14075] netlink: 'syz.1.3298': attribute type 10 has an invalid length.
[  463.423480][T14082] netlink: 'syz.3.3301': attribute type 10 has an invalid length.
[  463.444890][T14082] device veth0_macvtap left promiscuous mode
[  463.838326][T14110] netlink: 'syz.3.3308': attribute type 39 has an invalid length.
[  463.980765][T14109] netlink: 'syz.0.3309': attribute type 10 has an invalid length.
[  464.063643][T14121] netlink: 'syz.2.3312': attribute type 4 has an invalid length.
[  464.133828][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  464.154409][T14121] netlink: zone id is out of range
[  464.159811][T14121] netlink: zone id is out of range
[  464.170281][T14121] netlink: zone id is out of range
[  464.176472][T14121] netlink: zone id is out of range
[  464.178863][T14125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  464.183871][T14121] netlink: zone id is out of range
[  464.830750][T14156] netlink: 'syz.0.3324': attribute type 10 has an invalid length.
[  465.045151][T14168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  465.584200][T14192] netlink: 'syz.1.3337': attribute type 10 has an invalid length.
[  465.611936][T14192] __nla_validate_parse: 8 callbacks suppressed
[  465.612023][T14192] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3337'.
[  465.644188][T14196] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  465.664727][T14196] net_ratelimit: 86 callbacks suppressed
[  465.664745][T14196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.639066][T14230] netlink: 'syz.0.3350': attribute type 10 has an invalid length.
[  466.657879][T14230] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3350'.
[  466.728356][T14236] netlink: 'syz.5.3352': attribute type 10 has an invalid length.
[  466.749391][T14236] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3352'.
[  467.571979][ T2857] Bluetooth: hci5: command 0x0406 tx timeout
[  467.610520][T14258] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3356'.
[  467.730802][T14265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  467.746885][T14265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.821109][T14269] netlink: 'syz.3.3360': attribute type 4 has an invalid length.
[  467.885698][T14269] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3360'.
[  467.905987][T14269] netlink: zone id is out of range
[  467.961520][T14269] netlink: zone id is out of range
[  467.985028][T14269] netlink: zone id is out of range
[  468.016835][T14280] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3366'.
[  468.038549][T14269] netlink: zone id is out of range
[  468.061844][T14269] netlink: zone id is out of range
[  468.067121][T14269] netlink: zone id is out of range
[  468.085191][T14275] netlink: 'syz.1.3364': attribute type 10 has an invalid length.
[  468.103726][T14269] netlink: zone id is out of range
[  468.109003][T14269] netlink: zone id is out of range
[  468.110951][T14275] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3364'.
[  468.883970][T14295] FAULT_INJECTION: forcing a failure.
[  468.883970][T14295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  468.918758][T14295] CPU: 1 PID: 14295 Comm: syz.3.3372 Not tainted syzkaller #0
[  468.926263][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  468.936318][T14295] Call Trace:
[  468.939592][T14295]  <TASK>
[  468.942511][T14295]  dump_stack_lvl+0x188/0x250
[  468.947181][T14295]  ? show_regs_print_info+0x20/0x20
[  468.952367][T14295]  ? load_image+0x400/0x400
[  468.956862][T14295]  ? __lock_acquire+0x7d10/0x7d10
[  468.961878][T14295]  should_fail+0x38c/0x4c0
[  468.966284][T14295]  _copy_to_user+0x2e/0x130
[  468.970772][T14295]  simple_read_from_buffer+0xe3/0x150
[  468.976134][T14295]  proc_fail_nth_read+0x1a6/0x220
[  468.981150][T14295]  ? proc_fault_inject_write+0x310/0x310
[  468.986771][T14295]  ? fsnotify_perm+0x254/0x560
[  468.991523][T14295]  ? proc_fault_inject_write+0x310/0x310
[  468.997142][T14295]  vfs_read+0x301/0xd60
[  469.001290][T14295]  ? kernel_read+0x1e0/0x1e0
[  469.005870][T14295]  ? __fget_files+0x40f/0x480
[  469.010539][T14295]  ? mutex_lock_nested+0x17/0x20
[  469.015465][T14295]  ? __fdget_pos+0x2bf/0x370
[  469.020039][T14295]  ? ksys_read+0x71/0x260
[  469.024366][T14295]  ksys_read+0x152/0x260
[  469.028600][T14295]  ? vfs_write+0xd60/0xd60
[  469.033003][T14295]  ? lockdep_hardirqs_on+0x94/0x140
[  469.038197][T14295]  do_syscall_64+0x4c/0xa0
[  469.042601][T14295]  ? clear_bhb_loop+0x30/0x80
[  469.047264][T14295]  ? clear_bhb_loop+0x30/0x80
[  469.051931][T14295]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  469.057816][T14295] RIP: 0033:0x7f1b6580360e
[  469.062221][T14295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  469.081813][T14295] RSP: 002b:00007f1b63a9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  469.090215][T14295] RAX: ffffffffffffffda RBX: 00007f1b63a9c6c0 RCX: 00007f1b6580360e
[  469.098175][T14295] RDX: 000000000000000f RSI: 00007f1b63a9c0a0 RDI: 0000000000000005
[  469.106130][T14295] RBP: 00007f1b63a9c090 R08: 0000000000000000 R09: 0000000000000000
[  469.114085][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.122051][T14295] R13: 00007f1b65abc038 R14: 00007f1b65abbfa0 R15: 00007ffff652fe98
[  469.130024][T14295]  </TASK>
[  469.159147][T14299] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3373'.
[  469.626278][T14317] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3379'.
[  469.807389][T14319] netlink: 'syz.1.3380': attribute type 10 has an invalid length.
[  469.847379][T14319] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3380'.
[  471.146846][T14346] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3387'.
[  471.209592][T14350] netlink: 'syz.0.3387': attribute type 39 has an invalid length.
[  471.591209][T14367] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3392'.
[  472.162687][T14375] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3398'.
[  473.357243][T14406] netlink: 207508 bytes leftover after parsing attributes in process `syz.5.3405'.
[  473.691503][T14426] FAULT_INJECTION: forcing a failure.
