last executing test programs:

21.863821536s ago: executing program 1 (id=2341):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114985, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000"], 0x28}, 0xfc40)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

21.524382744s ago: executing program 1 (id=2346):
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40010030)
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x81000000}, 0x4060441)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c084)

21.108277193s ago: executing program 1 (id=2348):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x5, 0x4, 0xf, 0xf5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000180)={'a', ' *:* ', 'rw\x00'}, 0x9)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)

10.611426175s ago: executing program 3 (id=2394):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0)=r8, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000000)=0x8000)

7.463568225s ago: executing program 3 (id=2400):
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$kcm(0xa, 0x0, 0x3a)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r6, &(0x7f0000000300)=r5, 0x12)
write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socket$kcm(0x2, 0x200000000000003, 0x106)
socket$kcm(0x2, 0x922000000001, 0x106)
socketpair(0x22, 0x6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1d, 0x0, 0x2, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4675488154598a12}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"})

6.292222571s ago: executing program 3 (id=2403):
r0 = socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xa)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

6.283769551s ago: executing program 2 (id=2404):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100000000"], 0x66)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bridge_slave_0\x00', 0x10})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x1c1c0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37040006", 0x27}], 0x1}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000520033d487277b9b108b4ab50a"], 0xfe33)
setsockopt$sock_attach_bpf(r4, 0x6, 0x15, &(0x7f0000000500), 0x4)
sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47fffffffaf000001000000000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000008000000000000011000000000000000000000001000000000000000000000011000000000000000200fdff000000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0)

6.002389807s ago: executing program 3 (id=2405):
socket$kcm(0x10, 0x400000002, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) (async, rerun: 64)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async)
write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b2388a84b"], 0xffdd) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001812", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r6}, 0xc) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x104101, 0x3, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 64)
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

5.998886557s ago: executing program 0 (id=2406):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001", @ANYRES32=0x0], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23, r2, 0x0, 0xfffffffffffffffe}, 0x38)

5.904167889s ago: executing program 2 (id=2407):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0)=r8, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000000)=0x8000)

5.735748013s ago: executing program 0 (id=2408):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

5.706461974s ago: executing program 3 (id=2409):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0xfffffffffffffde3}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x35, &(0x7f0000000040)=r2, 0x13)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000180), 0x0}, 0x20)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000dbee000000000000d300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000007b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.572283467s ago: executing program 2 (id=2410):
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x6000}, 0xc)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x6, 0xc, &(0x7f0000000380), 0x4)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875", 0x5}, {0x0}, {&(0x7f0000000b00)="79dfe4263f", 0x5}], 0x3, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x4000)

5.477105819s ago: executing program 0 (id=2411):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114985, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)

5.261373874s ago: executing program 2 (id=2412):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xfb, 0x2, 0x9, 0x5, 0x0, 0x3, 0xc00, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xde, 0x1, @perf_config_ext={0x7}, 0x209, 0x1, 0x1, 0x9, 0x1, 0x5e3, 0x9, 0x0, 0x7ff, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0x8)
perf_event_open(0x0, r1, 0xfff7ffffffffffff, r0, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100), 0x12)

2.477037635s ago: executing program 3 (id=2413):
socket$kcm(0xf, 0x3, 0x2)
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x93}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x200, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) (fail_nth: 35)
sendmsg$inet(r2, 0x0, 0x480)

2.340247658s ago: executing program 2 (id=2414):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
gettid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000001, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000da6b1fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x3, 0x5, 0xc}], 0x10, 0x10000}, 0x94)
r7 = syz_clone(0x2016000, &(0x7f0000000340)="9eefcd80d5426655ddc98a8f80020d090a9dcac2e4ec69bc1b73add4834698556391304b4aa5c59f64f11d65d93b3701ea8931c734448c6cf236777a296a5d6d9003549c5b970b4e0cb875bd375edb2757c644fe6d882c27719a4290c04deeda8fd03bf60eec361e0ff595ea7575a8df33081cb8b6ff48e477d9c8563a39fb78825d82524827a7f4120d093f32d6d0948527a40de609dcd72dab248d42898fdcb72d223846950b571927251bdd2032f1a75223a4eb1e769c66b2cb1683a13a147c697c579c6bc85df5a7a694d23077f4b85a", 0xd2, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)="f58b99a58cefdc2ebf245fe4704a778871ea6b476fd2d64131d57d82f3fffa11a8328030be528f50fbdaad0593b3de89e959f85fbfc33c")
r8 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)
close(r8)
syz_open_procfs$namespace(r7, &(0x7f0000000580)='ns/user\x00')

2.339435408s ago: executing program 0 (id=2421):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114985, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, 0x0, 0xfc00)

1.707954442s ago: executing program 1 (id=2351):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c020000000000"], 0x0, 0x34}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00'], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=r7, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'nicvf0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f0000000000)=0x8000)

1.402929349s ago: executing program 0 (id=2416):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xe}, 0x1828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
close(r1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x6}]}}, 0x0, 0x26, 0x0, 0x1, 0xb93}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc)
r4 = socket$kcm(0x10, 0x3, 0x10) (async)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) (async, rerun: 64)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) (rerun: 64)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)

348.652922ms ago: executing program 0 (id=2417):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x23, &(0x7f0000000000)=r5, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x25, &(0x7f00000002c0)=r8, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="c3080000000000001d000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
ioctl$TUNSETSNDBUF(r11, 0x400454d4, &(0x7f0000000000)=0x8000)

347.885112ms ago: executing program 1 (id=2418):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

153.067336ms ago: executing program 2 (id=2419):
r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xf1, 0x81}, 0x2000, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2a4, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000100)}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x101, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x300, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'veth1_to_hsr\x00', 0x2000})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x680, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000800000000846ed714beaef65c007d725e6f10b364acfa91e500000004200000000000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000700000000000800008000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYRESHEX=r3, @ANYRESOCT], 0x50)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r7, 0x0, 0x200002, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000000380)=@hci={0x1f, 0x2fb, 0x3}, 0x80, &(0x7f0000000140)}, 0x4000080)
sendmsg$kcm(r6, &(0x7f0000001140)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x3, 0x8000}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)="149779dd950435c5986638008c0445d4b4a6cbdf9054c2ef9afae8f141b08f932ae74d0d6f65e63fcedb75a26cba762ee6670405b307e33f65b6a849191e26ee197a00dcb5a69604d6f870e766b0e16ec332a384c9d7ea368cb7e064a928f2365a37ae9536b2ddf2efbd8a502850cf68b760bb238b289886fb5af8a90d3a98a7b9a4431ac77857e8f5b88b18495d3bb1e02d971036d8dbf10215b04c54fe5502ec4e6f468e656832412296796e87917514de64", 0xb3}, {&(0x7f0000000580)="ea833ac3efbbe9c5311b74854c0dc58196cc35f6da6f09c9122b275dac180986b482ed60e6dc5d2833394918d998747c8319f3a93224375d1b92d94180f0670859b8c9956f7a160686e3cf03fee823853176a637a1c9a9cfc46e369d16057f34db40ff4281f7e8745c6466b2bc9e8de4dba25ef956a4e64a12f8f17687050ef8d1a9267f80720c62278cdfc606a094fcfc39d31a7007782ec00bd9bc01ed71ffa23c90250d0c56bbe94da3737772df9538002299c49726de", 0xb8}, {&(0x7f0000000000)="af64da", 0x3}, {&(0x7f00000007c0)="5d29e69b2679b6c0b225d39ad177a75bd4ecdca1d1111f0b594b47203fdf75b373ef9464a957432ffa06a46222a549c330f05a7a133af336882bdc1a6fe34a03ca91162162436aae396694f23782f52c2da4414a216e6b5afcf225a21bd7105124fc7051ddd62b41715427b4184f48f097118d9a3e86d9eaf2b3901ff60c09", 0x7f}, {&(0x7f0000000840)="23d59457a7bdb97ad5b72b1b7b85394ba8c4e63cd17636803c05dd2f59571c0554fc06", 0x23}], 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x3e0}, 0x24040010)
socket$kcm(0x10, 0x2, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x44082, 0x0)