[  473.691503][T14426] name failslab, interval 1, probability 0, space 0, times 0
[  473.761867][T14426] CPU: 1 PID: 14426 Comm: syz.5.3412 Not tainted syzkaller #0
[  473.769373][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  473.779442][T14426] Call Trace:
[  473.782730][T14426]  <TASK>
[  473.785711][T14426]  dump_stack_lvl+0x188/0x250
[  473.790407][T14426]  ? show_regs_print_info+0x20/0x20
[  473.795610][T14426]  ? load_image+0x400/0x400
[  473.800119][T14426]  ? __might_sleep+0xf0/0xf0
[  473.804710][T14426]  ? __lock_acquire+0x7d10/0x7d10
[  473.809734][T14426]  ? __lock_acquire+0x7d10/0x7d10
[  473.814751][T14426]  should_fail+0x38c/0x4c0
[  473.819165][T14426]  should_failslab+0x5/0x20
[  473.823653][T14426]  slab_pre_alloc_hook+0x51/0xc0
[  473.828575][T14426]  ? __sys_setsockopt+0x2bf/0x3d0
[  473.833592][T14426]  __kmalloc_track_caller+0x69/0x330
[  473.838859][T14426]  ? __sys_setsockopt+0x2bf/0x3d0
[  473.843875][T14426]  sctp_setsockopt+0x7d/0xf80
[  473.848542][T14426]  ? sock_common_recvmsg+0x1c0/0x1c0
[  473.853827][T14426]  __sys_setsockopt+0x2bf/0x3d0
[  473.858675][T14426]  __x64_sys_setsockopt+0xb1/0xc0
[  473.863691][T14426]  do_syscall_64+0x4c/0xa0
[  473.868098][T14426]  ? clear_bhb_loop+0x30/0x80
[  473.872758][T14426]  ? clear_bhb_loop+0x30/0x80
[  473.877512][T14426]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  473.883396][T14426] RIP: 0033:0x7fa9be8ffdd9
[  473.887805][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.907489][T14426] RSP: 002b:00007fa9bcb38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  473.915894][T14426] RAX: ffffffffffffffda RBX: 00007fa9beb79090 RCX: 00007fa9be8ffdd9
[  473.923978][T14426] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000005
[  473.931939][T14426] RBP: 00007fa9bcb38090 R08: 0000000000000008 R09: 0000000000000000
[  473.939902][T14426] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.947860][T14426] R13: 00007fa9beb79128 R14: 00007fa9beb79090 R15: 00007fff5dded618
[  473.955832][T14426]  </TASK>
[  474.065328][T14429] netlink: 'syz.3.3413': attribute type 10 has an invalid length.
[  474.090359][T14429] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3413'.
[  474.566106][T14451] netlink: 763 bytes leftover after parsing attributes in process `syz.5.3420'.
[  474.579903][T14451] netlink: 'syz.5.3420': attribute type 39 has an invalid length.
[  474.733439][T14454] netlink: 'syz.1.3421': attribute type 10 has an invalid length.
[  474.755617][T14454] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3421'.
[  475.349512][T14473] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3426'.
[  475.383768][T14476] delete_channel: no stack
[  476.531028][T14524] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3444'.
[  476.672785][T14533] FAULT_INJECTION: forcing a failure.
[  476.672785][T14533] name failslab, interval 1, probability 0, space 0, times 0
[  476.693661][T14533] CPU: 1 PID: 14533 Comm: syz.1.3448 Not tainted syzkaller #0
[  476.701163][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  476.711228][T14533] Call Trace:
[  476.714523][T14533]  <TASK>
[  476.717474][T14533]  dump_stack_lvl+0x188/0x250
[  476.722171][T14533]  ? show_regs_print_info+0x20/0x20
[  476.727385][T14533]  ? load_image+0x400/0x400
[  476.731905][T14533]  ? __might_sleep+0xf0/0xf0
[  476.736508][T14533]  ? __lock_acquire+0x7d10/0x7d10
[  476.741544][T14533]  should_fail+0x38c/0x4c0
[  476.745968][T14533]  should_failslab+0x5/0x20
[  476.750484][T14533]  slab_pre_alloc_hook+0x51/0xc0
[  476.755499][T14533]  kmem_cache_alloc_node+0x47/0x2d0
[  476.760680][T14533]  ? __alloc_skb+0xf4/0x750
[  476.765180][T14533]  __alloc_skb+0xf4/0x750
[  476.769515][T14533]  netlink_dump+0x1e8/0xcf0
[  476.774014][T14533]  ? netlink_lookup+0x1d0/0x1d0
[  476.778853][T14533]  ? __inet_diag_dump_start+0x805/0x970
[  476.784397][T14533]  __netlink_dump_start+0x523/0x700
[  476.789611][T14533]  inet_diag_handler_cmd+0x1d3/0x2b0
[  476.794891][T14533]  ? rcu_lock_release+0x20/0x20
[  476.799725][T14533]  ? inet_diag_handler_get_info+0xb90/0xb90
[  476.805610][T14533]  ? inet_diag_dump_start+0x20/0x20
[  476.810819][T14533]  ? inet_diag_dump+0x50/0x50
[  476.815523][T14533]  ? rcu_lock_release+0x20/0x20
[  476.820387][T14533]  sock_diag_rcv_msg+0x164/0x3e0
[  476.825346][T14533]  netlink_rcv_skb+0x1f5/0x440
[  476.830135][T14533]  ? sock_diag_bind+0xa0/0xa0
[  476.834816][T14533]  ? netlink_ack+0xb50/0xb50
[  476.839395][T14533]  ? __lock_acquire+0x7d10/0x7d10
[  476.844423][T14533]  sock_diag_rcv+0x26/0x40
[  476.848843][T14533]  netlink_unicast+0x774/0x920
[  476.853610][T14533]  netlink_sendmsg+0x8ba/0xbe0
[  476.858381][T14533]  ? netlink_getsockopt+0x570/0x570
[  476.863570][T14533]  ? aa_sock_msg_perm+0x94/0x150
[  476.868511][T14533]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  476.873788][T14533]  ? security_socket_sendmsg+0x7c/0xa0
[  476.879256][T14533]  ? netlink_getsockopt+0x570/0x570
[  476.884457][T14533]  ____sys_sendmsg+0x5b7/0x8f0
[  476.889239][T14533]  ? __sys_sendmsg_sock+0x30/0x30
[  476.894272][T14533]  ? import_iovec+0x6f/0xa0
[  476.898765][T14533]  ___sys_sendmsg+0x236/0x2e0
[  476.903451][T14533]  ? __sys_sendmsg+0x2a0/0x2a0
[  476.908230][T14533]  ? vfs_write+0x8b2/0xd60
[  476.912667][T14533]  __se_sys_sendmsg+0x1af/0x290
[  476.917525][T14533]  ? __x64_sys_sendmsg+0x80/0x80
[  476.922457][T14533]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  476.928475][T14533]  ? lockdep_hardirqs_on+0x94/0x140
[  476.933694][T14533]  do_syscall_64+0x4c/0xa0
[  476.938115][T14533]  ? clear_bhb_loop+0x30/0x80
[  476.942779][T14533]  ? clear_bhb_loop+0x30/0x80
[  476.947465][T14533]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  476.953372][T14533] RIP: 0033:0x7f2967619dd9
[  476.957791][T14533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.977398][T14533] RSP: 002b:00007f2965873028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.985833][T14533] RAX: ffffffffffffffda RBX: 00007f2967892fa0 RCX: 00007f2967619dd9
[  476.993811][T14533] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  477.001790][T14533] RBP: 00007f2965873090 R08: 0000000000000000 R09: 0000000000000000
[  477.009760][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.017718][T14533] R13: 00007f2967893038 R14: 00007f2967892fa0 R15: 00007ffc5129bbf8
[  477.025700][T14533]  </TASK>
[  477.245930][T14552] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3454'.