0s ago: executing program 1 (id=2420):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x11, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x2168, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000380)=r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000bc000000850000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x20000000000000fd, &(0x7f00000003c0)=ANY=[@ANYBLOB="23d255a4fb5637d9c8759fa60c9325ead51f328b91a4156b1b27195c031a4c0e7bbd44b59654b7420eb287c28289c4223f3977ed4c9b4344f7c3165e9f397a0915430f9e433e887fd7376dbeedb140897385c5c9d3ad897df3fad5fc7abed03f4322fab04a809658dd9ee46907f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  384.688288][T10357] RSP: 002b:00007feb5b986028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  384.696839][T10357] RAX: ffffffffffffffda RBX: 00007feb5ae25fa0 RCX: 00007feb5ab9de59
[  384.704886][T10357] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  384.712910][T10357] RBP: 00007feb5b986090 R08: 0000000000000000 R09: 0000000000000000
[  384.721002][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.729026][T10357] R13: 00007feb5ae26038 R14: 00007feb5ae25fa0 R15: 00007ffed6d5f9f8
[  384.737173][T10357]  </TASK>
[  384.776770][T10360] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  384.783334][T10360] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  385.709706][T10379] netlink: 'syz.1.1542': attribute type 10 has an invalid length.
[  385.804742][T10377] syzkaller0: entered promiscuous mode
[  385.813638][T10377] syzkaller0: entered allmulticast mode
[  386.016777][T10383] netlink: 'syz.0.1541': attribute type 10 has an invalid length.
[  388.798497][T10392] __nla_validate_parse: 6 callbacks suppressed
[  388.798516][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1546'.
[  388.814624][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[  388.825303][T10392] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1546'.
[  388.835475][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'.
[  388.846906][T10392] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1546'.
[  388.857310][T10394] netlink: 'syz.1.1545': attribute type 21 has an invalid length.
[  388.878849][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1545'.
[  389.014648][T10399] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  389.021213][T10399] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  389.369616][T10403] netlink: 'syz.0.1549': attribute type 8 has an invalid length.
[  389.385548][T10403] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  389.418966][T10403] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1549'.
[  389.649702][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'.
[  389.679036][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  389.711435][T10406] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1551'.
[  390.613828][T10423] netlink: 'syz.0.1556': attribute type 5 has an invalid length.
[  390.895072][T10434] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  390.901801][T10434] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  392.807080][T10473] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  392.814129][T10473] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  393.864678][T10483] FAULT_INJECTION: forcing a failure.
[  393.864678][T10483] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  393.884349][T10483] CPU: 0 PID: 10483 Comm: syz.3.1576 Not tainted syzkaller #0
[  393.891901][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  393.902014][T10483] Call Trace:
[  393.905341][T10483]  <TASK>
[  393.908334][T10483]  dump_stack_lvl+0x18c/0x250
[  393.913090][T10483]  ? show_regs_print_info+0x20/0x20
[  393.918365][T10483]  ? load_image+0x420/0x420
[  393.922938][T10483]  ? __might_fault+0xaa/0x120
[  393.927701][T10483]  ? __lock_acquire+0x7d80/0x7d80
[  393.932810][T10483]  should_fail_ex+0x394/0x4c0
[  393.937821][T10483]  _copy_from_iter+0x1cd/0x1290
[  393.942777][T10483]  ? rep_movs_alternative+0x4a/0x90
[  393.948058][T10483]  ? copyout_mc+0x70/0x70
[  393.952446][T10483]  ? copyout_mc+0x70/0x70
[  393.956898][T10483]  ? __virt_addr_valid+0x10c/0x380
[  393.962149][T10483]  ? page_copy_sane+0x16a/0x270
[  393.967022][T10483]  copy_page_from_iter+0x7b/0x100
[  393.972083][T10483]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  393.978271][T10483]  unix_stream_sendmsg+0x562/0xbf0
[  393.983654][T10483]  ? unix_show_fdinfo+0x280/0x280
[  393.988836][T10483]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  393.995333][T10483]  ? apparmor_socket_sendmsg+0x8e/0x330
[  394.000945][T10483]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  394.006646][T10483]  ? security_socket_sendmsg+0x80/0xa0
[  394.012185][T10483]  ? unix_show_fdinfo+0x280/0x280
[  394.017306][T10483]  ____sys_sendmsg+0x61b/0x980
[  394.022160][T10483]  ? __asan_memset+0x22/0x40
[  394.026847][T10483]  ? __sys_sendmsg_sock+0x30/0x30
[  394.031961][T10483]  ? __import_iovec+0x5f2/0x850
[  394.036913][T10483]  ? import_iovec+0x73/0xa0
[  394.041582][T10483]  ___sys_sendmsg+0x2a6/0x360
[  394.046328][T10483]  ? get_pid_task+0x20/0x1e0
[  394.051057][T10483]  ? __sys_sendmsg+0x2b0/0x2b0
[  394.055918][T10483]  ? __lock_acquire+0x7d80/0x7d80
[  394.061016][T10483]  __se_sys_sendmsg+0x1d0/0x2c0
[  394.066006][T10483]  ? __x64_sys_sendmsg+0x80/0x80
[  394.071011][T10483]  ? lockdep_hardirqs_on+0x98/0x150
[  394.076351][T10483]  do_syscall_64+0x55/0xb0
[  394.081009][T10483]  ? clear_bhb_loop+0x40/0x90
[  394.085741][T10483]  ? clear_bhb_loop+0x40/0x90
[  394.090546][T10483]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.096512][T10483] RIP: 0033:0x7fe18739de59
[  394.101123][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.121143][T10483] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.129631][T10483] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  394.137753][T10483] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004
[  394.145787][T10483] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  394.153826][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  394.161914][T10483] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  394.169965][T10483]  </TASK>
[  394.212472][T10487] __nla_validate_parse: 13 callbacks suppressed
[  394.212513][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'.
[  394.241179][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'.
[  394.293221][T10487] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1575'.
[  394.305046][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'.
[  394.349549][T10487] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1575'.
[  395.090039][T10515] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  395.096661][T10515] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  395.309769][ T5788] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10
[  395.341157][T10517] netlink: 'syz.0.1584': attribute type 39 has an invalid length.
[  396.220145][T10533] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'.
[  396.281944][T10533] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'.
[  396.294916][T10520] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'.
[  396.315184][T10518] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1584'.
[  396.399443][T10521] delete_channel: no stack
[  397.055963][T10549] netlink: 'syz.1.1593': attribute type 8 has an invalid length.
[  397.100382][T10549] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  397.118746][T10549] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1593'.
[  397.329840][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  398.585202][T10563] delete_channel: no stack
[  399.046507][T10579] netlink: 'syz.0.1605': attribute type 8 has an invalid length.
[  399.059796][T10579] netlink: 'syz.0.1605': attribute type 1 has an invalid length.
[  400.019718][T10596] __nla_validate_parse: 6 callbacks suppressed
[  400.019811][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'.
[  400.317885][T10603] netlink: 'syz.2.1614': attribute type 39 has an invalid length.
[  400.368428][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  400.383107][ T5788] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10
[  400.950679][T10610] netlink: 'syz.0.1615': attribute type 8 has an invalid length.
[  400.974026][T10610] netlink: 'syz.0.1615': attribute type 1 has an invalid length.
[  400.982318][T10610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1615'.
[  401.119669][T10612] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'.
[  401.175901][T10612] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'.
[  401.245513][T10603] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'.
[  401.280360][T10615] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'.
[  401.331276][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1617'.
[  401.396474][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'.
[  401.457823][T10619] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1617'.
[  401.922257][T10631] netlink: 'syz.2.1618': attribute type 20 has an invalid length.
[  402.129395][T10638] FAULT_INJECTION: forcing a failure.
[  402.129395][T10638] name failslab, interval 1, probability 0, space 0, times 0
[  402.170745][T10638] CPU: 0 PID: 10638 Comm: syz.3.1623 Not tainted syzkaller #0
[  402.178569][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  402.188782][T10638] Call Trace:
[  402.192118][T10638]  <TASK>
[  402.195096][T10638]  dump_stack_lvl+0x18c/0x250
[  402.199855][T10638]  ? show_regs_print_info+0x20/0x20
[  402.205306][T10638]  ? load_image+0x420/0x420
[  402.209884][T10638]  ? lockdep_hardirqs_on+0x98/0x150
[  402.215150][T10638]  should_fail_ex+0x394/0x4c0
[  402.219877][T10638]  should_failslab+0x9/0x20
[  402.224573][T10638]  slab_pre_alloc_hook+0x59/0x300
[  402.229680][T10638]  kmem_cache_alloc+0x5a/0x2c0
[  402.234568][T10638]  ? security_inode_alloc+0x34/0x110
[  402.239930][T10638]  security_inode_alloc+0x34/0x110
[  402.245126][T10638]  inode_init_always+0x914/0xc90
[  402.250242][T10638]  new_inode_pseudo+0x95/0x1d0
[  402.255691][T10638]  __sock_create+0x12d/0x940
[  402.260357][T10638]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  402.266413][T10638]  __sys_socket+0xd7/0x1b0
[  402.270914][T10638]  __x64_sys_socket+0x7a/0x90
[  402.275753][T10638]  do_syscall_64+0x55/0xb0
[  402.280250][T10638]  ? clear_bhb_loop+0x40/0x90
[  402.285086][T10638]  ? clear_bhb_loop+0x40/0x90
[  402.289918][T10638]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  402.295890][T10638] RIP: 0033:0x7fe18739de59
[  402.300367][T10638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.320216][T10638] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  402.328685][T10638] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  402.336713][T10638] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022
[  402.344756][T10638] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  402.352872][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  402.361076][T10638] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  402.369216][T10638]  </TASK>
[  402.436401][T10638] socket: no more sockets
[  402.458629][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  402.608050][T10645] netlink: 'syz.2.1625': attribute type 8 has an invalid length.
[  402.640197][T10645] netlink: 'syz.2.1625': attribute type 1 has an invalid length.
[  402.800860][T10652] netlink: 'syz.1.1636': attribute type 8 has an invalid length.
[  402.818945][T10652] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  403.431523][T10651] delete_channel: no stack
[  403.631176][T10671] FAULT_INJECTION: forcing a failure.
[  403.631176][T10671] name failslab, interval 1, probability 0, space 0, times 0
[  403.645103][T10671] CPU: 1 PID: 10671 Comm: syz.0.1634 Not tainted syzkaller #0
[  403.652810][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  403.662921][T10671] Call Trace:
[  403.666251][T10671]  <TASK>
[  403.669307][T10671]  dump_stack_lvl+0x18c/0x250
[  403.674146][T10671]  ? show_regs_print_info+0x20/0x20
[  403.679419][T10671]  ? load_image+0x420/0x420
[  403.684000][T10671]  ? __might_sleep+0xe0/0xe0
[  403.688734][T10671]  ? __lock_acquire+0x7d80/0x7d80
[  403.694023][T10671]  ? mark_lock+0x94/0x320
[  403.699037][T10671]  should_fail_ex+0x394/0x4c0
[  403.703784][T10671]  should_failslab+0x9/0x20
[  403.708346][T10671]  slab_pre_alloc_hook+0x59/0x300
[  403.713440][T10671]  ? lock_chain_count+0x20/0x20
[  403.718349][T10671]  ? __get_vm_area_node+0x125/0x370
[  403.723633][T10671]  __kmem_cache_alloc_node+0x53/0x250
[  403.729061][T10671]  ? __get_vm_area_node+0x125/0x370
[  403.734438][T10671]  kmalloc_node_trace+0x26/0xe0
[  403.739334][T10671]  __get_vm_area_node+0x125/0x370
[  403.744413][T10671]  __vmalloc_node_range+0x36f/0x1320
[  403.749738][T10671]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  403.755349][T10671]  ? mark_lock+0x94/0x320
[  403.759736][T10671]  ? __lock_acquire+0x1336/0x7d80
[  403.764897][T10671]  ? aa_get_newest_label+0xfd/0x5c0
[  403.770259][T10671]  ? free_vm_area+0x50/0x50
[  403.774901][T10671]  ? end_current_label_crit_section+0x170/0x170
[  403.781191][T10671]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  403.787213][T10671]  ? lock_chain_count+0x20/0x20
[  403.792114][T10671]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  403.797870][T10671]  __vmalloc+0x7a/0x90
[  403.801972][T10671]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  403.807550][T10671]  bpf_prog_alloc_no_stats+0x46/0x430
[  403.813070][T10671]  bpf_prog_alloc+0x3d/0x1a0
[  403.817813][T10671]  bpf_prog_load+0x6b2/0x1610
[  403.822897][T10671]  ? map_freeze+0x420/0x420
[  403.827479][T10671]  ? __might_fault+0xaa/0x120
[  403.832191][T10671]  ? __lock_acquire+0x7d80/0x7d80
[  403.837333][T10671]  ? file_end_write+0x159/0x250
[  403.842226][T10671]  ? __might_fault+0xaa/0x120
[  403.846933][T10671]  ? __might_fault+0xc6/0x120
[  403.851639][T10671]  ? __might_fault+0xaa/0x120
[  403.856348][T10671]  ? bpf_lsm_bpf+0x9/0x10
[  403.860714][T10671]  ? security_bpf+0x7e/0xa0
[  403.865630][T10671]  __sys_bpf+0x5ba/0x890
[  403.870190][T10671]  ? bpf_link_show_fdinfo+0x390/0x390
[  403.875612][T10671]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  403.881912][T10671]  __x64_sys_bpf+0x7c/0x90
[  403.886366][T10671]  do_syscall_64+0x55/0xb0
[  403.890831][T10671]  ? clear_bhb_loop+0x40/0x90
[  403.895633][T10671]  ? clear_bhb_loop+0x40/0x90
[  403.900641][T10671]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.906831][T10671] RIP: 0033:0x7fe7cd39de59
[  403.911271][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.930928][T10671] RSP: 002b:00007fe7ce25a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  403.939401][T10671] RAX: ffffffffffffffda RBX: 00007fe7cd625fa0 RCX: 00007fe7cd39de59
[  403.947403][T10671] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  403.955580][T10671] RBP: 00007fe7ce25a090 R08: 0000000000000000 R09: 0000000000000000
[  403.963580][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.971760][T10671] R13: 00007fe7cd626038 R14: 00007fe7cd625fa0 R15: 00007ffc823fb838
[  403.979876][T10671]  </TASK>
[  404.009338][T10671] syz.0.1634: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  404.033297][T10671] CPU: 1 PID: 10671 Comm: syz.0.1634 Not tainted syzkaller #0
[  404.041636][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  404.051834][T10671] Call Trace:
[  404.055165][T10671]  <TASK>
[  404.058231][T10671]  dump_stack_lvl+0x18c/0x250
[  404.062983][T10671]  ? show_regs_print_info+0x20/0x20
[  404.068347][T10671]  ? load_image+0x420/0x420
[  404.072945][T10671]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  404.079578][T10671]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  404.086156][T10671]  warn_alloc+0x246/0x340
[  404.090609][T10671]  ? __get_vm_area_node+0x125/0x370
[  404.095895][T10671]  ? zone_watermark_ok_safe+0x230/0x230
[  404.101522][T10671]  ? rcu_is_watching+0x15/0xb0
[  404.106373][T10671]  ? __get_vm_area_node+0x356/0x370
[  404.111746][T10671]  __vmalloc_node_range+0x394/0x1320
[  404.117120][T10671]  ? mark_lock+0x94/0x320
[  404.121537][T10671]  ? __lock_acquire+0x1336/0x7d80
[  404.126662][T10671]  ? aa_get_newest_label+0xfd/0x5c0
[  404.132020][T10671]  ? free_vm_area+0x50/0x50
[  404.136601][T10671]  ? end_current_label_crit_section+0x170/0x170
[  404.143087][T10671]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  404.149175][T10671]  ? lock_chain_count+0x20/0x20
[  404.154203][T10671]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  404.160342][T10671]  __vmalloc+0x7a/0x90
[  404.164486][T10671]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  404.170209][T10671]  bpf_prog_alloc_no_stats+0x46/0x430
[  404.175654][T10671]  bpf_prog_alloc+0x3d/0x1a0
[  404.180321][T10671]  bpf_prog_load+0x6b2/0x1610
[  404.185094][T10671]  ? map_freeze+0x420/0x420
[  404.189668][T10671]  ? __might_fault+0xaa/0x120
[  404.194847][T10671]  ? __lock_acquire+0x7d80/0x7d80
[  404.199940][T10671]  ? file_end_write+0x159/0x250
[  404.204865][T10671]  ? __might_fault+0xaa/0x120
[  404.209624][T10671]  ? __might_fault+0xc6/0x120
[  404.214363][T10671]  ? __might_fault+0xaa/0x120
[  404.219189][T10671]  ? bpf_lsm_bpf+0x9/0x10
[  404.223584][T10671]  ? security_bpf+0x7e/0xa0
[  404.228277][T10671]  __sys_bpf+0x5ba/0x890
[  404.232591][T10671]  ? bpf_link_show_fdinfo+0x390/0x390
[  404.238139][T10671]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  404.244409][T10671]  __x64_sys_bpf+0x7c/0x90
[  404.248898][T10671]  do_syscall_64+0x55/0xb0
[  404.253430][T10671]  ? clear_bhb_loop+0x40/0x90
[  404.258189][T10671]  ? clear_bhb_loop+0x40/0x90
[  404.262941][T10671]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.269104][T10671] RIP: 0033:0x7fe7cd39de59
[  404.273594][T10671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.293532][T10671] RSP: 002b:00007fe7ce25a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  404.302227][T10671] RAX: ffffffffffffffda RBX: 00007fe7cd625fa0 RCX: 00007fe7cd39de59
[  404.310363][T10671] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005
[  404.318665][T10671] RBP: 00007fe7ce25a090 R08: 0000000000000000 R09: 0000000000000000
[  404.326801][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  404.334937][T10671] R13: 00007fe7cd626038 R14: 00007fe7cd625fa0 R15: 00007ffc823fb838
[  404.343030][T10671]  </TASK>
[  404.357931][T10671] Mem-Info:
[  404.368111][T10671] active_anon:6222 inactive_anon:0 isolated_anon:0
[  404.368111][T10671]  active_file:18351 inactive_file:40073 isolated_file:0
[  404.368111][T10671]  unevictable:768 dirty:135 writeback:0
[  404.368111][T10671]  slab_reclaimable:10386 slab_unreclaimable:94520
[  404.368111][T10671]  mapped:24849 shmem:1361 pagetables:521
[  404.368111][T10671]  sec_pagetables:0 bounce:0
[  404.368111][T10671]  kernel_misc_reclaimable:0
[  404.368111][T10671]  free:1344567 free_pcp:11725 free_cma:0
[  404.480738][T10671] Node 0 active_anon:24988kB inactive_anon:0kB active_file:73404kB inactive_file:160092kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99396kB dirty:640kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10504kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no
[  404.548961][T10671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  404.594609][T10671] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  404.625852][T10671] lowmem_reserve[]: 0 2521 2522 2522 2522
[  404.705137][T10671] Node 0 DMA32 free:1468272kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24952kB inactive_anon:0kB active_file:73404kB inactive_file:159264kB unevictable:1536kB writepending:640kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:28984kB local_pcp:14236kB free_cma:0kB
[  404.999261][T10671] lowmem_reserve[]: 0 0 0 0 0
[  405.005848][T10671] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  405.170539][T10683] netlink: 'syz.1.1639': attribute type 8 has an invalid length.
[  405.192869][T10671] lowmem_reserve[]: 0 0 0 0 0
[  405.217558][T10683] netlink: 'syz.1.1639': attribute type 1 has an invalid length.
[  405.230066][T10671] Node 1 Normal free:3894764kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:9504kB free_cma:0kB
[  405.268914][T10671] lowmem_reserve[]: 0 0 0 0 0
[  405.274468][T10683] __nla_validate_parse: 15 callbacks suppressed
[  405.274484][T10683] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1639'.
[  405.296879][T10671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  405.319387][T10671] Node 0 DMA32: 2980*4kB (UME) 1982*8kB (UM) 1573*16kB (UME) 835*32kB (UME) 372*64kB (UME) 151*128kB (UME) 81*256kB (UME) 25*512kB (UM) 15*1024kB (UM) 5*2048kB (UE) 314*4096kB (UM) = 1468080kB
[  405.341681][T10671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  405.353896][T10671] Node 1 Normal: 241*4kB (UME) 61*8kB (UME) 36*16kB (UME) 124*32kB (UME) 40*64kB (UME) 7*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3894764kB
[  405.373149][T10671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  405.412327][T10671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  405.442457][T10671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  405.459842][T10671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  405.484745][T10671] 59787 total pagecache pages
[  405.539786][T10671] 0 pages in swap cache
[  405.544026][T10671] Free swap  = 124996kB
[  405.548231][T10671] Total swap = 124996kB
[  405.555048][T10671] 2097051 pages RAM
[  405.558990][T10671] 0 pages HighMem/MovableOnly
[  405.563739][T10671] 416953 pages reserved
[  405.568053][T10671] 0 pages cma reserved
[  406.350878][T10707] netlink: 'syz.2.1650': attribute type 29 has an invalid length.
[  406.369764][T10707] netlink: 'syz.2.1650': attribute type 29 has an invalid length.
[  406.395473][T10708] netlink: 'syz.2.1650': attribute type 29 has an invalid length.
[  406.431503][T10711] netlink: 'syz.3.1651': attribute type 8 has an invalid length.
[  406.449318][T10711] netlink: 'syz.3.1651': attribute type 1 has an invalid length.
[  406.467680][T10711] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1651'.
[  406.807677][T10721] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1655'.
[  406.834143][T10721] team_slave_0: left promiscuous mode
[  406.873765][T10721] team_slave_0: left allmulticast mode
[  406.958381][T10721] team0: Port device team_slave_0 removed
[  406.969959][T10721] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  407.614754][T10747] netlink: 'syz.2.1663': attribute type 8 has an invalid length.
[  407.661741][T10747] netlink: 'syz.2.1663': attribute type 1 has an invalid length.
[  407.690647][T10747] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1663'.
[  408.015177][T10749] netlink: 'syz.1.1664': attribute type 10 has an invalid length.
[  408.040214][T10749] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1664'.
[  408.070614][T10749] hsr0: entered promiscuous mode
[  408.091377][T10757] mac80211_hwsim hwsim7 ..�c��: renamed from wlan1 (while UP)
[  408.419725][T10750] delete_channel: no stack
[  408.537006][T10768] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1672'.
[  408.556549][T10768] netlink: del zone limit has 4 unknown bytes
[  408.820430][T10771] FAULT_INJECTION: forcing a failure.
[  408.820430][T10771] name failslab, interval 1, probability 0, space 0, times 0
[  408.885515][T10771] CPU: 1 PID: 10771 Comm: syz.3.1673 Not tainted syzkaller #0
[  408.893259][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  408.903398][T10771] Call Trace:
[  408.906723][T10771]  <TASK>
[  408.909711][T10771]  dump_stack_lvl+0x18c/0x250
[  408.914474][T10771]  ? sctp_sendmsg+0x1519/0x27b0
[  408.919516][T10771]  ? ___sys_sendmsg+0x2a6/0x360
[  408.924437][T10771]  ? show_regs_print_info+0x20/0x20
[  408.929710][T10771]  ? load_image+0x420/0x420
[  408.934299][T10771]  should_fail_ex+0x394/0x4c0
[  408.939090][T10771]  should_failslab+0x9/0x20
[  408.943663][T10771]  slab_pre_alloc_hook+0x59/0x300
[  408.948797][T10771]  ? sctp_add_bind_addr+0x8c/0x360
[  408.953968][T10771]  __kmem_cache_alloc_node+0x53/0x250
[  408.959504][T10771]  ? sctp_add_bind_addr+0x8c/0x360
[  408.964671][T10771]  kmalloc_trace+0x2a/0xe0
[  408.969155][T10771]  sctp_add_bind_addr+0x8c/0x360
[  408.974166][T10771]  sctp_copy_local_addr_list+0x31b/0x4e0
[  408.980114][T10771]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  408.986010][T10771]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  408.992234][T10771]  ? sctp_v4_is_any+0x35/0x60
[  408.997221][T10771]  ? sctp_copy_one_addr+0x8c/0x350
[  409.002470][T10771]  sctp_bind_addr_copy+0xb3/0x3c0
[  409.007623][T10771]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  409.014003][T10771]  sctp_connect_new_asoc+0x2f9/0x6a0
[  409.019509][T10771]  ? __sctp_connect+0xd80/0xd80
[  409.024391][T10771]  ? __local_bh_enable_ip+0x13a/0x1c0
[  409.029884][T10771]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  409.035475][T10771]  ? security_sctp_bind_connect+0x89/0xb0
[  409.041346][T10771]  sctp_sendmsg+0x1519/0x27b0
[  409.046168][T10771]  ? sctp_getsockopt+0xb60/0xb60
[  409.051239][T10771]  ? aa_af_perm+0x330/0x330
[  409.055872][T10771]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  409.062356][T10771]  ? sock_rps_record_flow+0x19/0x3f0
[  409.067905][T10771]  ? inet_sendmsg+0xce/0x2a0
[  409.072657][T10771]  ? inet_send_prepare+0x250/0x250
[  409.077815][T10771]  ____sys_sendmsg+0x61b/0x980
[  409.082718][T10771]  ? __asan_memset+0x22/0x40
[  409.087359][T10771]  ? __sys_sendmsg_sock+0x30/0x30
[  409.092429][T10771]  ? __import_iovec+0x5f2/0x850
[  409.097518][T10771]  ? import_iovec+0x73/0xa0
[  409.102091][T10771]  ___sys_sendmsg+0x2a6/0x360
[  409.107048][T10771]  ? __sys_sendmsg+0x2b0/0x2b0
[  409.111900][T10771]  ? __lock_acquire+0x7d80/0x7d80
[  409.117010][T10771]  __se_sys_sendmsg+0x1d0/0x2c0
[  409.122003][T10771]  ? __x64_sys_sendmsg+0x80/0x80
[  409.127122][T10771]  ? lockdep_hardirqs_on+0x98/0x150
[  409.132379][T10771]  do_syscall_64+0x55/0xb0
[  409.136839][T10771]  ? clear_bhb_loop+0x40/0x90
[  409.141545][T10771]  ? clear_bhb_loop+0x40/0x90
[  409.146260][T10771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.152198][T10771] RIP: 0033:0x7fe18739de59
[  409.156652][T10771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.176386][T10771] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  409.184954][T10771] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  409.193082][T10771] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003
[  409.201100][T10771] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  409.209284][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  409.217373][T10771] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  409.225678][T10771]  </TASK>
[  409.530416][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1672'.
[  409.578735][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1672'.
[  409.610709][T10769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1672'.
[  409.647436][T10774] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1672'.
[  409.926883][T10786] netlink: 'syz.0.1676': attribute type 8 has an invalid length.
[  409.989484][T10786] netlink: 'syz.0.1676': attribute type 1 has an invalid length.
[  410.231770][T10779] delete_channel: no stack
[  410.488375][T10798] __nla_validate_parse: 1 callbacks suppressed
[  410.488398][T10798] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1680'.
[  410.661688][T10791] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1678'.
[  410.889967][T10797] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1680'.
[  410.924308][T10797] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1680'.
[  411.444564][T10810] validate_nla: 3 callbacks suppressed
[  411.444584][T10810] netlink: 'syz.1.1686': attribute type 8 has an invalid length.
[  411.509111][T10810] netlink: 'syz.1.1686': attribute type 1 has an invalid length.
[  411.532748][T10810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1686'.
[  412.485016][T10831] netlink: 'syz.2.1692': attribute type 10 has an invalid length.
[  412.504414][T10831] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1692'.
[  412.521377][T10831] hsr0: entered promiscuous mode
[  412.543310][T10831] bridge0: port 6(hsr0) entered blocking state
[  412.565911][T10831] bridge0: port 6(hsr0) entered disabled state
[  412.593201][T10831] hsr0: entered allmulticast mode
[  412.612907][T10831] hsr_slave_0: entered allmulticast mode
[  412.630962][T10831] hsr_slave_1: entered allmulticast mode
[  412.715222][T10831] bridge0: port 6(hsr0) entered blocking state
[  412.723446][T10831] bridge0: port 6(hsr0) entered forwarding state
[  412.924621][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'.
[  413.142048][T10844] netlink: 'syz.0.1698': attribute type 8 has an invalid length.
[  413.178707][T10844] netlink: 'syz.0.1698': attribute type 1 has an invalid length.
[  413.186847][T10844] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1698'.
[  413.233352][T10850] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1700'.
[  413.285173][T10850] netlink: del zone limit has 4 unknown bytes
[  413.559784][T10861] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1705'.
[  413.599341][T10860] sit0: left promiscuous mode
[  413.785822][T10863] sit0: entered promiscuous mode
[  414.634376][T10883] netlink: 'syz.1.1711': attribute type 8 has an invalid length.
[  414.648798][T10883] netlink: 'syz.1.1711': attribute type 1 has an invalid length.
[  415.771254][T10911] netlink: 'syz.1.1722': attribute type 8 has an invalid length.
[  415.794376][T10912] __nla_validate_parse: 5 callbacks suppressed
[  415.794395][T10912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1720'.
[  415.838846][T10911] netlink: 'syz.1.1722': attribute type 1 has an invalid length.
[  415.846849][T10911] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1722'.
[  415.873325][T10912] netlink: del zone limit has 4 unknown bytes
[  416.359179][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1720'.
[  416.443290][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1720'.
[  416.627318][T10918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1720'.
[  416.699075][T10925] delete_channel: no stack
[  416.706303][T10922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1720'.
[  416.812943][T10933] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1729'.
[  417.011533][T10938] netlink: 'syz.2.1730': attribute type 9 has an invalid length.
[  417.035701][T10938] netlink: 147128 bytes leftover after parsing attributes in process `syz.2.1730'.
[  417.231539][T10936] netlink: 'syz.2.1730': attribute type 9 has an invalid length.
[  417.254206][T10936] netlink: 194916 bytes leftover after parsing attributes in process `syz.2.1730'.
[  417.290759][T10944] netlink: 'syz.1.1731': attribute type 9 has an invalid length.
[  417.307538][T10944] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1731'.
[  417.695534][T10952] netlink: 'syz.2.1733': attribute type 8 has an invalid length.
[  417.748781][T10952] netlink: 'syz.2.1733': attribute type 1 has an invalid length.
[  418.543985][T10960] delete_channel: no stack
[  419.579892][T10979] netlink: 'syz.3.1743': attribute type 10 has an invalid length.
[  419.621952][T10979] team0: left allmulticast mode
[  419.628939][T10979] team_slave_1: left allmulticast mode
[  419.635117][T10979] geneve1: left allmulticast mode
[  419.640406][T10979] team0: left promiscuous mode
[  419.646123][T10979] team_slave_1: left promiscuous mode
[  419.653026][T10979] geneve1: left promiscuous mode
[  419.659140][T10979] bridge0: port 4(team0) entered disabled state
[  419.690940][T10979] 8021q: adding VLAN 0 to HW filter on device team0
[  419.700215][T10979] bond0: (slave team0): Enslaving as an active interface with an up link
[  419.712122][T10980] netlink: 'syz.3.1743': attribute type 10 has an invalid length.
[  422.177743][T11005] FAULT_INJECTION: forcing a failure.
[  422.177743][T11005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.198785][T11005] CPU: 0 PID: 11005 Comm: syz.2.1754 Not tainted syzkaller #0
[  422.206358][T11005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  422.216650][T11005] Call Trace:
[  422.220026][T11005]  <TASK>
[  422.223373][T11005]  dump_stack_lvl+0x18c/0x250
[  422.228178][T11005]  ? show_regs_print_info+0x20/0x20
[  422.233455][T11005]  ? load_image+0x420/0x420
[  422.238282][T11005]  ? __might_fault+0xaa/0x120
[  422.243107][T11005]  ? __lock_acquire+0x7d80/0x7d80
[  422.248351][T11005]  ? __sys_bpf+0x1/0x890
[  422.252736][T11005]  should_fail_ex+0x394/0x4c0
[  422.257584][T11005]  _copy_from_user+0x2f/0xe0
[  422.262412][T11005]  __sys_bpf+0x23e/0x890
[  422.266972][T11005]  ? bpf_link_show_fdinfo+0x390/0x390
[  422.272414][T11005]  ? lock_chain_count+0x20/0x20
[  422.277394][T11005]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  422.283444][T11005]  __x64_sys_bpf+0x7c/0x90
[  422.287900][T11005]  do_syscall_64+0x55/0xb0
[  422.292374][T11005]  ? clear_bhb_loop+0x40/0x90
[  422.297359][T11005]  ? clear_bhb_loop+0x40/0x90
[  422.302406][T11005]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  422.308446][T11005] RIP: 0033:0x7feb5ab9de59
[  422.313186][T11005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.333382][T11005] RSP: 002b:00007feb5b986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  422.341935][T11005] RAX: ffffffffffffffda RBX: 00007feb5ae25fa0 RCX: 00007feb5ab9de59
[  422.350150][T11005] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[  422.358459][T11005] RBP: 00007feb5b986090 R08: 0000000000000000 R09: 0000000000000000
[  422.366597][T11005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.374978][T11005] R13: 00007feb5ae26038 R14: 00007feb5ae25fa0 R15: 00007ffed6d5f9f8
[  422.383010][T11005]  </TASK>
[  422.489251][T10998] delete_channel: no stack
[  423.114392][T11019] ipvlan1: entered promiscuous mode
[  423.121449][T11019] ipvlan1: entered allmulticast mode
[  423.134003][T11019] veth0_vlan: entered allmulticast mode
[  423.665650][T11023] __nla_validate_parse: 8 callbacks suppressed
[  423.665689][T11023] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1760'.
[  423.708732][T11025] netlink: 'syz.2.1759': attribute type 21 has an invalid length.
[  423.717256][T11025] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1759'.
[  423.771542][T11035] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1762'.
[  423.983485][T11039] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  424.202874][ T5788] Bluetooth: hci3: ISO packet for unknown connection handle 8
[  424.230144][T11043] netlink: 'syz.3.1766': attribute type 12 has an invalid length.
[  424.269610][T11043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1766'.
[  424.682374][T11040] delete_channel: no stack
[  424.689221][T11053] netlink: 'syz.0.1771': attribute type 21 has an invalid length.
[  424.728370][T11053] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1771'.
[  424.823020][T11056] ipvlan1: entered promiscuous mode
[  424.832443][T11056] ipvlan1: entered allmulticast mode
[  424.842639][T11056] veth0_vlan: entered allmulticast mode
[  425.666211][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1778'.
[  425.680293][T11080] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  425.700084][T11080] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1778'.