[  477.276268][T14552] net_ratelimit: 83 callbacks suppressed
[  477.276287][T14552] netlink: zone id is out of range
[  477.296263][T14552] netlink: zone id is out of range
[  477.303549][T14552] netlink: zone id is out of range
[  477.341091][T14552] netlink: zone id is out of range
[  477.361952][T14552] netlink: zone id is out of range
[  477.369917][T14554] netlink: 'syz.1.3455': attribute type 10 has an invalid length.
[  477.378989][T14552] netlink: zone id is out of range
[  477.401755][T14552] netlink: zone id is out of range
[  477.407064][T14552] netlink: zone id is out of range
[  477.414864][T14552] netlink: zone id is out of range
[  477.420281][T14552] netlink: zone id is out of range
[  477.645286][T14559] FAULT_INJECTION: forcing a failure.
[  477.645286][T14559] name failslab, interval 1, probability 0, space 0, times 0
[  477.648271][T14554] team0: Device veth1_macvtap failed to register rx_handler
[  477.686134][T14559] CPU: 0 PID: 14559 Comm: syz.5.3457 Not tainted syzkaller #0
[  477.693632][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  477.703680][T14559] Call Trace:
[  477.706958][T14559]  <TASK>
[  477.709885][T14559]  dump_stack_lvl+0x188/0x250
[  477.714554][T14559]  ? show_regs_print_info+0x20/0x20
[  477.719740][T14559]  ? load_image+0x400/0x400
[  477.724230][T14559]  ? __might_sleep+0xf0/0xf0
[  477.728804][T14559]  ? __lock_acquire+0x7d10/0x7d10
[  477.733812][T14559]  ? __local_bh_enable_ip+0x136/0x1c0
[  477.739181][T14559]  should_fail+0x38c/0x4c0
[  477.743611][T14559]  should_failslab+0x5/0x20
[  477.748125][T14559]  slab_pre_alloc_hook+0x51/0xc0
[  477.753062][T14559]  kmem_cache_alloc_node_trace+0x4a/0x300
[  477.758769][T14559]  ? __get_vm_area_node+0x119/0x2d0
[  477.763965][T14559]  __get_vm_area_node+0x119/0x2d0
[  477.769006][T14559]  __vmalloc_node_range+0xef/0x8b0
[  477.774111][T14559]  ? netlink_sendmsg+0x5ec/0xbe0
[  477.779042][T14559]  ? netlink_data_ready+0x10/0x10
[  477.784064][T14559]  ? netlink_sendmsg+0x5ec/0xbe0
[  477.788987][T14559]  vmalloc+0x75/0x80
[  477.792872][T14559]  ? netlink_sendmsg+0x5ec/0xbe0
[  477.797798][T14559]  netlink_sendmsg+0x5ec/0xbe0
[  477.802560][T14559]  ? netlink_getsockopt+0x570/0x570
[  477.807746][T14559]  ? aa_sock_msg_perm+0x94/0x150
[  477.812708][T14559]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  477.817982][T14559]  ? security_socket_sendmsg+0x7c/0xa0
[  477.823432][T14559]  ? netlink_getsockopt+0x570/0x570
[  477.828616][T14559]  ____sys_sendmsg+0x5b7/0x8f0
[  477.833380][T14559]  ? __sys_sendmsg_sock+0x30/0x30
[  477.838405][T14559]  ? import_iovec+0x6f/0xa0
[  477.842905][T14559]  ___sys_sendmsg+0x236/0x2e0
[  477.847590][T14559]  ? __sys_sendmsg+0x2a0/0x2a0
[  477.852356][T14559]  ? trace_event_raw_event_lock+0x270/0x270
[  477.858238][T14559]  ? vfs_write+0x8b2/0xd60
[  477.862675][T14559]  __se_sys_sendmsg+0x1af/0x290
[  477.867516][T14559]  ? __x64_sys_sendmsg+0x80/0x80
[  477.872440][T14559]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  477.878475][T14559]  ? lockdep_hardirqs_on+0x94/0x140
[  477.883666][T14559]  do_syscall_64+0x4c/0xa0
[  477.888068][T14559]  ? clear_bhb_loop+0x30/0x80
[  477.892731][T14559]  ? clear_bhb_loop+0x30/0x80
[  477.897398][T14559]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  477.903280][T14559] RIP: 0033:0x7fa9be8ffdd9
[  477.907692][T14559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.927285][T14559] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.935691][T14559] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  477.943647][T14559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  477.951608][T14559] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  477.959565][T14559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.967521][T14559] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  477.975494][T14559]  </TASK>
[  478.251964][T14559] syz.5.3457: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  478.284770][T14559] CPU: 1 PID: 14559 Comm: syz.5.3457 Not tainted syzkaller #0
[  478.292274][T14559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  478.302340][T14559] Call Trace:
[  478.305639][T14559]  <TASK>
[  478.308574][T14559]  dump_stack_lvl+0x188/0x250
[  478.313266][T14559]  ? rcu_lock_release+0x5/0x20
[  478.318166][T14559]  ? show_regs_print_info+0x20/0x20
[  478.323385][T14559]  ? load_image+0x400/0x400
[  478.327918][T14559]  warn_alloc+0x243/0x320
[  478.332267][T14559]  ? zone_watermark_ok_safe+0x240/0x240
[  478.337828][T14559]  ? kmem_cache_alloc_node_trace+0x16c/0x300
[  478.343819][T14559]  ? __get_vm_area_node+0x119/0x2d0
[  478.349046][T14559]  __vmalloc_node_range+0x2b1/0x8b0
[  478.354249][T14559]  ? netlink_data_ready+0x10/0x10
[  478.359292][T14559]  ? netlink_sendmsg+0x5ec/0xbe0
[  478.364241][T14559]  vmalloc+0x75/0x80
[  478.368140][T14559]  ? netlink_sendmsg+0x5ec/0xbe0
[  478.373167][T14559]  netlink_sendmsg+0x5ec/0xbe0
[  478.377952][T14559]  ? netlink_getsockopt+0x570/0x570
[  478.383165][T14559]  ? aa_sock_msg_perm+0x94/0x150
[  478.388120][T14559]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  478.393407][T14559]  ? security_socket_sendmsg+0x7c/0xa0
[  478.398872][T14559]  ? netlink_getsockopt+0x570/0x570
[  478.404071][T14559]  ____sys_sendmsg+0x5b7/0x8f0
[  478.408858][T14559]  ? __sys_sendmsg_sock+0x30/0x30
[  478.413902][T14559]  ? import_iovec+0x6f/0xa0
[  478.418423][T14559]  ___sys_sendmsg+0x236/0x2e0
[  478.423125][T14559]  ? __sys_sendmsg+0x2a0/0x2a0
[  478.427915][T14559]  ? trace_event_raw_event_lock+0x270/0x270
[  478.433814][T14559]  ? vfs_write+0x8b2/0xd60
[  478.438269][T14559]  __se_sys_sendmsg+0x1af/0x290
[  478.443138][T14559]  ? __x64_sys_sendmsg+0x80/0x80
[  478.448079][T14559]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  478.454100][T14559]  ? lockdep_hardirqs_on+0x94/0x140
[  478.459317][T14559]  do_syscall_64+0x4c/0xa0
[  478.463740][T14559]  ? clear_bhb_loop+0x30/0x80
[  478.468416][T14559]  ? clear_bhb_loop+0x30/0x80
[  478.473102][T14559]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  478.478998][T14559] RIP: 0033:0x7fa9be8ffdd9
[  478.483416][T14559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  478.503023][T14559] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  478.511442][T14559] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  478.519424][T14559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  478.527405][T14559] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  478.535384][T14559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.543362][T14559] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  478.551360][T14559]  </TASK>
[  478.574448][T14569] FAULT_INJECTION: forcing a failure.