[  426.180062][T11087] FAULT_INJECTION: forcing a failure.
[  426.180062][T11087] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  426.214618][T11087] CPU: 0 PID: 11087 Comm: syz.0.1779 Not tainted syzkaller #0
[  426.222300][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  426.232448][T11087] Call Trace:
[  426.235764][T11087]  <TASK>
[  426.238818][T11087]  dump_stack_lvl+0x18c/0x250
[  426.243639][T11087]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  426.250032][T11087]  ? show_regs_print_info+0x20/0x20
[  426.255368][T11087]  ? load_image+0x420/0x420
[  426.260022][T11087]  should_fail_ex+0x394/0x4c0
[  426.264848][T11087]  prepare_alloc_pages+0x1e1/0x5b0
[  426.270365][T11087]  __alloc_pages+0x134/0x460
[  426.275312][T11087]  ? zone_statistics+0x170/0x170
[  426.280293][T11087]  ? lockdep_hardirqs_on+0x98/0x150
[  426.286315][T11087]  __kmalloc_large_node+0x8c/0x1f0
[  426.291561][T11087]  ? slhc_init+0x154/0x740
[  426.296065][T11087]  __kmalloc+0x114/0x240
[  426.300541][T11087]  slhc_init+0x154/0x740
[  426.304875][T11087]  ppp_ioctl+0x14af/0x1ac0
[  426.309343][T11087]  ? ppp_poll+0x250/0x250
[  426.314136][T11087]  ? __fget_files+0x28/0x460
[  426.318786][T11087]  ? bpf_lsm_file_ioctl+0x9/0x10
[  426.324024][T11087]  ? security_file_ioctl+0x80/0xa0
[  426.329173][T11087]  ? ppp_poll+0x250/0x250
[  426.333550][T11087]  __se_sys_ioctl+0xfd/0x170
[  426.338448][T11087]  do_syscall_64+0x55/0xb0
[  426.342911][T11087]  ? clear_bhb_loop+0x40/0x90
[  426.347705][T11087]  ? clear_bhb_loop+0x40/0x90
[  426.353118][T11087]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.359157][T11087] RIP: 0033:0x7fe7cd39de59
[  426.363725][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.383556][T11087] RSP: 002b:00007fe7ce25a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  426.392013][T11087] RAX: ffffffffffffffda RBX: 00007fe7cd625fa0 RCX: 00007fe7cd39de59
[  426.400030][T11087] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000003
[  426.408233][T11087] RBP: 00007fe7ce25a090 R08: 0000000000000000 R09: 0000000000000000
[  426.416419][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  426.424516][T11087] R13: 00007fe7cd626038 R14: 00007fe7cd625fa0 R15: 00007ffc823fb838
[  426.432534][T11087]  </TASK>
[  426.594209][T11091] netlink: 'syz.3.1782': attribute type 21 has an invalid length.
[  426.603243][T11091] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1782'.
[  426.649235][T11085] delete_channel: no stack
[  426.782189][T11094] ipvlan1: entered promiscuous mode
[  426.787534][T11094] ipvlan1: entered allmulticast mode
[  426.908678][T11094] veth0_vlan: entered allmulticast mode
[  427.259241][T11100] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1785'.
[  428.511990][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1795'.
[  428.562200][T11122] delete_channel: no stack
[  431.178890][T11156] delete_channel: no stack
[  432.358112][T11189] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  434.467401][T11190] delete_channel: no stack
[  435.325221][T11209] FAULT_INJECTION: forcing a failure.
[  435.325221][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  435.363470][T11209] CPU: 0 PID: 11209 Comm: syz.1.1823 Not tainted syzkaller #0
[  435.371213][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  435.381321][T11209] Call Trace:
[  435.384648][T11209]  <TASK>
[  435.387619][T11209]  dump_stack_lvl+0x18c/0x250
[  435.392400][T11209]  ? show_regs_print_info+0x20/0x20
[  435.397663][T11209]  ? load_image+0x420/0x420
[  435.402240][T11209]  ? __might_fault+0xaa/0x120
[  435.406991][T11209]  ? __lock_acquire+0x7d80/0x7d80
[  435.412095][T11209]  should_fail_ex+0x394/0x4c0
[  435.417355][T11209]  _copy_from_user+0x2f/0xe0
[  435.421990][T11209]  __sys_bpf+0x23e/0x890
[  435.426474][T11209]  ? bpf_link_show_fdinfo+0x390/0x390
[  435.431900][T11209]  ? lock_chain_count+0x20/0x20
[  435.436799][T11209]  __x64_sys_bpf+0x7c/0x90
[  435.441297][T11209]  do_syscall_64+0x55/0xb0
[  435.446021][T11209]  ? clear_bhb_loop+0x40/0x90
[  435.450733][T11209]  ? clear_bhb_loop+0x40/0x90
[  435.455444][T11209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  435.461471][T11209] RIP: 0033:0x7fc45b99de59
[  435.465948][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.486906][T11209] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  435.495762][T11209] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  435.504050][T11209] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[  435.512061][T11209] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  435.520087][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.528199][T11209] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  435.536309][T11209]  </TASK>
[  436.339072][T11224] bridge0: port 6(hsr0) entered disabled state
[  436.345640][T11224] bridge0: port 5(team0) entered disabled state
[  436.352579][T11224] bridge0: port 4(batadv0) entered disabled state
[  436.359671][T11224] bridge0: port 3(dummy0) entered disabled state
[  436.366439][T11224] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.373876][T11224] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.408366][T11225] hsr0: left allmulticast mode
[  436.414363][T11225] hsr_slave_0: left allmulticast mode
[  436.420108][T11225] hsr_slave_1: left allmulticast mode
[  436.425993][T11225] bridge0: port 6(hsr0) entered disabled state
[  436.434908][T11225] bridge0: port 5(team0) entered disabled state
[  436.449023][T11225] batadv0: left allmulticast mode
[  436.455512][T11225] batadv0: left promiscuous mode
[  436.461504][T11225] bridge0: port 4(batadv0) entered disabled state
[  436.470938][T11225] bridge0: port 3(dummy0) entered disabled state
[  436.481120][T11225] bridge_slave_1: left allmulticast mode
[  436.486932][T11225] bridge_slave_1: left promiscuous mode
[  436.493807][T11225] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.503279][T11225] bridge_slave_0: left promiscuous mode
[  436.509345][T11225] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.536605][T11225] bond0: (slave bridge0): Releasing backup interface
[  436.549528][T11225] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  440.172639][T11233] delete_channel: no stack
[  440.454212][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.461302][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  440.507270][T11255] netlink: 'syz.0.1838': attribute type 3 has an invalid length.
[  440.519364][T11257] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1839'.
[  440.539054][T11255] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1838'.
[  440.550565][T11257] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  440.566931][T11252] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1837'.
[  440.945230][T11266] FAULT_INJECTION: forcing a failure.
[  440.945230][T11266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.960271][T11266] CPU: 0 PID: 11266 Comm: syz.3.1842 Not tainted syzkaller #0
[  440.967918][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.978217][T11266] Call Trace:
[  440.981548][T11266]  <TASK>
[  440.984542][T11266]  dump_stack_lvl+0x18c/0x250
[  440.989293][T11266]  ? show_regs_print_info+0x20/0x20
[  440.994742][T11266]  ? load_image+0x420/0x420
[  440.999309][T11266]  ? __might_fault+0xaa/0x120
[  441.004043][T11266]  ? __lock_acquire+0x7d80/0x7d80
[  441.009127][T11266]  ? __virt_addr_valid+0x10c/0x380
[  441.014299][T11266]  should_fail_ex+0x394/0x4c0
[  441.019040][T11266]  _copy_to_user+0x2f/0xa0
[  441.023520][T11266]  bpf_verifier_vlog+0x2f1/0x840
[  441.028701][T11266]  __btf_verifier_log+0xe3/0x140
[  441.033716][T11266]  ? btf_check_sec_info+0x350/0x350
[  441.038990][T11266]  ? __lock_acquire+0x7d80/0x7d80
[  441.044075][T11266]  ? __virt_addr_valid+0x10c/0x380
[  441.049247][T11266]  ? btf_parse_hdr+0x1f0/0x700
[  441.054071][T11266]  btf_parse_hdr+0x29e/0x700
[  441.059604][T11266]  btf_new_fd+0x397/0x9e0
[  441.064014][T11266]  ? bpf_btf_show_fdinfo+0x80/0x80
[  441.069186][T11266]  ? capable+0x88/0xe0
[  441.073309][T11266]  __sys_bpf+0x670/0x890
[  441.077595][T11266]  ? read_tsc+0x9/0x20
[  441.081698][T11266]  ? bpf_link_show_fdinfo+0x390/0x390
[  441.087114][T11266]  ? lock_chain_count+0x20/0x20
[  441.091997][T11266]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  441.098017][T11266]  __x64_sys_bpf+0x7c/0x90
[  441.102475][T11266]  do_syscall_64+0x55/0xb0
[  441.107012][T11266]  ? clear_bhb_loop+0x40/0x90
[  441.111796][T11266]  ? clear_bhb_loop+0x40/0x90
[  441.116766][T11266]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  441.122738][T11266] RIP: 0033:0x7fe18739de59
[  441.127273][T11266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  441.147175][T11266] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  441.155727][T11266] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  441.163895][T11266] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012
[  441.171900][T11266] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  441.179904][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.187902][T11266] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  441.196002][T11266]  </TASK>
[  442.533750][T11285] delete_channel: no stack
[  442.539841][T11290] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1848'.
[  442.560400][T11289] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1849'.
[  443.253610][T11306] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1858'.
[  443.548909][T11312] delete_channel: no stack
[  443.771987][T11319] FAULT_INJECTION: forcing a failure.
[  443.771987][T11319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  443.788724][T11319] CPU: 1 PID: 11319 Comm: syz.2.1863 Not tainted syzkaller #0
[  443.796426][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  443.806577][T11319] Call Trace:
[  443.809895][T11319]  <TASK>
[  443.812877][T11319]  dump_stack_lvl+0x18c/0x250
[  443.817628][T11319]  ? show_regs_print_info+0x20/0x20
[  443.822879][T11319]  ? load_image+0x420/0x420
[  443.827428][T11319]  ? __might_fault+0xaa/0x120
[  443.832150][T11319]  ? __lock_acquire+0x7d80/0x7d80
[  443.837222][T11319]  should_fail_ex+0x394/0x4c0
[  443.841954][T11319]  _copy_from_user+0x2f/0xe0
[  443.846774][T11319]  kstrtouint_from_user+0xde/0x170
[  443.852031][T11319]  ? kstrtol_from_user+0x190/0x190
[  443.857288][T11319]  proc_fail_nth_write+0x8f/0x250
[  443.862408][T11319]  ? proc_fail_nth_read+0x260/0x260
[  443.867744][T11319]  ? proc_fail_nth_read+0x260/0x260
[  443.872985][T11319]  vfs_write+0x299/0x9a0
[  443.877279][T11319]  ? file_end_write+0x250/0x250
[  443.882170][T11319]  ? __fget_files+0x28/0x460
[  443.886795][T11319]  ? __fget_files+0x3fc/0x460
[  443.891520][T11319]  ? __fdget_pos+0x2a3/0x330
[  443.896242][T11319]  ? ksys_write+0x74/0x260
[  443.900706][T11319]  ksys_write+0x151/0x260
[  443.905094][T11319]  ? __ia32_sys_read+0x90/0x90
[  443.909924][T11319]  ? __x64_sys_write+0x1d/0x90
[  443.914859][T11319]  ? __sanitizer_cov_trace_pc+0x17/0x60
[  443.920549][T11319]  do_syscall_64+0x55/0xb0
[  443.925098][T11319]  ? clear_bhb_loop+0x40/0x90
[  443.929807][T11319]  ? clear_bhb_loop+0x40/0x90
[  443.934608][T11319]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  443.940543][T11319] RIP: 0033:0x7feb5ab5e68e
[  443.944992][T11319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  443.964718][T11319] RSP: 002b:00007feb5b985fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  443.973168][T11319] RAX: ffffffffffffffda RBX: 00007feb5b9866c0 RCX: 00007feb5ab5e68e
[  443.981707][T11319] RDX: 0000000000000001 RSI: 00007feb5b9860a0 RDI: 0000000000000005
[  443.990144][T11319] RBP: 00007feb5b986090 R08: 0000000000000000 R09: 0000000000000000
[  443.998147][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.006232][T11319] R13: 00007feb5ae26038 R14: 00007feb5ae25fa0 R15: 00007ffed6d5f9f8
[  444.014353][T11319]  </TASK>
[  446.329847][T11336] FAULT_INJECTION: forcing a failure.
[  446.329847][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.382584][T11336] CPU: 0 PID: 11336 Comm: syz.3.1868 Not tainted syzkaller #0
[  446.390151][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  446.393608][T11340] netlink: 'syz.3.1868': attribute type 10 has an invalid length.
[  446.400322][T11336] Call Trace:
[  446.400364][T11336]  <TASK>
[  446.400374][T11336]  dump_stack_lvl+0x18c/0x250
[  446.419213][T11336]  ? show_regs_print_info+0x20/0x20
[  446.424504][T11336]  ? load_image+0x420/0x420
[  446.429097][T11336]  ? __lock_acquire+0x7d80/0x7d80
[  446.434185][T11336]  ? snprintf+0xe9/0x140
[  446.438514][T11336]  should_fail_ex+0x394/0x4c0
[  446.443260][T11336]  _copy_to_user+0x2f/0xa0
[  446.447873][T11336]  simple_read_from_buffer+0xe7/0x150
[  446.453336][T11336]  proc_fail_nth_read+0x1e8/0x260
[  446.458687][T11336]  ? proc_fault_inject_write+0x360/0x360
[  446.464454][T11336]  ? fsnotify_perm+0x271/0x5e0
[  446.469341][T11336]  ? proc_fault_inject_write+0x360/0x360
[  446.475029][T11336]  vfs_read+0x298/0x990
[  446.479263][T11336]  ? kernel_read+0x1e0/0x1e0
[  446.484191][T11336]  ? __fget_files+0x28/0x460
[  446.488911][T11336]  ? __fget_files+0x3fc/0x460
[  446.493818][T11336]  ? __fdget_pos+0x2a3/0x330
[  446.498442][T11336]  ? ksys_read+0x74/0x260
[  446.502827][T11336]  ksys_read+0x151/0x260
[  446.507103][T11336]  ? vfs_write+0x9a0/0x9a0
[  446.511559][T11336]  ? lockdep_hardirqs_on+0x98/0x150
[  446.516793][T11336]  do_syscall_64+0x55/0xb0
[  446.521247][T11336]  ? clear_bhb_loop+0x40/0x90
[  446.526218][T11336]  ? clear_bhb_loop+0x40/0x90
[  446.530928][T11336]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  446.537032][T11336] RIP: 0033:0x7fe18735e68e
[  446.541480][T11336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  446.561313][T11336] RSP: 002b:00007fe1882affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  446.569865][T11336] RAX: ffffffffffffffda RBX: 00007fe1882b06c0 RCX: 00007fe18735e68e
[  446.577959][T11336] RDX: 000000000000000f RSI: 00007fe1882b00a0 RDI: 0000000000000008
[  446.586045][T11336] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  446.594054][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.602400][T11336] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  446.610417][T11336]  </TASK>
[  446.702824][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1868'.
[  446.841512][T11347] syz.2.1872[11347] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  446.841954][T11347] syz.2.1872[11347] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  447.045066][T11350] FAULT_INJECTION: forcing a failure.
[  447.045066][T11350] name failslab, interval 1, probability 0, space 0, times 0
[  447.103688][T11350] CPU: 1 PID: 11350 Comm: syz.3.1873 Not tainted syzkaller #0
[  447.111808][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  447.122094][T11350] Call Trace:
[  447.125435][T11350]  <TASK>
[  447.128777][T11350]  dump_stack_lvl+0x18c/0x250
[  447.133545][T11350]  ? show_regs_print_info+0x20/0x20
[  447.138914][T11350]  ? load_image+0x420/0x420
[  447.143505][T11350]  should_fail_ex+0x394/0x4c0
[  447.148438][T11350]  should_failslab+0x9/0x20
[  447.153107][T11350]  slab_pre_alloc_hook+0x59/0x300
[  447.158210][T11350]  kmem_cache_alloc+0x5a/0x2c0
[  447.163070][T11350]  ? skb_clone+0x1eb/0x370
[  447.167561][T11350]  skb_clone+0x1eb/0x370
[  447.171884][T11350]  __netlink_deliver_tap+0x411/0x7f0
[  447.177564][T11350]  ? netlink_deliver_tap+0x2e/0x1b0
[  447.183013][T11350]  netlink_deliver_tap+0x19c/0x1b0
[  447.188197][T11350]  netlink_unicast+0x77b/0x930
[  447.193045][T11350]  netlink_sendmsg+0x8d0/0xbf0
[  447.197891][T11350]  ? netlink_getsockopt+0x590/0x590
[  447.203161][T11350]  ? apparmor_socket_sendmsg+0x8e/0x330
[  447.209008][T11350]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  447.214363][T11350]  ? security_socket_sendmsg+0x80/0xa0
[  447.219985][T11350]  ? netlink_getsockopt+0x590/0x590
[  447.225346][T11350]  ____sys_sendmsg+0x61b/0x980
[  447.230188][T11350]  ? __asan_memset+0x22/0x40
[  447.234845][T11350]  ? __sys_sendmsg_sock+0x30/0x30
[  447.239959][T11350]  ? __import_iovec+0x5f2/0x850
[  447.244891][T11350]  ? import_iovec+0x73/0xa0
[  447.249561][T11350]  ___sys_sendmsg+0x2a6/0x360
[  447.254409][T11350]  ? __sys_sendmsg+0x2b0/0x2b0
[  447.259305][T11350]  __se_sys_sendmsg+0x1d0/0x2c0
[  447.264502][T11350]  ? __x64_sys_sendmsg+0x80/0x80
[  447.269567][T11350]  ? syscall_enter_from_user_mode+0x2e/0x80
[  447.275548][T11350]  do_syscall_64+0x55/0xb0
[  447.280046][T11350]  ? clear_bhb_loop+0x40/0x90
[  447.285245][T11350]  ? clear_bhb_loop+0x40/0x90
[  447.289995][T11350]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  447.296057][T11350] RIP: 0033:0x7fe18739de59
[  447.300526][T11350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.320801][T11350] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  447.329376][T11350] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  447.337445][T11350] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  447.345490][T11350] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  447.353522][T11350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.361567][T11350] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  447.369614][T11350]  </TASK>
[  447.471244][T11339] delete_channel: no stack
[  447.748255][T11360] netlink: 'syz.0.1878': attribute type 10 has an invalid length.
[  447.778842][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1878'.
[  448.630577][T11377] delete_channel: no stack
[  449.048433][T11392] netlink: 'syz.0.1890': attribute type 10 has an invalid length.