[  478.574448][T14569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  478.578020][T14559] Mem-Info:
[  478.591850][T14557] GPL: port 1(team0) entered blocking state
[  478.598432][T14559] active_anon:282 inactive_anon:6290 isolated_anon:0
[  478.598432][T14559]  active_file:19258 inactive_file:39206 isolated_file:0
[  478.598432][T14559]  unevictable:768 dirty:439 writeback:0
[  478.598432][T14559]  slab_reclaimable:20333 slab_unreclaimable:94959
[  478.598432][T14559]  mapped:29914 shmem:1642 pagetables:717 bounce:0
[  478.598432][T14559]  kernel_misc_reclaimable:0
[  478.598432][T14559]  free:1370820 free_pcp:10915 free_cma:0
[  478.601918][T14557] GPL: port 1(team0) entered disabled state
[  478.648791][T14559] Node 0 active_anon:1096kB inactive_anon:24652kB active_file:76828kB inactive_file:156824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119656kB dirty:1756kB writeback:0kB shmem:4492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10436kB pagetables:2868kB all_unreclaimable? no
[  478.661848][T14569] CPU: 0 PID: 14569 Comm: syz.3.3458 Not tainted syzkaller #0
[  478.687451][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  478.691431][T14559] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  478.697508][T14569] Call Trace:
[  478.697519][T14569]  <TASK>
[  478.697527][T14569]  dump_stack_lvl+0x188/0x250
[  478.697552][T14569]  ? show_regs_print_info+0x20/0x20
[  478.697570][T14569]  ? load_image+0x400/0x400
[  478.727492][T14559] Node 0 
[  478.729832][T14569]  ? __lock_acquire+0x7d10/0x7d10
[  478.729866][T14569]  should_fail+0x38c/0x4c0
[  478.733164][T14559] DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  478.737437][T14569]  _copy_to_user+0x2e/0x130
[  478.737464][T14569]  simple_read_from_buffer+0xe3/0x150
[  478.737488][T14569]  proc_fail_nth_read+0x1a6/0x220
[  478.737511][T14569]  ? proc_fault_inject_write+0x310/0x310
[  478.748380][T14559] lowmem_reserve[]:
[  478.750089][T14569]  ? fsnotify_perm+0x254/0x560
[  478.750117][T14569]  ? proc_fault_inject_write+0x310/0x310
[  478.755686][T14559]  0
[  478.759514][T14569]  vfs_read+0x301/0xd60
[  478.759545][T14569]  ? kernel_read+0x1e0/0x1e0
[  478.759568][T14569]  ? __fget_files+0x40f/0x480
[  478.786327][T14559]  2539
[  478.789542][T14569]  ? mutex_lock_nested+0x17/0x20
[  478.789568][T14569]  ? __fdget_pos+0x2bf/0x370
[  478.795345][T14559]  2540
[  478.800019][T14569]  ? ksys_read+0x71/0x260
[  478.800045][T14569]  ksys_read+0x152/0x260
[  478.800064][T14569]  ? vfs_write+0xd60/0xd60
[  478.800083][T14569]  ? lockdep_hardirqs_on+0x94/0x140
[  478.800108][T14569]  do_syscall_64+0x4c/0xa0
[  478.806499][T14559]  2540
[  478.809513][T14569]  ? clear_bhb_loop+0x30/0x80
[  478.809536][T14569]  ? clear_bhb_loop+0x30/0x80
[  478.809555][T14569]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  478.822143][T14559]  2540
[  478.822390][T14569] RIP: 0033:0x7f1b6580360e
[  478.826623][T14559] 
[  478.831094][T14569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  478.831112][T14569] RSP: 002b:00007f1b63a7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  478.837526][T14559] Node 0 
[  478.838515][T14569] RAX: ffffffffffffffda RBX: 00007f1b63a7b6c0 RCX: 00007f1b6580360e
[  478.838533][T14569] RDX: 000000000000000f RSI: 00007f1b63a7b0a0 RDI: 0000000000000007
[  478.838546][T14569] RBP: 00007f1b63a7b090 R08: 0000000000000000 R09: 0000000000000000
[  478.843886][T14559] DMA32 free:1548420kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1096kB inactive_anon:24624kB active_file:76892kB inactive_file:156768kB unevictable:1536kB writepending:1868kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:39152kB local_pcp:18384kB free_cma:0kB
[  478.848028][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  478.848042][T14569] R13: 00007f1b65abc128 R14: 00007f1b65abc090 R15: 00007ffff652fe98
[  478.848071][T14569]  </TASK>
[  478.903774][T14557] device team0 entered promiscuous mode
[  478.929674][T14559] lowmem_reserve[]:
[  478.950262][T14557] device team_slave_0 entered promiscuous mode
[  478.963415][T14559]  0
[  479.015293][T14557] device team_slave_1 entered promiscuous mode
[  479.021799][T14559]  0 0 0 0
[  479.039396][T14559] Node 0 
[  479.039419][T14568] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3460'.