[  449.070430][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1890'.
[  449.305514][T11400] FAULT_INJECTION: forcing a failure.
[  449.305514][T11400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  449.363086][T11400] CPU: 0 PID: 11400 Comm: syz.1.1893 Not tainted syzkaller #0
[  449.370690][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  449.380845][T11400] Call Trace:
[  449.384186][T11400]  <TASK>
[  449.387173][T11400]  dump_stack_lvl+0x18c/0x250
[  449.391940][T11400]  ? show_regs_print_info+0x20/0x20
[  449.397216][T11400]  ? load_image+0x420/0x420
[  449.401891][T11400]  ? __might_fault+0xaa/0x120
[  449.406649][T11400]  ? __lock_acquire+0x7d80/0x7d80
[  449.411771][T11400]  should_fail_ex+0x394/0x4c0
[  449.416541][T11400]  _copy_from_user+0x2f/0xe0
[  449.421208][T11400]  kstrtouint_from_user+0xde/0x170
[  449.426490][T11400]  ? kstrtol_from_user+0x190/0x190
[  449.431909][T11400]  proc_fail_nth_write+0x8f/0x250
[  449.437002][T11400]  ? proc_fail_nth_read+0x260/0x260
[  449.442329][T11400]  ? proc_fail_nth_read+0x260/0x260
[  449.447706][T11400]  vfs_write+0x299/0x9a0
[  449.452226][T11400]  ? file_end_write+0x250/0x250
[  449.457162][T11400]  ? __fget_files+0x28/0x460
[  449.461933][T11400]  ? __fget_files+0x3fc/0x460
[  449.466714][T11400]  ? __fdget_pos+0x2a3/0x330
[  449.471371][T11400]  ? ksys_write+0x74/0x260
[  449.475876][T11400]  ksys_write+0x151/0x260
[  449.480592][T11400]  ? __ia32_sys_read+0x90/0x90
[  449.485575][T11400]  ? lockdep_hardirqs_on+0x98/0x150
[  449.491135][T11400]  do_syscall_64+0x55/0xb0
[  449.495671][T11400]  ? clear_bhb_loop+0x40/0x90
[  449.500425][T11400]  ? clear_bhb_loop+0x40/0x90
[  449.505250][T11400]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  449.511331][T11400] RIP: 0033:0x7fc45b95e68e
[  449.515814][T11400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  449.535499][T11400] RSP: 002b:00007fc45c8abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  449.544103][T11400] RAX: ffffffffffffffda RBX: 00007fc45c8ac6c0 RCX: 00007fc45b95e68e
[  449.552152][T11400] RDX: 0000000000000001 RSI: 00007fc45c8ac0a0 RDI: 0000000000000011
[  449.560193][T11400] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  449.568324][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.576353][T11400] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  449.584636][T11400]  </TASK>
[  450.299515][T11406] delete_channel: no stack
[  450.826422][T11425] netlink: 'syz.2.1903': attribute type 21 has an invalid length.
[  450.864770][T11425] IPv6: NLM_F_CREATE should be specified when creating new route
[  450.898229][T11429] FAULT_INJECTION: forcing a failure.
[  450.898229][T11429] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  450.914707][T11429] CPU: 1 PID: 11429 Comm: syz.3.1904 Not tainted syzkaller #0
[  450.922352][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  450.932543][T11429] Call Trace:
[  450.935877][T11429]  <TASK>
[  450.938864][T11429]  dump_stack_lvl+0x18c/0x250
[  450.943621][T11429]  ? show_regs_print_info+0x20/0x20
[  450.948893][T11429]  ? load_image+0x420/0x420
[  450.953475][T11429]  ? __might_fault+0xaa/0x120
[  450.958222][T11429]  ? __lock_acquire+0x7d80/0x7d80
[  450.963318][T11429]  should_fail_ex+0x394/0x4c0
[  450.968074][T11429]  _copy_from_iter+0x1cd/0x1290
[  450.972995][T11429]  ? copyout_mc+0x70/0x70
[  450.977390][T11429]  ? __virt_addr_valid+0x10c/0x380
[  450.982612][T11429]  ? __virt_addr_valid+0x10c/0x380
[  450.987948][T11429]  ? __virt_addr_valid+0x10c/0x380
[  450.993106][T11429]  ? __check_object_size+0x4fc/0xa40
[  450.998426][T11429]  sctp_user_addto_chunk+0x84/0x220
[  451.003664][T11429]  sctp_datamsg_from_user+0x74d/0xee0
[  451.009107][T11429]  sctp_sendmsg_to_asoc+0xfdd/0x17f0
[  451.014688][T11429]  ? sctp_assoc_add_peer+0xcc4/0x1350
[  451.020197][T11429]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  451.026045][T11429]  ? __sctp_connect+0xd80/0xd80
[  451.030936][T11429]  ? __local_bh_enable_ip+0x13a/0x1c0
[  451.036432][T11429]  ? _local_bh_enable+0xa0/0xa0
[  451.041417][T11429]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  451.047283][T11429]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  451.053146][T11429]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  451.058738][T11429]  ? security_sctp_bind_connect+0x89/0xb0
[  451.064493][T11429]  sctp_sendmsg+0x1afa/0x27b0
[  451.069214][T11429]  ? sctp_getsockopt+0xb60/0xb60
[  451.074190][T11429]  ? aa_af_perm+0x330/0x330
[  451.078733][T11429]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  451.085190][T11429]  ? sock_rps_record_flow+0x19/0x3f0
[  451.090531][T11429]  ? inet_sendmsg+0x7e/0x2a0
[  451.095171][T11429]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  451.100496][T11429]  ? inet_send_prepare+0x250/0x250
[  451.105644][T11429]  ____sys_sendmsg+0x61b/0x980
[  451.110545][T11429]  ? __asan_memset+0x22/0x40
[  451.115187][T11429]  ? __sys_sendmsg_sock+0x30/0x30
[  451.120247][T11429]  ? __import_iovec+0x5f2/0x850
[  451.125395][T11429]  ? import_iovec+0x73/0xa0
[  451.129949][T11429]  ___sys_sendmsg+0x2a6/0x360
[  451.134668][T11429]  ? get_pid_task+0x20/0x1e0
[  451.139468][T11429]  ? __sys_sendmsg+0x2b0/0x2b0
[  451.144378][T11429]  ? __lock_acquire+0x7d80/0x7d80
[  451.149455][T11429]  __se_sys_sendmsg+0x1d0/0x2c0
[  451.154430][T11429]  ? __x64_sys_sendmsg+0x80/0x80
[  451.159443][T11429]  ? lockdep_hardirqs_on+0x98/0x150
[  451.164711][T11429]  do_syscall_64+0x55/0xb0
[  451.169349][T11429]  ? clear_bhb_loop+0x40/0x90
[  451.174059][T11429]  ? clear_bhb_loop+0x40/0x90
[  451.178763][T11429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  451.184789][T11429] RIP: 0033:0x7fe18739de59
[  451.189325][T11429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.209579][T11429] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.218203][T11429] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  451.226212][T11429] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003
[  451.234388][T11429] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  451.242479][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  451.250474][T11429] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  451.258653][T11429]  </TASK>
[  451.673786][T11441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1907'.
[  451.712322][T11441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1907'.
[  451.761310][T11436] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1907'.
[  451.781338][T11439] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1909'.
[  451.799307][T11440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1907'.
[  452.153101][T11434] delete_channel: no stack
[  452.762432][T11456] FAULT_INJECTION: forcing a failure.
[  452.762432][T11456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.800068][T11456] CPU: 1 PID: 11456 Comm: syz.1.1916 Not tainted syzkaller #0
[  452.807620][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  452.817745][T11456] Call Trace:
[  452.821092][T11456]  <TASK>
[  452.824070][T11456]  dump_stack_lvl+0x18c/0x250
[  452.828915][T11456]  ? show_regs_print_info+0x20/0x20
[  452.834173][T11456]  ? load_image+0x420/0x420
[  452.838736][T11456]  ? __might_fault+0xaa/0x120
[  452.843470][T11456]  ? __lock_acquire+0x7d80/0x7d80
[  452.848554][T11456]  ? __virt_addr_valid+0x10c/0x380
[  452.853753][T11456]  should_fail_ex+0x394/0x4c0
[  452.858500][T11456]  _copy_to_user+0x2f/0xa0
[  452.863068][T11456]  __htab_map_lookup_and_delete_batch+0x1061/0x1400
[  452.869799][T11456]  ? __fget_files+0x28/0x460
[  452.874544][T11456]  ? jhash+0x740/0x740
[  452.879118][T11456]  ? __fdget+0x180/0x210
[  452.883423][T11456]  ? htab_lru_map_lookup_and_delete_elem+0x40/0x40
[  452.889987][T11456]  bpf_map_do_batch+0x48c/0x600
[  452.894888][T11456]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  452.901289][T11456]  __sys_bpf+0x78c/0x890
[  452.905588][T11456]  ? bpf_link_show_fdinfo+0x390/0x390
[  452.911035][T11456]  ? lock_chain_count+0x20/0x20
[  452.916222][T11456]  __x64_sys_bpf+0x7c/0x90
[  452.920783][T11456]  do_syscall_64+0x55/0xb0
[  452.925276][T11456]  ? clear_bhb_loop+0x40/0x90
[  452.930013][T11456]  ? clear_bhb_loop+0x40/0x90
[  452.934745][T11456]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  452.940711][T11456] RIP: 0033:0x7fc45b99de59
[  452.945185][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  452.965035][T11456] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  452.973518][T11456] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  452.981664][T11456] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 0000000000000019
[  452.989775][T11456] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  452.997793][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  453.005903][T11456] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  453.013951][T11456]  </TASK>
[  453.469414][T11474] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  453.475938][T11474] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  453.668444][T11471] delete_channel: no stack
[  453.770655][T11483] netlink: 'syz.3.1925': attribute type 21 has an invalid length.
[  453.779183][T11483] netlink: 'syz.3.1925': attribute type 1 has an invalid length.
[  454.379280][T11492] delete_channel: no stack
[  454.956628][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'.
[  455.649282][T11512] delete_channel: no stack
[  456.984613][T11531] netlink: 'syz.1.1942': attribute type 10 has an invalid length.
[  457.045169][T11531] team0: Device hsr_slave_0 failed to register rx_handler
[  457.203240][T11535] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1944'.
[  457.649829][T11536] delete_channel: no stack
[  458.701864][T11560] netlink: 'syz.1.1953': attribute type 2 has an invalid length.
[  459.413959][T11566] delete_channel: no stack
[  459.795478][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1958'.
[  459.831858][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  459.842876][T11575] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1958'.
[  459.853634][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  459.878193][T11575] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1958'.
[  461.120710][T11595] delete_channel: no stack
[  461.332738][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'.
[  461.345692][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'.
[  461.355729][T11604] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1970'.
[  461.369914][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'.
[  464.701033][T11649] delete_channel: no stack
[  466.807584][T11670] netlink: 'syz.0.1992': attribute type 3 has an invalid length.
[  466.834442][T11670] __nla_validate_parse: 1 callbacks suppressed
[  466.834466][T11670] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1992'.
[  466.879836][ T5788] Bluetooth: hci3: unexpected event for opcode 0x0006
[  470.350507][T11682] delete_channel: no stack
[  470.930748][ T5788] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  470.940536][ T5788] Bluetooth: hci3: Injecting HCI hardware error event
[  470.950080][ T5784] Bluetooth: hci3: hardware error 0x00
[  473.008934][ T5784] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  474.239043][T11723] delete_channel: no stack
[  474.994058][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'.
[  475.033926][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'.
[  475.050285][T11746] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2019'.
[  475.068110][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'.
[  475.086295][T11746] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2019'.
[  475.469898][T11749] delete_channel: no stack
[  476.605525][T11771] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  477.285545][T11787] FAULT_INJECTION: forcing a failure.
[  477.285545][T11787] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.330961][T11787] CPU: 0 PID: 11787 Comm: syz.3.2034 Not tainted syzkaller #0
[  477.339072][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.349297][T11787] Call Trace:
[  477.352712][T11787]  <TASK>
[  477.355734][T11787]  dump_stack_lvl+0x18c/0x250
[  477.361215][T11787]  ? show_regs_print_info+0x20/0x20
[  477.366632][T11787]  ? load_image+0x420/0x420
[  477.371344][T11787]  ? __lock_acquire+0x7d80/0x7d80
[  477.376452][T11787]  ? snprintf+0xe9/0x140
[  477.380776][T11787]  should_fail_ex+0x394/0x4c0
[  477.385547][T11787]  _copy_to_user+0x2f/0xa0
[  477.390040][T11787]  simple_read_from_buffer+0xe7/0x150
[  477.395507][T11787]  proc_fail_nth_read+0x1e8/0x260
[  477.400606][T11787]  ? proc_fault_inject_write+0x360/0x360
[  477.406344][T11787]  ? fsnotify_perm+0x271/0x5e0
[  477.411160][T11787]  ? proc_fault_inject_write+0x360/0x360
[  477.416845][T11787]  vfs_read+0x298/0x990
[  477.421058][T11787]  ? kernel_read+0x1e0/0x1e0
[  477.425967][T11787]  ? __fget_files+0x28/0x460
[  477.430665][T11787]  ? __fget_files+0x3fc/0x460
[  477.435494][T11787]  ? __fdget_pos+0x2a3/0x330
[  477.440140][T11787]  ? ksys_read+0x74/0x260
[  477.444524][T11787]  ksys_read+0x151/0x260
[  477.448907][T11787]  ? vfs_write+0x9a0/0x9a0
[  477.453463][T11787]  ? lockdep_hardirqs_on+0x98/0x150
[  477.458719][T11787]  do_syscall_64+0x55/0xb0
[  477.463185][T11787]  ? clear_bhb_loop+0x40/0x90
[  477.468083][T11787]  ? clear_bhb_loop+0x40/0x90
[  477.472900][T11787]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  477.478933][T11787] RIP: 0033:0x7fe18735e68e
[  477.483565][T11787] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  477.503400][T11787] RSP: 002b:00007fe1882affe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  477.512039][T11787] RAX: ffffffffffffffda RBX: 00007fe1882b06c0 RCX: 00007fe18735e68e
[  477.520341][T11787] RDX: 000000000000000f RSI: 00007fe1882b00a0 RDI: 0000000000000005
[  477.528453][T11787] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  477.536463][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  477.544566][T11787] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  477.552806][T11787]  </TASK>
[  480.822828][T11841] FAULT_INJECTION: forcing a failure.
[  480.822828][T11841] name failslab, interval 1, probability 0, space 0, times 0
[  480.841582][T11841] CPU: 1 PID: 11841 Comm: syz.1.2052 Not tainted syzkaller #0
[  480.849236][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  480.859429][T11841] Call Trace:
[  480.863042][T11841]  <TASK>
[  480.866033][T11841]  dump_stack_lvl+0x18c/0x250
[  480.870817][T11841]  ? sctp_sendmsg+0x1519/0x27b0
[  480.875771][T11841]  ? ___sys_sendmsg+0x2a6/0x360
[  480.880782][T11841]  ? show_regs_print_info+0x20/0x20
[  480.886086][T11841]  ? load_image+0x420/0x420
[  480.890681][T11841]  should_fail_ex+0x394/0x4c0
[  480.895428][T11841]  should_failslab+0x9/0x20
[  480.900170][T11841]  slab_pre_alloc_hook+0x59/0x300
[  480.905410][T11841]  ? sctp_add_bind_addr+0x8c/0x360
[  480.910606][T11841]  __kmem_cache_alloc_node+0x53/0x250
[  480.916074][T11841]  ? sctp_add_bind_addr+0x8c/0x360
[  480.921265][T11841]  kmalloc_trace+0x2a/0xe0
[  480.925769][T11841]  sctp_add_bind_addr+0x8c/0x360
[  480.930795][T11841]  sctp_copy_local_addr_list+0x31b/0x4e0
[  480.936519][T11841]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  480.942325][T11841]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  480.948745][T11841]  ? sctp_v4_is_any+0x35/0x60
[  480.953503][T11841]  ? sctp_copy_one_addr+0x8c/0x350
[  480.958709][T11841]  sctp_bind_addr_copy+0xb3/0x3c0
[  480.963813][T11841]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  480.970328][T11841]  sctp_connect_new_asoc+0x2f9/0x6a0
[  480.975699][T11841]  ? __sctp_connect+0xd80/0xd80
[  480.980886][T11841]  ? __local_bh_enable_ip+0x13a/0x1c0
[  480.986466][T11841]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  480.992179][T11841]  ? security_sctp_bind_connect+0x89/0xb0
[  480.998089][T11841]  sctp_sendmsg+0x1519/0x27b0
[  481.003044][T11841]  ? sctp_getsockopt+0xb60/0xb60
[  481.008050][T11841]  ? aa_af_perm+0x330/0x330
[  481.012671][T11841]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  481.019164][T11841]  ? sock_rps_record_flow+0x19/0x3f0
[  481.024529][T11841]  ? inet_sendmsg+0xce/0x2a0
[  481.029185][T11841]  ? inet_send_prepare+0x250/0x250
[  481.034373][T11841]  ____sys_sendmsg+0x61b/0x980
[  481.039405][T11841]  ? __asan_memset+0x22/0x40
[  481.044326][T11841]  ? __sys_sendmsg_sock+0x30/0x30
[  481.049587][T11841]  ? __import_iovec+0x5f2/0x850
[  481.054697][T11841]  ? import_iovec+0x73/0xa0
[  481.059273][T11841]  ___sys_sendmsg+0x2a6/0x360
[  481.064217][T11841]  ? __sys_sendmsg+0x2b0/0x2b0
[  481.069176][T11841]  ? __lock_acquire+0x7d80/0x7d80
[  481.074567][T11841]  __se_sys_sendmsg+0x1d0/0x2c0
[  481.079501][T11841]  ? __x64_sys_sendmsg+0x80/0x80
[  481.084528][T11841]  ? lockdep_hardirqs_on+0x98/0x150
[  481.089922][T11841]  do_syscall_64+0x55/0xb0
[  481.094760][T11841]  ? clear_bhb_loop+0x40/0x90
[  481.101422][T11841]  ? clear_bhb_loop+0x40/0x90
[  481.106214][T11841]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  481.112472][T11841] RIP: 0033:0x7fc45b99de59
[  481.116966][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.137239][T11841] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  481.145829][T11841] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  481.153962][T11841] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  481.162085][T11841] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  481.170316][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.178448][T11841] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  481.186763][T11841]  </TASK>
[  481.865537][T11861] netlink: 'syz.0.2060': attribute type 10 has an invalid length.
[  482.154835][T11865] netlink: 'syz.0.2062': attribute type 10 has an invalid length.
[  482.212542][T11865] syz_tun: entered promiscuous mode
[  482.228802][T11865] syz_tun: entered allmulticast mode
[  482.423911][T11865] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  482.443403][T11868] netlink: 'syz.3.2064': attribute type 10 has an invalid length.
[  482.453044][T11868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2064'.
[  482.649927][T11877] FAULT_INJECTION: forcing a failure.
[  482.649927][T11877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  482.699315][T11877] CPU: 1 PID: 11877 Comm: syz.0.2066 Not tainted syzkaller #0
[  482.707078][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  482.717280][T11877] Call Trace:
[  482.720622][T11877]  <TASK>
[  482.723701][T11877]  dump_stack_lvl+0x18c/0x250
[  482.728463][T11877]  ? show_regs_print_info+0x20/0x20
[  482.733869][T11877]  ? load_image+0x420/0x420
[  482.738523][T11877]  ? __might_fault+0xaa/0x120
[  482.743360][T11877]  ? __lock_acquire+0x7d80/0x7d80
[  482.748441][T11877]  ? __virt_addr_valid+0x10c/0x380
[  482.753618][T11877]  should_fail_ex+0x394/0x4c0
[  482.758459][T11877]  _copy_from_user+0x2f/0xe0
[  482.763176][T11877]  sctp_setsockopt+0x19e/0x11e0
[  482.768450][T11877]  ? sock_common_recvmsg+0x190/0x190
[  482.773996][T11877]  do_sock_setsockopt+0x175/0x1a0
[  482.779106][T11877]  ? __fdget+0x180/0x210
[  482.783430][T11877]  __x64_sys_setsockopt+0x182/0x200
[  482.788844][T11877]  do_syscall_64+0x55/0xb0
[  482.793449][T11877]  ? clear_bhb_loop+0x40/0x90
[  482.798286][T11877]  ? clear_bhb_loop+0x40/0x90
[  482.803116][T11877]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.809084][T11877] RIP: 0033:0x7fe7cd39de59
[  482.813560][T11877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.833600][T11877] RSP: 002b:00007fe7ce25a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  482.842177][T11877] RAX: ffffffffffffffda RBX: 00007fe7cd625fa0 RCX: 00007fe7cd39de59
[  482.850244][T11877] RDX: 0000000000000007 RSI: 0000000000000084 RDI: 0000000000000003
[  482.858421][T11877] RBP: 00007fe7ce25a090 R08: 0000000000000004 R09: 0000000000000000
[  482.866459][T11877] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001
[  482.874579][T11877] R13: 00007fe7cd626038 R14: 00007fe7cd625fa0 R15: 00007ffc823fb838
[  482.882909][T11877]  </TASK>
[  485.619132][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  487.182096][T11925] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2078'.
[  488.779189][T11942] netlink: 'syz.2.2084': attribute type 29 has an invalid length.
[  488.792965][T11942] netlink: 'syz.2.2084': attribute type 29 has an invalid length.
[  488.818647][T11941] netlink: 'syz.2.2084': attribute type 29 has an invalid length.
[  489.504521][T11952] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  489.886935][T11955] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  490.070606][T11960] netlink: 'syz.0.2089': attribute type 29 has an invalid length.
[  490.079361][T11960] netlink: 'syz.0.2089': attribute type 3 has an invalid length.
[  490.087202][T11960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2089'.
[  492.174448][T11985] delete_channel: no stack
[  492.481950][T11999] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  496.404841][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2123'.
[  496.521943][T12058] netlink: 'syz.1.2124': attribute type 10 has an invalid length.
[  499.195354][T12113] netlink: 'syz.3.2144': attribute type 3 has an invalid length.
[  499.206509][T12113] netlink: 'syz.3.2144': attribute type 1 has an invalid length.
[  499.218178][T12113] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.2144'.
[  501.045250][T12159] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2161'.
[  501.988949][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.995567][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  503.303413][T12194] FAULT_INJECTION: forcing a failure.
[  503.303413][T12194] name failslab, interval 1, probability 0, space 0, times 0
[  503.339003][T12194] CPU: 0 PID: 12194 Comm: syz.1.2172 Not tainted syzkaller #0
[  503.346602][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  503.356787][T12194] Call Trace:
[  503.360121][T12194]  <TASK>
[  503.363178][T12194]  dump_stack_lvl+0x18c/0x250
[  503.367937][T12194]  ? show_regs_print_info+0x20/0x20
[  503.373525][T12194]  ? load_image+0x420/0x420
[  503.378180][T12194]  ? __might_sleep+0xe0/0xe0
[  503.383070][T12194]  ? __lock_acquire+0x7d80/0x7d80
[  503.388153][T12194]  should_fail_ex+0x394/0x4c0
[  503.392959][T12194]  should_failslab+0x9/0x20
[  503.397589][T12194]  slab_pre_alloc_hook+0x59/0x300
[  503.403036][T12194]  ? apparmor_sk_alloc_security+0x77/0x100
[  503.408904][T12194]  __kmem_cache_alloc_node+0x53/0x250
[  503.414440][T12194]  ? apparmor_sk_alloc_security+0x77/0x100
[  503.420316][T12194]  kmalloc_trace+0x2a/0xe0
[  503.424805][T12194]  apparmor_sk_alloc_security+0x77/0x100
[  503.430765][T12194]  security_sk_alloc+0x6e/0xa0
[  503.435941][T12194]  sk_prot_alloc+0x101/0x210
[  503.440596][T12194]  ? sk_alloc+0x24/0x350
[  503.445015][T12194]  sk_alloc+0x3a/0x350
[  503.449132][T12194]  ? bpf_ctx_init+0x154/0x190
[  503.453871][T12194]  bpf_prog_test_run_skb+0x371/0x18f0
[  503.459300][T12194]  ? __fget_files+0x28/0x460
[  503.463934][T12194]  ? __fget_files+0x3fc/0x460
[  503.468838][T12194]  ? cpu_online+0x60/0x60
[  503.473236][T12194]  bpf_prog_test_run+0x31f/0x390
[  503.478315][T12194]  __sys_bpf+0x49d/0x890
[  503.483572][T12194]  ? bpf_link_show_fdinfo+0x390/0x390
[  503.489005][T12194]  ? lock_chain_count+0x20/0x20
[  503.494237][T12194]  __x64_sys_bpf+0x7c/0x90
[  503.498733][T12194]  do_syscall_64+0x55/0xb0
[  503.503254][T12194]  ? clear_bhb_loop+0x40/0x90
[  503.507973][T12194]  ? clear_bhb_loop+0x40/0x90
[  503.512699][T12194]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  503.518777][T12194] RIP: 0033:0x7fc45b99de59
[  503.523415][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  503.543334][T12194] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  503.552076][T12194] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  503.560093][T12194] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a
[  503.568181][T12194] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  503.576264][T12194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.584444][T12194] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  503.592750][T12194]  </TASK>
[  506.167889][T12258] netlink: 'syz.0.2196': attribute type 5 has an invalid length.
[  506.182800][T12258] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2196'.
[  506.441366][T12265] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  506.474286][T12265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.503589][T12265] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.598824][T12265] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.698927][T12265] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  506.808037][T12273] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  507.653868][ T8261] tipc: Subscription rejected, illegal request
[  507.711088][T12287] netlink: 'syz.1.2206': attribute type 21 has an invalid length.
[  507.738775][T12287] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2206'.
[  507.860447][T12295] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2208'.
[  507.889536][T12295] bridge_slave_1: entered promiscuous mode
[  507.912907][T12298] netlink: 'syz.2.2208': attribute type 10 has an invalid length.
[  507.949725][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2208'.
[  508.638085][T12315] netlink: 'syz.2.2215': attribute type 10 has an invalid length.
[  508.647913][T12315] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.2215'.
[  509.783348][T12339] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2224'.
[  510.725900][T12357] FAULT_INJECTION: forcing a failure.
[  510.725900][T12357] name failslab, interval 1, probability 0, space 0, times 0
[  510.762916][T12357] CPU: 0 PID: 12357 Comm: syz.1.2230 Not tainted syzkaller #0
[  510.770496][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  510.780704][T12357] Call Trace:
[  510.784043][T12357]  <TASK>
[  510.787024][T12357]  dump_stack_lvl+0x18c/0x250
[  510.791801][T12357]  ? show_regs_print_info+0x20/0x20
[  510.797091][T12357]  ? load_image+0x420/0x420
[  510.801873][T12357]  should_fail_ex+0x394/0x4c0
[  510.806736][T12357]  should_failslab+0x9/0x20
[  510.811503][T12357]  slab_pre_alloc_hook+0x59/0x300
[  510.816630][T12357]  kmem_cache_alloc+0x5a/0x2c0
[  510.821481][T12357]  ? skb_clone+0x1eb/0x370
[  510.825999][T12357]  skb_clone+0x1eb/0x370
[  510.830324][T12357]  __netlink_deliver_tap+0x411/0x7f0
[  510.835717][T12357]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.841185][T12357]  netlink_deliver_tap+0x19c/0x1b0
[  510.846565][T12357]  __netlink_sendskb+0x4b/0x90
[  510.851430][T12357]  netlink_dump+0xab3/0xec0
[  510.856043][T12357]  ? netlink_lookup+0x200/0x200
[  510.861007][T12357]  ? __kasan_kmalloc+0x8f/0xa0
[  510.865891][T12357]  ? __inet_diag_dump_start+0x886/0x9f0
[  510.871864][T12357]  ? netlink_lookup+0x30/0x200
[  510.876711][T12357]  __netlink_dump_start+0x57c/0x7a0
[  510.882035][T12357]  inet_diag_handler_cmd+0x1e0/0x2c0
[  510.887401][T12357]  ? sock_diag_lock_handler+0x19/0x280
[  510.893200][T12357]  ? inet_diag_unregister+0xb0/0xb0
[  510.898477][T12357]  ? inet_diag_handler_get_info+0x790/0x790
[  510.904444][T12357]  ? inet_diag_dump_start+0x20/0x20
[  510.909722][T12357]  ? inet_diag_dump+0x50/0x50
[  510.914482][T12357]  ? sock_diag_lock_handler+0x19/0x280
[  510.920045][T12357]  ? inet_diag_unregister+0xb0/0xb0
[  510.925327][T12357]  sock_diag_rcv_msg+0x3d3/0x5f0
[  510.930429][T12357]  netlink_rcv_skb+0x235/0x4c0
[  510.935277][T12357]  ? sock_diag_bind+0xb0/0xb0
[  510.940024][T12357]  ? netlink_ack+0x1160/0x1160
[  510.944884][T12357]  ? __lock_acquire+0x7d80/0x7d80
[  510.950155][T12357]  ? netlink_deliver_tap+0x2e/0x1b0
[  510.955442][T12357]  sock_diag_rcv+0x2a/0x40
[  510.959926][T12357]  netlink_unicast+0x7b1/0x930
[  510.964776][T12357]  netlink_sendmsg+0x8d0/0xbf0
[  510.969618][T12357]  ? netlink_getsockopt+0x590/0x590
[  510.974886][T12357]  ? apparmor_socket_sendmsg+0x8e/0x330
[  510.980510][T12357]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  510.986219][T12357]  ? security_socket_sendmsg+0x80/0xa0
[  510.991749][T12357]  ? netlink_getsockopt+0x590/0x590
[  510.997036][T12357]  ____sys_sendmsg+0x61b/0x980
[  511.001933][T12357]  ? __asan_memset+0x22/0x40
[  511.006939][T12357]  ? __sys_sendmsg_sock+0x30/0x30
[  511.012120][T12357]  ? __import_iovec+0x5f2/0x850
[  511.017062][T12357]  ? import_iovec+0x73/0xa0
[  511.021903][T12357]  ___sys_sendmsg+0x2a6/0x360
[  511.026740][T12357]  ? get_pid_task+0x20/0x1e0
[  511.031404][T12357]  ? __sys_sendmsg+0x2b0/0x2b0
[  511.036276][T12357]  ? __lock_acquire+0x7d80/0x7d80
[  511.041398][T12357]  __se_sys_sendmsg+0x1d0/0x2c0
[  511.046329][T12357]  ? __x64_sys_sendmsg+0x80/0x80
[  511.051357][T12357]  ? lockdep_hardirqs_on+0x98/0x150
[  511.056968][T12357]  do_syscall_64+0x55/0xb0
[  511.061495][T12357]  ? clear_bhb_loop+0x40/0x90
[  511.066237][T12357]  ? clear_bhb_loop+0x40/0x90
[  511.071072][T12357]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  511.077130][T12357] RIP: 0033:0x7fc45b99de59
[  511.081593][T12357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  511.101542][T12357] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  511.110093][T12357] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  511.118113][T12357] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  511.126315][T12357] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  511.134514][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.143159][T12357] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  511.151195][T12357]  </TASK>
[  511.606137][T12373] netlink: 'syz.0.2237': attribute type 1 has an invalid length.
[  511.618807][T12373] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2237'.
[  511.725748][T12378] netlink: 'syz.0.2237': attribute type 1 has an invalid length.
[  511.813288][T12378] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2237'.
[  511.897068][T12381] FAULT_INJECTION: forcing a failure.
[  511.897068][T12381] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  511.952775][T12381] CPU: 0 PID: 12381 Comm: syz.3.2238 Not tainted syzkaller #0
[  511.960383][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  511.970531][T12381] Call Trace:
[  511.973858][T12381]  <TASK>
[  511.977049][T12381]  dump_stack_lvl+0x18c/0x250
[  511.982091][T12381]  ? show_regs_print_info+0x20/0x20
[  511.987365][T12381]  ? load_image+0x420/0x420
[  511.991950][T12381]  ? __might_fault+0xaa/0x120
[  511.996842][T12381]  ? __lock_acquire+0x7d80/0x7d80
[  512.002202][T12381]  ? __virt_addr_valid+0x10c/0x380
[  512.007446][T12381]  should_fail_ex+0x394/0x4c0
[  512.012241][T12381]  _copy_from_user+0x2f/0xe0
[  512.016907][T12381]  generic_map_update_batch+0x53e/0x800
[  512.022533][T12381]  ? rcu_read_unlock+0xa0/0xa0
[  512.027477][T12381]  ? __fdget+0x180/0x210
[  512.032051][T12381]  ? rcu_read_unlock+0xa0/0xa0
[  512.036882][T12381]  bpf_map_do_batch+0x3f2/0x600
[  512.041887][T12381]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  512.048286][T12381]  __sys_bpf+0x381/0x890
[  512.052597][T12381]  ? bpf_link_show_fdinfo+0x390/0x390
[  512.058137][T12381]  ? lock_chain_count+0x20/0x20
[  512.063406][T12381]  __x64_sys_bpf+0x7c/0x90
[  512.067922][T12381]  do_syscall_64+0x55/0xb0
[  512.072416][T12381]  ? clear_bhb_loop+0x40/0x90
[  512.077201][T12381]  ? clear_bhb_loop+0x40/0x90
[  512.082471][T12381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.088649][T12381] RIP: 0033:0x7fe18739de59
[  512.093122][T12381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.112920][T12381] RSP: 002b:00007fe18828f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.121487][T12381] RAX: ffffffffffffffda RBX: 00007fe187626090 RCX: 00007fe18739de59
[  512.129605][T12381] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a
[  512.137929][T12381] RBP: 00007fe18828f090 R08: 0000000000000000 R09: 0000000000000000
[  512.145977][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  512.154401][T12381] R13: 00007fe187626128 R14: 00007fe187626090 R15: 00007ffd5a87f3b8
[  512.162456][T12381]  </TASK>
[  512.228787][T12386] netlink: 'syz.1.2240': attribute type 10 has an invalid length.
[  512.816740][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2244'.
[  512.858902][T12402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2244'.
[  512.879624][T12399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2244'.
[  513.248419][T12410] Q�6�`Ҙ: renamed from lo (while UP)
[  513.300961][T12410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2249'.
[  513.517189][T12416] netlink: 'syz.2.2251': attribute type 21 has an invalid length.
[  513.528421][T12416] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2251'.
[  513.619065][T12416] netlink: 'syz.2.2251': attribute type 21 has an invalid length.
[  513.661592][T12424] netlink: 'syz.3.2253': attribute type 10 has an invalid length.
[  513.696682][T12425] netlink: 'syz.0.2252': attribute type 3 has an invalid length.
[  513.747007][T12425] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2252'.
[  514.228852][T12438] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2256'.
[  515.327152][T12463] netlink: 'syz.0.2267': attribute type 1 has an invalid length.
[  515.362806][T12463] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2267'.
[  515.387594][T12466] netlink: 'syz.1.2268': attribute type 12 has an invalid length.
[  515.617682][T12472] netlink: 'syz.2.2270': attribute type 10 has an invalid length.
[  515.719822][T12475] bond0: (slave team0): Releasing backup interface
[  518.760679][T12475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  519.908175][T12510] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  519.914749][T12510] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  520.073428][T12519] FAULT_INJECTION: forcing a failure.
[  520.073428][T12519] name failslab, interval 1, probability 0, space 0, times 0
[  520.124462][T12519] CPU: 0 PID: 12519 Comm: syz.2.2283 Not tainted syzkaller #0
[  520.132277][T12519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  520.142663][T12519] Call Trace:
[  520.145982][T12519]  <TASK>
[  520.148956][T12519]  dump_stack_lvl+0x18c/0x250
[  520.153714][T12519]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  520.159821][T12519]  ? show_regs_print_info+0x20/0x20
[  520.165113][T12519]  ? load_image+0x420/0x420
[  520.169702][T12519]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  520.176102][T12519]  should_fail_ex+0x394/0x4c0
[  520.180882][T12519]  should_failslab+0x9/0x20
[  520.185477][T12519]  slab_pre_alloc_hook+0x59/0x300
[  520.190695][T12519]  ? lockdep_hardirqs_on+0x98/0x150
[  520.196005][T12519]  kmem_cache_alloc+0x5a/0x2c0
[  520.200837][T12519]  ? skb_clone+0x1eb/0x370
[  520.205367][T12519]  skb_clone+0x1eb/0x370
[  520.209678][T12519]  __netlink_deliver_tap+0x411/0x7f0
[  520.215046][T12519]  ? netlink_deliver_tap+0x2e/0x1b0
[  520.220329][T12519]  netlink_deliver_tap+0x19c/0x1b0
[  520.225603][T12519]  netlink_unicast+0x77b/0x930
[  520.230622][T12519]  netlink_sendmsg+0x8d0/0xbf0
[  520.235468][T12519]  ? netlink_getsockopt+0x590/0x590
[  520.240735][T12519]  ? apparmor_socket_sendmsg+0x8e/0x330
[  520.246696][T12519]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  520.252132][T12519]  ? security_socket_sendmsg+0x80/0xa0