[  479.039410][T14559] Normal free:12kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  479.084651][T14559] lowmem_reserve[]: 0 0 0 0 0
[  479.089977][T14559] Node 1 Normal free:3919488kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4428kB local_pcp:416kB free_cma:0kB
[  479.142655][T14559] lowmem_reserve[]: 0 0 0 0 0
[  479.150023][T14559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  479.181807][T14559] Node 0 DMA32: 1062*4kB (UME) 1435*8kB (UM) 1182*16kB (UME) 1370*32kB (UME) 2145*64kB (UME) 826*128kB (UME) 540*256kB (UME) 150*512kB (UM) 35*1024kB (UM) 9*2048kB (UM) 234*4096kB (M) = 1549264kB
[  479.273226][T14559] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  479.321862][T14559] Node 1 Normal: 144*4kB (UME) 36*8kB (UME) 28*16kB (UME) 157*32kB (UME) 59*64kB (UME) 22*128kB (UME) 6*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 952*4096kB (M) = 3919488kB
[  479.429853][T14559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  479.485662][T14587] netlink: 'syz.3.3466': attribute type 4 has an invalid length.
[  479.495460][T14559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  479.510285][T14587] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3466'.
[  479.519926][T14559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  479.554973][T14586] netlink: 'syz.3.3466': attribute type 17 has an invalid length.
[  479.561908][T14559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  479.574750][T14559] 60108 total pagecache pages
[  479.579462][T14559] 0 pages in swap cache
[  479.583755][T14559] Swap cache stats: add 83, delete 83, find 7/16
[  479.585330][T14586] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3466'.
[  479.590369][T14559] Free swap  = 124728kB
[  479.603763][T14559] Total swap = 124996kB
[  479.608603][T14559] 2097051 pages RAM
[  479.613191][T14559] 0 pages HighMem/MovableOnly
[  479.618071][T14559] 411492 pages reserved
[  479.622826][T14559] 0 pages cma reserved
[  479.804247][T14601] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.3471'.
[  479.967591][T14610] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3474'.
[  480.047482][T14610] netlink: 'syz.3.3474': attribute type 9 has an invalid length.
[  480.086253][T14610] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3474'.
[  480.594302][T14638] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3487'.
[  481.109702][T14665] netlink: 'syz.5.3495': attribute type 10 has an invalid length.
[  481.185157][T14673] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  481.224544][T14671] netlink: 'syz.5.3495': attribute type 1 has an invalid length.
[  481.243807][T14671] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3495'.
[  481.345990][T14665] team0 (unregistering): Port device team_slave_0 removed
[  481.412430][T14665] team0 (unregistering): Port device team_slave_1 removed
[  481.477125][T14665] team0 (unregistering): Port device macvlan0 removed
[  481.547534][T14666] netlink: 'syz.1.3497': attribute type 21 has an invalid length.
[  481.557711][T14673] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  481.620352][T14677] netlink: 'syz.1.3497': attribute type 29 has an invalid length.
[  482.982007][T14728] FAULT_INJECTION: forcing a failure.
[  482.982007][T14728] name failslab, interval 1, probability 0, space 0, times 0
[  483.021885][T14728] CPU: 0 PID: 14728 Comm: syz.1.3515 Not tainted syzkaller #0
[  483.029393][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  483.039467][T14728] Call Trace:
[  483.042761][T14728]  <TASK>
[  483.045704][T14728]  dump_stack_lvl+0x188/0x250
[  483.050408][T14728]  ? show_regs_print_info+0x20/0x20
[  483.055632][T14728]  ? load_image+0x400/0x400
[  483.060163][T14728]  ? __might_sleep+0xf0/0xf0
[  483.064774][T14728]  ? __lock_acquire+0x7d10/0x7d10
[  483.069821][T14728]  ? mark_lock+0x94/0x320
[  483.074161][T14728]  should_fail+0x38c/0x4c0
[  483.078593][T14728]  should_failslab+0x5/0x20
[  483.083105][T14728]  slab_pre_alloc_hook+0x51/0xc0
[  483.088047][T14728]  __kmalloc+0x6b/0x330
[  483.092192][T14728]  ? tomoyo_realpath_from_path+0x118/0x610
[  483.097990][T14728]  tomoyo_realpath_from_path+0x118/0x610
[  483.103668][T14728]  tomoyo_path_number_perm+0x242/0x660
[  483.109123][T14728]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  483.114570][T14728]  ? perf_trace_lock+0xe4/0x390
[  483.119473][T14728]  security_file_ioctl+0x6c/0xa0
[  483.124515][T14728]  __se_sys_ioctl+0x48/0x170
[  483.129111][T14728]  do_syscall_64+0x4c/0xa0
[  483.133526][T14728]  ? clear_bhb_loop+0x30/0x80
[  483.138194][T14728]  ? clear_bhb_loop+0x30/0x80
[  483.142865][T14728]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  483.148754][T14728] RIP: 0033:0x7f2967619dd9
[  483.153167][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.172770][T14728] RSP: 002b:00007f2965852028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  483.181200][T14728] RAX: ffffffffffffffda RBX: 00007f2967893090 RCX: 00007f2967619dd9
[  483.189181][T14728] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000a
[  483.197148][T14728] RBP: 00007f2965852090 R08: 0000000000000000 R09: 0000000000000000
[  483.205227][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  483.213201][T14728] R13: 00007f2967893128 R14: 00007f2967893090 R15: 00007ffc5129bbf8
[  483.221188][T14728]  </TASK>
[  483.283073][T14728] ERROR: Out of memory at tomoyo_realpath_from_path.
[  485.664396][T14811] validate_nla: 1 callbacks suppressed
[  485.664414][T14811] netlink: 'syz.0.3548': attribute type 10 has an invalid length.
[  485.749165][T14823] netlink: 'syz.0.3548': attribute type 1 has an invalid length.
[  485.790631][T14811] device team0 left promiscuous mode
[  485.808988][T14823] __nla_validate_parse: 1 callbacks suppressed
[  485.809011][T14823] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3548'.
[  485.859246][T14811] device team_slave_0 left promiscuous mode
[  485.878347][T14811] device team_slave_1 left promiscuous mode
[  485.895437][T14811] GPL: port 1(team0) entered disabled state
[  485.919665][T14823] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3548'.
[  486.026413][T14811] team0 (unregistering): Port device team_slave_0 removed
[  486.097768][T14811] team0 (unregistering): Port device team_slave_1 removed
[  486.123547][T14819] device wlan1 entered promiscuous mode
[  486.359410][T14842] netlink: 'syz.1.3569': attribute type 10 has an invalid length.
[  486.371278][T14842] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3569'.
[  486.819746][T14872] netlink: 'syz.3.3568': attribute type 10 has an invalid length.
[  486.923674][T14872] team0: Device wg1 is of different type
[  488.048115][T14919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  488.394342][T14935] netlink: 'syz.3.3594': attribute type 10 has an invalid length.
[  488.433632][T14935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3594'.
[  488.448042][T14935] device dummy0 entered promiscuous mode
[  488.463516][T14935] bridge0: port 4(dummy0) entered blocking state
[  488.482050][T14935] bridge0: port 4(dummy0) entered disabled state
[  488.492758][T14935] bridge0: port 4(dummy0) entered blocking state
[  488.499264][T14935] bridge0: port 4(dummy0) entered forwarding state
[  488.518629][T14939] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3595'.
[  488.565230][T14938] netlink: 'syz.1.3595': attribute type 6 has an invalid length.
[  488.582336][T14939] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3595'.
[  489.477907][T14968] netlink: 'syz.5.3603': attribute type 10 has an invalid length.
[  489.490028][T14968] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3603'.
[  489.516593][T14974] delete_channel: no stack
[  489.590980][T14974] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3605'.
[  489.681993][T14974] net_ratelimit: 3 callbacks suppressed
[  489.682013][T14974] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  490.746083][T15006] netlink: 'syz.3.3619': attribute type 10 has an invalid length.
[  490.792214][T15006] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3619'.
[  491.585759][T15043] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3632'.
[  492.719153][T15097] netlink: 73640 bytes leftover after parsing attributes in process `syz.5.3653'.
[  495.521486][T15113] netlink: 'syz.1.3659': attribute type 2 has an invalid length.
[  495.779894][T15125] netlink: 'syz.5.3663': attribute type 2 has an invalid length.
[  495.815471][T15125] netlink: 'syz.5.3663': attribute type 8 has an invalid length.
[  495.830483][T15125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3663'.
[  496.075723][T15137] netlink: 'syz.5.3666': attribute type 21 has an invalid length.
[  496.091780][T15137] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3666'.
[  496.366484][T15140] netlink: 'syz.0.3667': attribute type 10 has an invalid length.
[  496.386987][T15140] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3667'.
[  496.860211][T15161] FAULT_INJECTION: forcing a failure.
[  496.860211][T15161] name failslab, interval 1, probability 0, space 0, times 0
[  496.894598][T15161] CPU: 0 PID: 15161 Comm: syz.0.3675 Not tainted syzkaller #0
[  496.902107][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  496.912179][T15161] Call Trace:
[  496.915471][T15161]  <TASK>
[  496.918409][T15161]  dump_stack_lvl+0x188/0x250
[  496.923097][T15161]  ? show_regs_print_info+0x20/0x20
[  496.928304][T15161]  ? load_image+0x400/0x400
[  496.932815][T15161]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  496.938805][T15161]  ? lock_chain_count+0x20/0x20
[  496.943664][T15161]  should_fail+0x38c/0x4c0
[  496.948093][T15161]  ? bpf_clone_redirect+0x1bb/0x470
[  496.953295][T15161]  should_failslab+0x5/0x20
[  496.957803][T15161]  slab_pre_alloc_hook+0x51/0xc0
[  496.962762][T15161]  ? bpf_clone_redirect+0x1bb/0x470
[  496.967974][T15161]  __kmalloc_node_track_caller+0x68/0x3a0
[  496.973744][T15161]  ? bpf_clone_redirect+0x1bb/0x470
[  496.978952][T15161]  ? skb_ensure_writable+0x2db/0x450
[  496.984245][T15161]  ? bpf_clone_redirect+0x1bb/0x470
[  496.989446][T15161]  pskb_expand_head+0x127/0x10f0
[  496.994402][T15161]  bpf_clone_redirect+0x1bb/0x470
[  496.999438][T15161]  bpf_prog_ddd136b54ea55eb4+0x19/0x560
[  497.004986][T15161]  bpf_test_run+0x2a8/0x800
[  497.009501][T15161]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  497.015686][T15161]  ? convert___skb_to_skb+0x4c0/0x4c0
[  497.021082][T15161]  ? eth_get_headlen+0x200/0x200
[  497.026021][T15161]  ? __build_skb+0x1e2/0x2e0
[  497.030615][T15161]  ? convert___skb_to_skb+0x3d/0x4c0
[  497.035905][T15161]  bpf_prog_test_run_skb+0x9cc/0x1180
[  497.041293][T15161]  ? cpu_online+0x60/0x60
[  497.045625][T15161]  bpf_prog_test_run+0x31e/0x390
[  497.050566][T15161]  __sys_bpf+0x5a5/0x6f0
[  497.054814][T15161]  ? bpf_link_show_fdinfo+0x380/0x380
[  497.060318][T15161]  __x64_sys_bpf+0x78/0x90
[  497.064756][T15161]  do_syscall_64+0x4c/0xa0
[  497.069182][T15161]  ? clear_bhb_loop+0x30/0x80
[  497.074300][T15161]  ? clear_bhb_loop+0x30/0x80
[  497.078982][T15161]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  497.084880][T15161] RIP: 0033:0x7f088f35fdd9
[  497.089298][T15161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  497.108908][T15161] RSP: 002b:00007f088d5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  497.117337][T15161] RAX: ffffffffffffffda RBX: 00007f088f5d8fa0 RCX: 00007f088f35fdd9
[  497.125318][T15161] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a
[  497.133293][T15161] RBP: 00007f088d5b9090 R08: 0000000000000000 R09: 0000000000000000
[  497.141263][T15161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  497.149236][T15161] R13: 00007f088f5d9038 R14: 00007f088f5d8fa0 R15: 00007ffd91f1e508
[  497.157232][T15161]  </TASK>
[  499.999097][T15180] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3680'.
[  500.097375][T15180] bridge: RTM_NEWNEIGH with invalid state 0x1
[  500.287517][T15188] netlink: 'syz.1.3683': attribute type 10 has an invalid length.
[  500.307915][T15188] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3683'.
[  500.626160][T15200] netlink: 'syz.1.3688': attribute type 10 has an invalid length.
[  500.644272][T15200] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3688'.
[  500.710293][T15208] netlink: 'syz.0.3692': attribute type 21 has an invalid length.
[  500.742472][T15208] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3692'.
[  500.897044][T15224] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3695'.
[  500.994691][T15231] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.3698'.
[  501.263463][T15220] delete_channel: no stack
[  501.344828][ T1426] ieee802154 phy0 wpan0: encryption failed: -22
[  501.351243][ T1426] ieee802154 phy1 wpan1: encryption failed: -22
[  501.533581][T15244] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3710'.
[  501.569572][T15237] netlink: 'syz.5.3700': attribute type 10 has an invalid length.
[  501.578320][T15237] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3700'.
[  502.007827][T15257] netlink: 'syz.2.3706': attribute type 10 has an invalid length.