[  520.257677][T12519]  ? netlink_getsockopt+0x590/0x590
[  520.263036][T12519]  ____sys_sendmsg+0x61b/0x980
[  520.267990][T12519]  ? __asan_memset+0x22/0x40
[  520.272686][T12519]  ? __sys_sendmsg_sock+0x30/0x30
[  520.277781][T12519]  ? __import_iovec+0x5f2/0x850
[  520.282788][T12519]  ? import_iovec+0x73/0xa0
[  520.287347][T12519]  ___sys_sendmsg+0x2a6/0x360
[  520.292185][T12519]  ? __sys_sendmsg+0x2b0/0x2b0
[  520.297166][T12519]  __se_sys_sendmsg+0x1d0/0x2c0
[  520.302197][T12519]  ? __x64_sys_sendmsg+0x80/0x80
[  520.307243][T12519]  ? syscall_enter_from_user_mode+0x2e/0x80
[  520.313578][T12519]  do_syscall_64+0x55/0xb0
[  520.318165][T12519]  ? clear_bhb_loop+0x40/0x90
[  520.322988][T12519]  ? clear_bhb_loop+0x40/0x90
[  520.327728][T12519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.333699][T12519] RIP: 0033:0x7feb5ab9de59
[  520.338179][T12519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.358101][T12519] RSP: 002b:00007feb58df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  520.366577][T12519] RAX: ffffffffffffffda RBX: 00007feb5ae26090 RCX: 00007feb5ab9de59
[  520.374604][T12519] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 000000000000000a
[  520.382638][T12519] RBP: 00007feb58df6090 R08: 0000000000000000 R09: 0000000000000000
[  520.390751][T12519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.398784][T12519] R13: 00007feb5ae26128 R14: 00007feb5ae26090 R15: 00007ffed6d5f9f8
[  520.406858][T12519]  </TASK>
[  521.072459][T12535] validate_nla: 1 callbacks suppressed
[  521.072480][T12535] netlink: 'syz.1.2290': attribute type 10 has an invalid length.
[  521.146907][T12535] __nla_validate_parse: 2 callbacks suppressed
[  521.146925][T12535] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2290'.
[  521.277533][T12539] syzkaller0: entered promiscuous mode
[  521.289936][T12539] syzkaller0: entered allmulticast mode
[  523.708582][T12550] netlink: 'syz.2.2294': attribute type 33 has an invalid length.
[  523.716675][T12550] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2294'.
[  524.326313][T12576] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2304'.
[  524.402689][T12578] netlink: 'syz.3.2302': attribute type 2 has an invalid length.
[  524.430043][T12578] netlink: 'syz.3.2302': attribute type 1 has an invalid length.
[  524.439141][T12578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.470904][T12580] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2302'.
[  525.896783][T12612] netlink: 'syz.1.2315': attribute type 3 has an invalid length.
[  525.907549][T12612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2315'.
[  526.590134][T12631] FAULT_INJECTION: forcing a failure.
[  526.590134][T12631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  526.632879][T12631] CPU: 1 PID: 12631 Comm: syz.1.2323 Not tainted syzkaller #0
[  526.640570][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  526.650698][T12631] Call Trace:
[  526.654022][T12631]  <TASK>
[  526.657066][T12631]  dump_stack_lvl+0x18c/0x250
[  526.661793][T12631]  ? show_regs_print_info+0x20/0x20
[  526.667041][T12631]  ? load_image+0x420/0x420
[  526.672047][T12631]  ? __might_fault+0xaa/0x120
[  526.676781][T12631]  ? __lock_acquire+0x7d80/0x7d80
[  526.682049][T12631]  should_fail_ex+0x394/0x4c0
[  526.686876][T12631]  _copy_from_iter+0x1cd/0x1290
[  526.691777][T12631]  ? rep_movs_alternative+0x4a/0x90
[  526.697017][T12631]  ? copyout_mc+0x70/0x70
[  526.701395][T12631]  ? copyout_mc+0x70/0x70
[  526.705836][T12631]  ? __virt_addr_valid+0x10c/0x380
[  526.711297][T12631]  ? page_copy_sane+0x16a/0x270
[  526.716220][T12631]  copy_page_from_iter+0x7b/0x100
[  526.721300][T12631]  skb_copy_datagram_from_iter+0x2ea/0x6f0
[  526.727163][T12631]  unix_stream_sendmsg+0x562/0xbf0
[  526.732508][T12631]  ? unix_show_fdinfo+0x280/0x280
[  526.737585][T12631]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  526.744072][T12631]  ? apparmor_socket_sendmsg+0x8e/0x330
[  526.749666][T12631]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  526.755190][T12631]  ? security_socket_sendmsg+0x80/0xa0
[  526.760708][T12631]  ? unix_show_fdinfo+0x280/0x280
[  526.765870][T12631]  ____sys_sendmsg+0x61b/0x980
[  526.770687][T12631]  ? __asan_memset+0x22/0x40
[  526.775319][T12631]  ? __sys_sendmsg_sock+0x30/0x30
[  526.780379][T12631]  ? __import_iovec+0x5f2/0x850
[  526.785279][T12631]  ? import_iovec+0x73/0xa0
[  526.789848][T12631]  ___sys_sendmsg+0x2a6/0x360
[  526.794594][T12631]  ? get_pid_task+0x20/0x1e0
[  526.799339][T12631]  ? __sys_sendmsg+0x2b0/0x2b0
[  526.804174][T12631]  ? __lock_acquire+0x7d80/0x7d80
[  526.809301][T12631]  __se_sys_sendmsg+0x1d0/0x2c0
[  526.814382][T12631]  ? __x64_sys_sendmsg+0x80/0x80
[  526.819649][T12631]  ? lockdep_hardirqs_on+0x98/0x150
[  526.824903][T12631]  do_syscall_64+0x55/0xb0
[  526.829376][T12631]  ? clear_bhb_loop+0x40/0x90
[  526.834095][T12631]  ? clear_bhb_loop+0x40/0x90
[  526.838827][T12631]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  526.844774][T12631] RIP: 0033:0x7fc45b99de59
[  526.849227][T12631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.869145][T12631] RSP: 002b:00007fc45c8ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.877776][T12631] RAX: ffffffffffffffda RBX: 00007fc45bc25fa0 RCX: 00007fc45b99de59
[  526.886227][T12631] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000004
[  526.894324][T12631] RBP: 00007fc45c8ac090 R08: 0000000000000000 R09: 0000000000000000
[  526.902429][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  526.910441][T12631] R13: 00007fc45bc26038 R14: 00007fc45bc25fa0 R15: 00007ffe7e269b28
[  526.918493][T12631]  </TASK>
[  527.728777][T12651] netlink: 'syz.1.2329': attribute type 39 has an invalid length.
[  527.739006][ T5784] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10
[  527.943287][T12653] netlink: 'syz.2.2330': attribute type 33 has an invalid length.
[  528.081178][T12653] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2330'.
[  528.297138][T12651] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2329'.
[  528.317190][T12651] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2329'.
[  528.340299][T12663] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2329'.
[  528.438796][T12665] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2329'.
[  529.808656][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  531.656576][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'.
[  531.667702][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'.
[  531.718135][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'.
[  531.740188][T12687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'.
[  531.862504][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'.
[  532.157313][T12701] can: request_module (can-proto-0) failed.
[  533.621409][T12734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  533.640380][T12734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  533.656434][T12734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  533.667201][T12734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  533.677272][T12734] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  533.693353][T12734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  534.070505][ T8261] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.254488][ T8261] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.432363][ T8261] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.622335][ T8261] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.667105][T12749] FAULT_INJECTION: forcing a failure.
[  534.667105][T12749] name failslab, interval 1, probability 0, space 0, times 0
[  534.680255][T12749] CPU: 1 PID: 12749 Comm: syz.3.2362 Not tainted syzkaller #0
[  534.687887][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  534.698318][T12749] Call Trace:
[  534.701642][T12749]  <TASK>
[  534.704693][T12749]  dump_stack_lvl+0x18c/0x250
[  534.709503][T12749]  ? sctp_sendmsg+0x1519/0x27b0
[  534.714419][T12749]  ? ___sys_sendmsg+0x2a6/0x360
[  534.719323][T12749]  ? show_regs_print_info+0x20/0x20
[  534.724928][T12749]  ? load_image+0x420/0x420
[  534.729582][T12749]  should_fail_ex+0x394/0x4c0
[  534.734302][T12749]  should_failslab+0x9/0x20
[  534.738856][T12749]  slab_pre_alloc_hook+0x59/0x300
[  534.743937][T12749]  ? sctp_add_bind_addr+0x8c/0x360
[  534.749091][T12749]  __kmem_cache_alloc_node+0x53/0x250
[  534.754531][T12749]  ? sctp_add_bind_addr+0x8c/0x360
[  534.760561][T12749]  kmalloc_trace+0x2a/0xe0
[  534.765077][T12749]  sctp_add_bind_addr+0x8c/0x360
[  534.770074][T12749]  sctp_copy_local_addr_list+0x31b/0x4e0
[  534.775921][T12749]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  534.781761][T12749]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  534.788064][T12749]  ? sctp_v4_is_any+0x35/0x60
[  534.792788][T12749]  ? sctp_copy_one_addr+0x8c/0x350
[  534.797943][T12749]  sctp_bind_addr_copy+0xb3/0x3c0
[  534.803310][T12749]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  534.809974][T12749]  sctp_connect_new_asoc+0x2f9/0x6a0
[  534.815495][T12749]  ? __sctp_connect+0xd80/0xd80
[  534.820377][T12749]  ? __local_bh_enable_ip+0x13a/0x1c0
[  534.825957][T12749]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  534.831540][T12749]  ? security_sctp_bind_connect+0x89/0xb0
[  534.837477][T12749]  sctp_sendmsg+0x1519/0x27b0
[  534.842294][T12749]  ? sctp_getsockopt+0xb60/0xb60
[  534.847275][T12749]  ? aa_af_perm+0x330/0x330
[  534.851995][T12749]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  534.858461][T12749]  ? sock_rps_record_flow+0x19/0x3f0
[  534.863853][T12749]  ? inet_sendmsg+0xce/0x2a0
[  534.868512][T12749]  ? inet_send_prepare+0x250/0x250
[  534.873661][T12749]  ____sys_sendmsg+0x61b/0x980
[  534.878657][T12749]  ? __asan_memset+0x22/0x40
[  534.883279][T12749]  ? __sys_sendmsg_sock+0x30/0x30
[  534.888349][T12749]  ? __import_iovec+0x5f2/0x850
[  534.893255][T12749]  ? import_iovec+0x73/0xa0
[  534.897888][T12749]  ___sys_sendmsg+0x2a6/0x360
[  534.902785][T12749]  ? get_pid_task+0x20/0x1e0
[  534.907609][T12749]  ? __sys_sendmsg+0x2b0/0x2b0
[  534.912428][T12749]  ? __lock_acquire+0x7d80/0x7d80
[  534.917623][T12749]  __se_sys_sendmsg+0x1d0/0x2c0
[  534.922622][T12749]  ? __x64_sys_sendmsg+0x80/0x80
[  534.927703][T12749]  ? lockdep_hardirqs_on+0x98/0x150
[  534.932975][T12749]  do_syscall_64+0x55/0xb0
[  534.937437][T12749]  ? clear_bhb_loop+0x40/0x90
[  534.942153][T12749]  ? clear_bhb_loop+0x40/0x90
[  534.946869][T12749]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  534.952890][T12749] RIP: 0033:0x7fe18739de59
[  534.957419][T12749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.977150][T12749] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.985801][T12749] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  534.993809][T12749] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003
[  535.001814][T12749] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  535.009910][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  535.017919][T12749] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  535.026125][T12749]  </TASK>
[  535.608448][T12733] chnl_net:caif_netlink_parms(): no params data found
[  535.728850][ T5784] Bluetooth: hci4: command tx timeout
[  535.852708][T12778] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  535.859700][T12778] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  536.063832][T12778] FAULT_INJECTION: forcing a failure.
[  536.063832][T12778] name failslab, interval 1, probability 0, space 0, times 0
[  536.158725][T12778] CPU: 0 PID: 12778 Comm: syz.0.2367 Not tainted syzkaller #0
[  536.166298][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  536.176593][T12778] Call Trace:
[  536.179931][T12778]  <TASK>
[  536.183085][T12778]  dump_stack_lvl+0x18c/0x250
[  536.187854][T12778]  ? show_regs_print_info+0x20/0x20
[  536.193167][T12778]  ? load_image+0x420/0x420
[  536.197761][T12778]  ? __lock_acquire+0x7d80/0x7d80
[  536.202877][T12778]  should_fail_ex+0x394/0x4c0
[  536.207717][T12778]  should_failslab+0x9/0x20
[  536.212383][T12778]  slab_pre_alloc_hook+0x59/0x300
[  536.217586][T12778]  ? perf_trace_preemptirq_template+0xac/0x330
[  536.223828][T12778]  kmem_cache_alloc_lru+0x4d/0x2b0
[  536.229363][T12778]  ? sock_alloc_inode+0x28/0xc0
[  536.234353][T12778]  sock_alloc_inode+0x28/0xc0
[  536.239076][T12778]  ? sockfs_init_fs_context+0xb0/0xb0
[  536.244489][T12778]  new_inode_pseudo+0x63/0x1d0
[  536.249310][T12778]  __sock_create+0x12d/0x940
[  536.254048][T12778]  ? lockdep_hardirqs_on+0x98/0x150
[  536.259372][T12778]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  536.265844][T12778]  __sys_socket+0xd7/0x1b0
[  536.270318][T12778]  __x64_sys_socket+0x7a/0x90
[  536.275175][T12778]  do_syscall_64+0x55/0xb0
[  536.279657][T12778]  ? clear_bhb_loop+0x40/0x90
[  536.284465][T12778]  ? clear_bhb_loop+0x40/0x90
[  536.289211][T12778]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.295232][T12778] RIP: 0033:0x7fe7cd39de59
[  536.299682][T12778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.319412][T12778] RSP: 002b:00007fe7ce25a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  536.327862][T12778] RAX: ffffffffffffffda RBX: 00007fe7cd625fa0 RCX: 00007fe7cd39de59
[  536.335865][T12778] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022
[  536.343876][T12778] RBP: 00007fe7ce25a090 R08: 0000000000000000 R09: 0000000000000000
[  536.352068][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.360106][T12778] R13: 00007fe7cd626038 R14: 00007fe7cd625fa0 R15: 00007ffc823fb838
[  536.368327][T12778]  </TASK>
[  536.645710][T12778] socket: no more sockets
[  536.905993][T12793] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  536.912671][T12793] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  536.929191][T12794] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  536.935757][T12794] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  537.128842][T12733] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.136127][T12733] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.238632][T12733] bridge_slave_0: entered allmulticast mode
[  537.246582][T12733] bridge_slave_0: entered promiscuous mode
[  537.284703][T12733] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.317994][T12733] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.343585][T12733] bridge_slave_1: entered allmulticast mode
[  537.385373][T12733] bridge_slave_1: entered promiscuous mode
[  537.552471][T12798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2370'.
[  537.820362][ T5784] Bluetooth: hci4: command tx timeout
[  537.911726][T12733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.950744][T12733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  538.188279][T12733] team0: Port device team_slave_0 added
[  538.203502][T12733] team0: Port device team_slave_1 added
[  538.713384][T12733] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.748740][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.837890][T12733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.876827][T12733] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.908561][T12733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  538.989568][T12733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.532141][T12733] hsr_slave_0: entered promiscuous mode
[  539.596459][T12733] hsr_slave_1: entered promiscuous mode
[  539.632863][T12733] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  539.673783][T12733] Cannot create hsr debugfs directory
[  539.683492][T12841] FAULT_INJECTION: forcing a failure.
[  539.683492][T12841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  539.729214][T12841] CPU: 1 PID: 12841 Comm: syz.3.2381 Not tainted syzkaller #0
[  539.736769][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  539.746877][T12841] Call Trace:
[  539.750399][T12841]  <TASK>
[  539.753395][T12841]  dump_stack_lvl+0x18c/0x250
[  539.758161][T12841]  ? show_regs_print_info+0x20/0x20
[  539.763522][T12841]  ? load_image+0x420/0x420
[  539.768194][T12841]  ? __might_fault+0xaa/0x120
[  539.772940][T12841]  ? __lock_acquire+0x7d80/0x7d80
[  539.778066][T12841]  ? __virt_addr_valid+0x10c/0x380
[  539.783256][T12841]  should_fail_ex+0x394/0x4c0
[  539.788011][T12841]  _copy_from_user+0x2f/0xe0
[  539.792671][T12841]  generic_map_update_batch+0x53e/0x800
[  539.798386][T12841]  ? rcu_read_unlock+0xa0/0xa0
[  539.803256][T12841]  ? __fdget+0x180/0x210
[  539.807608][T12841]  ? rcu_read_unlock+0xa0/0xa0
[  539.812438][T12841]  bpf_map_do_batch+0x3f2/0x600
[  539.817533][T12841]  ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10
[  539.824202][T12841]  __sys_bpf+0x381/0x890
[  539.828574][T12841]  ? bpf_link_show_fdinfo+0x390/0x390
[  539.834061][T12841]  ? lock_chain_count+0x20/0x20
[  539.839056][T12841]  __x64_sys_bpf+0x7c/0x90
[  539.843509][T12841]  do_syscall_64+0x55/0xb0
[  539.847959][T12841]  ? clear_bhb_loop+0x40/0x90
[  539.852671][T12841]  ? clear_bhb_loop+0x40/0x90
[  539.857381][T12841]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  539.863593][T12841] RIP: 0033:0x7fe18739de59
[  539.868211][T12841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.888249][T12841] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  539.896726][T12841] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  539.904759][T12841] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a
[  539.912791][T12841] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  539.920972][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.928969][T12841] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  539.937163][T12841]  </TASK>