[  502.036374][T15257] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3706'.
[  502.094539][T15271] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3713'.
[  502.288050][T15281] netlink: 'syz.2.3715': attribute type 21 has an invalid length.
[  502.677216][T15290] netlink: 'syz.3.3716': attribute type 10 has an invalid length.
[  503.339564][T15318] netlink: 'syz.0.3730': attribute type 8 has an invalid length.
[  503.511541][T15323] netlink: 'syz.1.3732': attribute type 8 has an invalid length.
[  506.843821][T15345] netlink: 'syz.3.3741': attribute type 7 has an invalid length.
[  506.851589][T15345] netlink: 'syz.3.3741': attribute type 6 has an invalid length.
[  507.492313][T15382] FAULT_INJECTION: forcing a failure.
[  507.492313][T15382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.529639][T15385] netlink: 'syz.1.3751': attribute type 6 has an invalid length.
[  507.581809][T15382] CPU: 1 PID: 15382 Comm: syz.5.3753 Not tainted syzkaller #0
[  507.589326][T15382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  507.599402][T15382] Call Trace:
[  507.602700][T15382]  <TASK>
[  507.605644][T15382]  dump_stack_lvl+0x188/0x250
[  507.610358][T15382]  ? show_regs_print_info+0x20/0x20
[  507.615586][T15382]  ? load_image+0x400/0x400
[  507.620109][T15382]  ? __lock_acquire+0x7d10/0x7d10
[  507.625169][T15382]  should_fail+0x38c/0x4c0
[  507.629610][T15382]  _copy_from_user+0x2e/0x170
[  507.634312][T15382]  __sys_bpf+0x26d/0x6f0
[  507.638573][T15382]  ? perf_trace_preemptirq_template+0x2aa/0x360
[  507.644934][T15382]  ? bpf_link_show_fdinfo+0x380/0x380
[  507.650333][T15382]  ? rcu_nmi_exit+0x6f/0xf0
[  507.654876][T15382]  ? vtime_user_exit+0x2c8/0x3e0
[  507.659847][T15382]  __x64_sys_bpf+0x78/0x90
[  507.664295][T15382]  do_syscall_64+0x4c/0xa0
[  507.668734][T15382]  ? clear_bhb_loop+0x30/0x80
[  507.673433][T15382]  ? clear_bhb_loop+0x30/0x80
[  507.678140][T15382]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  507.684061][T15382] RIP: 0033:0x7fa9be8ffdd9
[  507.688497][T15382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.708129][T15382] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  507.716567][T15382] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  507.724564][T15382] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a
[  507.732561][T15382] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  507.740554][T15382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.748548][T15382] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  507.756545][T15382]  </TASK>
[  508.842250][T15447] netlink: 'syz.1.3774': attribute type 4 has an invalid length.
[  508.883672][T15447] __nla_validate_parse: 4 callbacks suppressed
[  508.883688][T15447] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3774'.
[  508.908386][T15442] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3774'.
[  509.176492][T15462] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3780'.
[  509.228173][T15462] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3780'.
[  509.321218][T15468] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3781'.
[  509.402325][T15475] FAULT_INJECTION: forcing a failure.
[  509.402325][T15475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  509.415926][T15462] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3780'.
[  509.432403][T15475] CPU: 1 PID: 15475 Comm: syz.5.3785 Not tainted syzkaller #0
[  509.440005][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  509.450127][T15475] Call Trace:
[  509.453419][T15475]  <TASK>
[  509.456355][T15475]  dump_stack_lvl+0x188/0x250
[  509.461039][T15475]  ? show_regs_print_info+0x20/0x20
[  509.466242][T15475]  ? load_image+0x400/0x400
[  509.470761][T15475]  ? __lock_acquire+0x7d10/0x7d10
[  509.475807][T15475]  should_fail+0x38c/0x4c0
[  509.480239][T15475]  _copy_from_user+0x2e/0x170
[  509.484928][T15475]  iovec_from_user+0x142/0x370
[  509.489700][T15475]  __import_iovec+0x70/0x490
[  509.494306][T15475]  import_iovec+0x6f/0xa0
[  509.498645][T15475]  ___sys_sendmsg+0x1fd/0x2e0
[  509.503343][T15475]  ? __sys_sendmsg+0x2a0/0x2a0
[  509.508122][T15475]  ? vfs_write+0x8b2/0xd60
[  509.512559][T15475]  __se_sys_sendmsg+0x1af/0x290
[  509.517425][T15475]  ? __x64_sys_sendmsg+0x80/0x80
[  509.522367][T15475]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  509.528366][T15475]  ? lockdep_hardirqs_on+0x94/0x140
[  509.533600][T15475]  do_syscall_64+0x4c/0xa0
[  509.538019][T15475]  ? clear_bhb_loop+0x30/0x80
[  509.542700][T15475]  ? clear_bhb_loop+0x30/0x80
[  509.547386][T15475]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  509.553282][T15475] RIP: 0033:0x7fa9be8ffdd9
[  509.557703][T15475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.577325][T15475] RSP: 002b:00007fa9bcb59028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.582984][T15479] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3786'.
[  509.585837][T15475] RAX: ffffffffffffffda RBX: 00007fa9beb78fa0 RCX: 00007fa9be8ffdd9
[  509.602897][T15475] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  509.610872][T15475] RBP: 00007fa9bcb59090 R08: 0000000000000000 R09: 0000000000000000
[  509.618843][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.626913][T15475] R13: 00007fa9beb79038 R14: 00007fa9beb78fa0 R15: 00007fff5dded618
[  509.634911][T15475]  </TASK>
[  509.687302][    C0] 
[  509.687311][    C0] ================================
[  509.687315][    C0] WARNING: inconsistent lock state
[  509.687329][    C0] syzkaller #0 Not tainted
[  509.687338][    C0] --------------------------------
[  509.687342][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  509.687349][    C0] syz.1.3786/15477 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  509.687367][    C0] ffff88805b1318a0 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520
[  509.687411][    C0] {INITIAL USE} state was registered at:
[  509.687418][    C0]   lock_acquire+0x19e/0x400
[  509.687437][    C0]   _raw_spin_lock_irqsave+0xb0/0x100
[  509.687453][    C0]   htab_map_delete_elem+0x1b2/0x520
[  509.687467][    C0]   bpf_prog_2c29ac5cdc6b1842+0x3a/0xb5c
[  509.687482][    C0]   bpf_overflow_handler+0x1c2/0x4a0
[  509.687499][    C0]   __perf_event_overflow+0x364/0x530
[  509.687513][    C0]   perf_bp_event+0x276/0x320
[  509.687527][    C0]   hw_breakpoint_exceptions_notify+0x152/0x470
[  509.687542][    C0]   atomic_notifier_call_chain+0x15d/0x280
[  509.687559][    C0]   notify_die+0x141/0x1a0
[  509.687572][    C0]   notify_debug+0x20/0x30
[  509.687587][    C0]   noist_exc_debug+0x73/0x120
[  509.687603][    C0]   asm_exc_debug+0x2f/0x40
[  509.687617][    C0] irq event stamp: 1694
[  509.687623][    C0] hardirqs last  enabled at (1693): [<ffffffff89bce4e1>] syscall_enter_from_user_mode+0x21/0x70
[  509.687645][    C0] hardirqs last disabled at (1694): [<ffffffff89bcb54e>] exc_debug+0x6e/0x130
[  509.687664][    C0] softirqs last  enabled at (1598): [<ffffffff87e38025>] local_bh_enable+0x5/0x20
[  509.687682][    C0] softirqs last disabled at (1588): [<ffffffff87e38005>] local_bh_disable+0x5/0x20
[  509.687701][    C0] 
[  509.687701][    C0] other info that might help us debug this:
[  509.687706][    C0]  Possible unsafe locking scenario:
[  509.687706][    C0] 
[  509.687710][    C0]        CPU0
[  509.687713][    C0]        ----
[  509.687724][    C0]   lock(&htab->lockdep_key);
[  509.687734][    C0]   <Interrupt>
[  509.687738][    C0]     lock(&htab->lockdep_key);
[  509.687747][    C0] 
[  509.687747][    C0]  *** DEADLOCK ***
[  509.687747][    C0] 
[  509.687751][    C0] no locks held by syz.1.3786/15477.
[  509.687758][    C0] 
[  509.687758][    C0] stack backtrace:
[  509.687764][    C0] CPU: 0 PID: 15477 Comm: syz.1.3786 Not tainted syzkaller #0
[  509.687781][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  509.687790][    C0] Call Trace:
[  509.687795][    C0]  <#DB>
[  509.687802][    C0]  dump_stack_lvl+0x188/0x250
[  509.687820][    C0]  ? show_regs_print_info+0x20/0x20
[  509.687837][    C0]  ? print_usage_bug+0x42a/0x690
[  509.687850][    C0]  ? verify_lock_unused+0x18/0x140
[  509.687867][    C0]  lock_acquire+0x2c3/0x400
[  509.687883][    C0]  ? read_lock_is_recursive+0x10/0x10
[  509.687901][    C0]  ? htab_map_delete_elem+0x1b2/0x520
[  509.687916][    C0]  ? read_lock_is_recursive+0x10/0x10
[  509.687932][    C0]  ? look_up_lock_class+0x71/0x110
[  509.687949][    C0]  ? verify_lock_unused+0x18/0x140
[  509.687967][    C0]  _raw_spin_lock_irqsave+0xb0/0x100
[  509.687982][    C0]  ? htab_map_delete_elem+0x1b2/0x520
[  509.687996][    C0]  ? _raw_spin_lock+0x40/0x40
[  509.688012][    C0]  ? htab_map_hash+0x33d/0x6d0
[  509.688028][    C0]  htab_map_delete_elem+0x1b2/0x520
[  509.688047][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0xb5c
[  509.688061][    C0]  bpf_overflow_handler+0x1c2/0x4a0
[  509.688079][    C0]  ? perf_get_page_size+0x430/0x430
[  509.688095][    C0]  ? perf_event_switch_output+0x730/0x730
[  509.688114][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  509.688132][    C0]  __perf_event_overflow+0x364/0x530
[  509.688151][    C0]  perf_bp_event+0x276/0x320
[  509.688169][    C0]  ? perf_event_free_bpf_prog+0x110/0x110
[  509.688194][    C0]  ? rcu_lock_acquire+0x9/0x30
[  509.688210][    C0]  ? read_lock_is_recursive+0x10/0x10
[  509.688228][    C0]  hw_breakpoint_exceptions_notify+0x152/0x470
[  509.688245][    C0]  atomic_notifier_call_chain+0x15d/0x280
[  509.688262][    C0]  notify_die+0x141/0x1a0
[  509.688277][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  509.688295][    C0]  ? exc_debug+0x6e/0x130
[  509.688310][    C0]  ? trace_hardirqs_off_finish+0x57/0x1f0
[  509.688328][    C0]  notify_debug+0x20/0x30
[  509.688343][    C0]  exc_debug+0xcf/0x130
[  509.688359][    C0]  asm_exc_debug+0x1a/0x40
[  509.688373][    C0] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0
[  509.688392][    C0] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a
[  509.688405][    C0] RSP: 0018:ffffc9000329fd80 EFLAGS: 00040206
[  509.688418][    C0] RAX: ffffffff83e41101 RBX: 0000000000000018 RCX: 0000000000000003
[  509.688429][    C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffc9000329fe00
[  509.688439][    C0] RBP: 0000000000000000 R08: 0000200000000240 R09: 1ffff92000653fc2
[  509.688450][    C0] R10: dffffc0000000000 R11: fffff52000653fc3 R12: 00007ffffffff000
[  509.688463][    C0] R13: 0000200000000318 R14: ffffc9000329fe00 R15: 0000200000000300
[  509.688477][    C0]  ? _copy_from_user+0x51/0x170
[  509.688496][    C0]  </#DB>
[  509.688501][    C0]  <TASK>
[  509.688506][    C0]  _copy_from_user+0xfa/0x170
[  509.688522][    C0]  __sys_bpf+0x26d/0x6f0
[  509.688541][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[  509.688561][    C0]  ? vtime_user_exit+0x2c8/0x3e0
[  509.688580][    C0]  __x64_sys_bpf+0x78/0x90
[  509.688595][    C0]  do_syscall_64+0x4c/0xa0
[  509.688609][    C0]  ? clear_bhb_loop+0x30/0x80
[  509.688622][    C0]  ? clear_bhb_loop+0x30/0x80
[  509.688634][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  509.688649][    C0] RIP: 0033:0x7f2967619dd9
[  509.688662][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.688675][    C0] RSP: 002b:00007f2965873028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  509.688691][    C0] RAX: ffffffffffffffda RBX: 00007f2967892fa0 RCX: 00007f2967619dd9
[  509.688703][    C0] RDX: 0000000000000018 RSI: 0000200000000300 RDI: 0000000000000007
[  509.688713][    C0] RBP: 00007f29676afd69 R08: 0000000000000000 R09: 0000000000000000
[  509.688731][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.688739][    C0] R13: 00007f2967893038 R14: 00007f2967892fa0 R15: 00007ffc5129bbf8
[  509.688753][    C0]  </TASK>
[  510.377124][T15485] netlink: 'syz.2.3788': attribute type 10 has an invalid length.
[  510.386760][T15485] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3788'.