[  539.957880][ T5784] Bluetooth: hci4: command tx timeout
[  540.792991][T12862] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2386'.
[  540.894400][ T8261] hsr_slave_0: left promiscuous mode
[  540.943754][ T8261] hsr_slave_1: left promiscuous mode
[  540.976936][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.999073][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.020824][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  541.037418][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.122751][ T8261] veth1_macvtap: left promiscuous mode
[  541.133474][ T8261] veth0_macvtap: left promiscuous mode
[  541.442159][ T8261] team0 (unregistering): Port device geneve1 removed
[  541.865739][ T8261] team0 (unregistering): Port device team_slave_1 removed
[  541.922527][ T8261] team0 (unregistering): Port device team_slave_0 removed
[  541.977092][ T8261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.988356][ T5784] Bluetooth: hci4: command tx timeout
[  542.046287][ T8261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.413112][ T8261] bond0 (unregistering): (slave team0): Releasing backup interface
[  542.455313][ T8261] bond0 (unregistering): Released all slaves
[  542.528115][T12866] netlink: 'syz.2.2387': attribute type 22 has an invalid length.
[  542.538826][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'.
[  542.559151][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'.
[  546.597333][T12909] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2399'.
[  546.638876][T12909] bridge_slave_1: default FDB implementation only supports local addresses
[  546.693336][T12908] IPv6: Can't replace route, no match found
[  547.261434][T12929] netlink: 'syz.3.2403': attribute type 39 has an invalid length.
[  547.447067][T12733] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  547.508120][T12733] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  547.565333][T12733] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  547.609908][T12733] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  547.957088][T12733] 8021q: adding VLAN 0 to HW filter on device bond0
[  548.031274][T12733] 8021q: adding VLAN 0 to HW filter on device team0
[  548.075976][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.083292][ T8247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.109896][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.117624][ T8247] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.205063][T12733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  548.913441][T12733] 8021q: adding VLAN 0 to HW filter on device batadv0
[  549.073904][T12733] veth0_vlan: entered promiscuous mode
[  549.117601][T12733] veth1_vlan: entered promiscuous mode
[  549.216452][T12733] veth0_macvtap: entered promiscuous mode
[  549.236404][T12733] veth1_macvtap: entered promiscuous mode
[  549.295929][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.314774][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.326063][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.342462][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.358227][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  549.374993][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.395338][T12733] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.432100][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.474660][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.510264][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.546635][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.557643][T12733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  549.574724][T12733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  549.587144][T12733] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.679983][T12733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.716133][T12733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.735493][T12733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.765768][T12733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.080916][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.109002][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.173094][T12979] FAULT_INJECTION: forcing a failure.
[  551.173094][T12979] name failslab, interval 1, probability 0, space 0, times 0
[  551.200240][T12979] CPU: 1 PID: 12979 Comm: syz.3.2413 Not tainted syzkaller #0
[  551.207972][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  551.218082][T12979] Call Trace:
[  551.221415][T12979]  <TASK>
[  551.224409][T12979]  dump_stack_lvl+0x18c/0x250
[  551.229179][T12979]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  551.235760][T12979]  ? show_regs_print_info+0x20/0x20
[  551.241029][T12979]  ? load_image+0x420/0x420
[  551.245613][T12979]  should_fail_ex+0x394/0x4c0
[  551.250365][T12979]  should_failslab+0x9/0x20
[  551.255039][T12979]  slab_pre_alloc_hook+0x59/0x300
[  551.260136][T12979]  ? sctp_add_bind_addr+0x8c/0x360
[  551.265318][T12979]  __kmem_cache_alloc_node+0x53/0x250
[  551.271042][T12979]  ? sctp_add_bind_addr+0x8c/0x360
[  551.276214][T12979]  kmalloc_trace+0x2a/0xe0
[  551.280735][T12979]  sctp_add_bind_addr+0x8c/0x360
[  551.285739][T12979]  sctp_copy_local_addr_list+0x31b/0x4e0
[  551.291513][T12979]  ? sctp_copy_local_addr_list+0xa4/0x4e0
[  551.297291][T12979]  ? sctp_do_8_2_transport_strike+0x910/0x910
[  551.303600][T12979]  ? sctp_v4_is_any+0x35/0x60
[  551.308344][T12979]  ? sctp_copy_one_addr+0x8c/0x350
[  551.313506][T12979]  sctp_bind_addr_copy+0xb3/0x3c0
[  551.318577][T12979]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  551.324955][T12979]  sctp_connect_new_asoc+0x2f9/0x6a0
[  551.330316][T12979]  ? __sctp_connect+0xd80/0xd80
[  551.335301][T12979]  ? __local_bh_enable_ip+0x13a/0x1c0
[  551.340717][T12979]  ? bpf_lsm_sctp_bind_connect+0x9/0x10
[  551.346305][T12979]  ? security_sctp_bind_connect+0x89/0xb0
[  551.352067][T12979]  sctp_sendmsg+0x1519/0x27b0
[  551.356874][T12979]  ? sctp_getsockopt+0xb60/0xb60
[  551.362032][T12979]  ? aa_af_perm+0x330/0x330
[  551.366572][T12979]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  551.373031][T12979]  ? sock_rps_record_flow+0x19/0x3f0
[  551.378358][T12979]  ? inet_sendmsg+0xce/0x2a0
[  551.382985][T12979]  ? inet_send_prepare+0x250/0x250
[  551.388141][T12979]  ____sys_sendmsg+0x61b/0x980
[  551.392958][T12979]  ? __asan_memset+0x22/0x40
[  551.397857][T12979]  ? __sys_sendmsg_sock+0x30/0x30
[  551.402923][T12979]  ? __import_iovec+0x5f2/0x850
[  551.407827][T12979]  ? import_iovec+0x73/0xa0
[  551.412380][T12979]  ___sys_sendmsg+0x2a6/0x360
[  551.417105][T12979]  ? get_pid_task+0x20/0x1e0
[  551.421738][T12979]  ? __sys_sendmsg+0x2b0/0x2b0
[  551.427254][T12979]  ? __lock_acquire+0x7d80/0x7d80
[  551.432526][T12979]  __se_sys_sendmsg+0x1d0/0x2c0
[  551.437460][T12979]  ? __x64_sys_sendmsg+0x80/0x80
[  551.442462][T12979]  ? lockdep_hardirqs_on+0x98/0x150
[  551.447694][T12979]  do_syscall_64+0x55/0xb0
[  551.452154][T12979]  ? clear_bhb_loop+0x40/0x90
[  551.456946][T12979]  ? clear_bhb_loop+0x40/0x90
[  551.461657][T12979]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  551.467592][T12979] RIP: 0033:0x7fe18739de59
[  551.472123][T12979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  551.491850][T12979] RSP: 002b:00007fe1882b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  551.500474][T12979] RAX: ffffffffffffffda RBX: 00007fe187625fa0 RCX: 00007fe18739de59
[  551.508475][T12979] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000009
[  551.516833][T12979] RBP: 00007fe1882b0090 R08: 0000000000000000 R09: 0000000000000000
[  551.524852][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  551.532939][T12979] R13: 00007fe187626038 R14: 00007fe187625fa0 R15: 00007ffd5a87f3b8
[  551.541067][T12979]  </TASK>
[  551.602124][ T8258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  551.614525][ T8258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  551.904368][T12991] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2414'.
[  551.940201][T12991] bridge_slave_1: default FDB implementation only supports local addresses
[  553.950803][T12734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  553.965790][T12734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  553.975276][T12734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  553.990923][T12734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  554.005101][T12734] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  554.017354][T12734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  555.663656][T13027] chnl_net:caif_netlink_parms(): no params data found
[  555.838313][T13027] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.851687][T13027] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.861939][T13027] bridge_slave_0: entered allmulticast mode
[  555.875077][T13027] bridge_slave_0: entered promiscuous mode
[  555.887425][T13027] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.914063][T13027] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.923577][T13027] bridge_slave_1: entered allmulticast mode
[  555.936459][T13027] bridge_slave_1: entered promiscuous mode
[  555.996008][T13027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.022090][T13027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.052083][T13033] Bluetooth: hci0: command tx timeout
[  556.098108][T13027] team0: Port device team_slave_0 added
[  556.117051][T13027] team0: Port device team_slave_1 added
[  556.183033][T13027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.192890][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.227035][T13027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.252078][T13027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.264727][T13027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.312909][T13027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.128582][T13033] Bluetooth: hci0: command tx timeout
[  560.210758][T13033] Bluetooth: hci0: command tx timeout
[  562.288739][T13033] Bluetooth: hci0: command tx timeout
[  643.296727][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  643.307526][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  658.518477][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  658.525790][    C1] rcu: 	1-....: (10499 ticks this GP) idle=717c/1/0x4000000000000000 softirq=47945/47945 fqs=4919
[  658.537779][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  658.544469][    C1] rcu: 	 number:  1357554          0            0
[  658.550896][    C1] rcu: 	cputime:    17740      34738           63   ==> 52490(ms)
[  658.558938][    C1] rcu: 	(t=10501 jiffies g=62365 q=3497 ncpus=2)
[  658.565311][    C1] CPU: 1 PID: 13015 Comm: syz.2.2419 Not tainted syzkaller #0
[  658.572817][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  658.583001][    C1] RIP: 0010:get_stack_info_noinstr+0x6/0x130
[  658.589116][    C1] Code: e8 0f ba c6 f6 5c 48 c7 c7 e0 24 c5 8a e8 d2 40 00 00 65 c6 05 cc 1a 78 75 00 eb 9b cc cc cc cc cc cc cc cc 66 0f 1f 00 41 57 <41> 56 41 54 53 48 89 d3 49 89 f7 49 89 fe e8 17 01 00 00 89 c1 b0
[  658.608855][    C1] RSP: 0018:ffffc900001f0200 EFLAGS: 00000286
[  658.615092][    C1] RAX: ffffffff812f2e99 RBX: ffffc900001f02a8 RCX: ffff88802619bc00
[  658.623278][    C1] RDX: ffffc900001f02a8 RSI: ffff88802619bc00 RDI: ffffc900001f0248
[  658.631471][    C1] RBP: ffffc900001f02d0 R08: ffffc900001f0307 R09: 0000000000000000
[  658.640086][    C1] R10: ffffc900001f02a8 R11: fffff5200003e061 R12: ffffc900001f0248
[  658.648109][    C1] R13: ffffc900001f02c8 R14: ffffc900001f02c8 R15: ffff88802619bc00
[  658.656140][    C1] FS:  00007feb5b9866c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  658.665111][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  658.671816][    C1] CR2: 00007fe0cc705ff8 CR3: 000000002d076000 CR4: 00000000003506e0
[  658.680017][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  658.688018][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  658.696194][    C1] Call Trace:
[  658.699513][    C1]  <IRQ>
[  658.702480][    C1]  get_stack_info+0x40/0x170
[  658.708318][    C1]  __unwind_start+0x406/0x730
[  658.713230][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  658.718475][    C1]  ? stack_trace_save+0x100/0x100
[  658.723629][    C1]  arch_stack_walk+0xf8/0x190
[  658.728438][    C1]  ? __unwind_start+0x275/0x730
[  658.733546][    C1]  stack_trace_save+0xaa/0x100
[  658.738341][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  658.743488][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  658.748731][    C1]  ? sched_clock_cpu+0x75/0x430
[  658.753612][    C1]  ? ktime_get+0x24b/0x280
[  658.758150][    C1]  kasan_set_track+0x4e/0x70
[  658.762821][    C1]  ? ___neigh_create+0x6f4/0x23d0
[  658.767973][    C1]  __kasan_kmalloc+0x8f/0xa0
[  658.772631][    C1]  ? ___neigh_create+0x6f4/0x23d0
[  658.777697][    C1]  __kmalloc+0xb7/0x240
[  658.781897][    C1]  ___neigh_create+0x6f4/0x23d0
[  658.786926][    C1]  ? __ipv6_neigh_lookup_noref+0x5a2/0x7d0
[  658.792783][    C1]  ? __ipv6_neigh_lookup_noref+0x5a7/0x7d0
[  658.798816][    C1]  ip6_finish_output2+0x156d/0x1620
[  658.804464][    C1]  ? ip6_finish_output2+0x642/0x1620
[  658.809902][    C1]  ? nf_hook+0x390/0x390
[  658.814199][    C1]  ? ip6_mtu+0x321/0x3f0
[  658.818635][    C1]  ? ip6_finish_output+0x567/0x7f0
[  658.823783][    C1]  ndisc_send_skb+0xbb9/0x1480
[  658.828656][    C1]  ? ndisc_send_skb+0x201/0x1480
[  658.833715][    C1]  ? ndisc_mc_map+0x680/0x680
[  658.838423][    C1]  ? skb_dst+0xd0/0xd0
[  658.842554][    C1]  addrconf_rs_timer+0x36b/0x640
[  658.847525][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  658.853630][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  658.860021][    C1]  call_timer_fn+0x189/0x540
[  658.864744][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  658.870954][    C1]  ? call_timer_fn+0xd2/0x540
[  658.875774][    C1]  ? __run_timers+0x810/0x810
[  658.880520][    C1]  ? addrconf_disable_policy_idev+0x480/0x480
[  658.886724][    C1]  __run_timers+0x570/0x810
[  658.891314][    C1]  ? detach_timer+0x2b0/0x2b0
[  658.896029][    C1]  run_timer_softirq+0x67/0xf0
[  658.900912][    C1]  handle_softirqs+0x27d/0x820
[  658.905706][    C1]  ? read_tsc+0x9/0x20
[  658.909872][    C1]  ? ktime_get+0x24b/0x280
[  658.914327][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  658.919131][    C1]  ? do_softirq+0x1a0/0x1a0
[  658.923861][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  658.929189][    C1]  __irq_exit_rcu+0xd3/0x190
[  658.933830][    C1]  ? irq_exit_rcu+0x20/0x20
[  658.938580][    C1]  irq_exit_rcu+0x9/0x20
[  658.942850][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  658.948607][    C1]  </IRQ>
[  658.951566][    C1]  <TASK>
[  658.954579][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  658.960601][    C1] RIP: 0010:generic_exec_single+0x477/0x4e0
[  658.966618][    C1] Code: 75 11 e8 4c 00 0b 00 48 85 db 75 16 e8 42 00 0b 00 eb 15 e8 3b 00 0b 00 e8 06 e3 0f 09 48 85 db 74 ea e8 2c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[  658.986610][    C1] RSP: 0018:ffffc9000348fa00 EFLAGS: 00000246
[  658.992741][    C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  659.000936][    C1] RDX: ffffc9000d09b000 RSI: 000000000000386f RDI: 0000000000003870
[  659.008941][    C1] RBP: ffffc9000348fad0 R08: ffffffff911e75ff R09: 1ffffffff223cebf
[  659.016969][    C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 1ffff92000691f44
[  659.024990][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000691f65
[  659.033012][    C1]  ? event_function+0x300/0x300
[  659.038022][    C1]  ? smp_call_function_single+0x5a0/0x5a0
[  659.043776][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  659.049795][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  659.055054][    C1]  ? smp_call_function_single+0xb0/0x5a0
[  659.060743][    C1]  smp_call_function_single+0x36d/0x5a0
[  659.066337][    C1]  ? event_function+0x300/0x300
[  659.071238][    C1]  ? flush_smp_call_function_queue+0x250/0x250
[  659.077432][    C1]  ? event_function+0x300/0x300
[  659.082330][    C1]  perf_install_in_context+0x5bb/0x920
[  659.087858][    C1]  ? alloc_file_pseudo+0x1ae/0x210
[  659.093031][    C1]  ? exclusive_event_installable+0x2c0/0x2c0
[  659.099077][    C1]  ? add_event_to_ctx+0x1170/0x1170
[  659.104315][    C1]  ? anon_inode_getfile+0x109/0x1a0
[  659.109717][    C1]  ? perf_event__header_size+0x165/0x220
[  659.115388][    C1]  __se_sys_perf_event_open+0x1841/0x1c60
[  659.121161][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  659.126845][    C1]  ? syscall_enter_from_user_mode+0x2e/0x80
[  659.132876][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[  659.138547][    C1]  do_syscall_64+0x55/0xb0
[  659.143000][    C1]  ? clear_bhb_loop+0x40/0x90
[  659.147792][    C1]  ? clear_bhb_loop+0x40/0x90
[  659.152495][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  659.158431][    C1] RIP: 0033:0x7feb5ab9de59
[  659.162972][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.183674][    C1] RSP: 002b:00007feb5b986028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  659.192141][    C1] RAX: ffffffffffffffda RBX: 00007feb5ae25fa0 RCX: 00007feb5ab9de59
[  659.200206][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  659.208434][    C1] RBP: 00007feb5ac33e6f R08: 0000000000000002 R09: 0000000000000000
[  659.216440][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  659.224535][    C1] R13: 00007feb5ae26038 R14: 00007feb5ae25fa0 R15: 00007ffed6d5f9f8
[  659.233000][    C1]  </TASK>