last executing test programs:

2.280026324s ago: executing program 2 (id=3417):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b7566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = socket$kcm(0x10, 0x5, 0x4)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x9, 0xf9, 0x9, 0x0, 0x0, 0x2221, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1, 0x7, 0x1, 0x8, 0x4c9c, 0x5, 0x800, 0x0, 0x5, 0x0, 0x404000}, r2, 0xa, 0xffffffffffffffff, 0x2)
syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/time_for_children\x00')
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0xa, &(0x7f0000000b40)=[{&(0x7f0000000580)='x', 0x1}, {&(0x7f0000000280)="9daa000f20276ea116e35b9e41d436d3e94b1db974ebadae4d39cd4f6cd6f0d0650cbe9883f0a87df55cd2fb9cd971d4352351ced9bc7392571e51922238e59979d8deecfce88258212d07573c1ad1b93bc05ddf82ee44bebb8a2a78e7b98389911d4ce4961c15866a448be5149171bee2b9d9a82dbe73337267fc9ce9418145eb5388e8a330bacfa664a344f14cdebe769713123b146e15bffe0395a68c8bdc570a000000000000", 0xa8}, {&(0x7f0000000440)="27195086c41d2282b53aa824abd93018345995c23df7145433a1c140669754e318eb1aa43d7ab657fe7bff909999b9d4afd85126b6a08249b2f40bc5a33e7d9e4e390911e1c7755901524838a6148caf4fd827c93cb28b0adf8d0d67ba31793a775883c7526fd95bffafa788d59beea7fe3e1a331d5126fac4ace1c84e22a9d94906ae0653d00219fe46d03957f48a4e75ce063ad10ae6e6dc931e4efbd7006bbde31aec23480f770085432cbf4ac1c7a3757d1ec2243d3ab05453e222537f467dd87dc464854da6b221b8882748baec26c2c6159f36698e9af27562229e", 0xde}, {&(0x7f00000009c0)="bd362dd21b5e85fa00df4c81e4be71f05667cf3d962d0c72de21b408cf357d5fbd23a00fc934c119cab18554a3a5a0c8b5f4adf9ac4bbc751a894541b18d5809897c46774449adbf0b6d0534966548fbb4a1615c1dad9f", 0x57}, {&(0x7f0000000340)="7acbecf782a480d735", 0x9}, {&(0x7f0000000fc0)="97869f4aff9ae90f702a9abe1aded19b7f7d9ed137160335bc2829f444a9a3899f815fcd203d075cdccd097bdc48fb64ff876a1251881571c41d05e5772a6d838af07c01356bfd8150c8a9973726e237f36415d6de0ddf776beabe8d7a0536ec0bc617e8b098db9282dc1124a524e69c8e6fc12be259d8f38c17c966ae35ca76cc5409c5c2eb571426ed1e3e9194c389ce1c1f9827f3e442a3a55f0878ac51070d42f6ae9c01022f5c20ceb353c84d2a7044e529a2ca357e841bb68800339b", 0xb3}, {&(0x7f0000000780)="374ffc58206dee782dafd315557f653d966a947905eb5eda093761f16385b6fa3e71c805f41ef84ca0f109780045012cfb3416e926d560dc935acf170397521ac608e32bb48d498f1b91e01103f5a6640c6d3d6df708bfd99889823eeb438ff0e6cbcde7c1add055f23fb03f7ba267dea28f1113335d2f23d1bcda26467df0a2f341050079e2acf5", 0x88}, {&(0x7f0000000c00)="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", 0xfa}, {&(0x7f0000000840)="6d7e7ce5934bb186c83c3db9a2db3fcaa31bf1f3cb3f2c129d3e5bb3dcb904090d781b522663f6d75ad3ba702dc15702db1a147d72f3ed728a35341c6b81c3b3aacacd8d8426eb18444de27d95dd357ba16529f88ac3051648f7b3d80f1d5137f89c9da391db967800f9dd1e28356aefd81fa35a", 0x74}, {&(0x7f0000000ac0)="45efb73c6cf7d201ea5a0ff948f6ab8deeb52485d2d0ae41d23a3fba59b1d1f93b6d26b6c5607ae58c98c7a58d4a07b9ae75650f9202dcf60b2ef72c0587c0cab9", 0x41}], 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="2000000000000000840000000200000005002b"], 0x20}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa020, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x800, 0x5, 0x592, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$kcm(r3, &(0x7f0000002100)={&(0x7f0000000940)=@qipcrtr={0x2a, 0xfffffffffffffffe, 0x7fff}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000009c0)="fa364132783f9c0d4887b1792f71854df2207c5c43ebd91422dba8e7774b2c9caa122ade6bcd3957f9ab9b11b44ba9a4adbf1165f1afb4a856f285f8431147e9aa3a6227f9e1574a8127f1f1b12a930e383fbeeeda5d753deb43f8ea52f85ace3a", 0x61}, {&(0x7f0000000a40)="197d4d55d89629b0552170fd6636c11cacd7d2dad7f6bd897a28bfc1d3d111e349c76eaf06ecea90e6125e437975fa40592436b2e415", 0x36}, {&(0x7f0000000a80)="8773cc92548634265a1d740db93d134eb1112e603982ac5c6ab8d0a708b8ad9f38fb2cebb48c293d1f157a8274207288243773ec1bcec0f3691ae02e41073b35a132718d7acbaf317db715d50374be9aa9f3c5434e58621461a080b641f3e8f6e372ef2eb6d04fb7bba57e414b1b88ee3a48a99ba0e1f70bcf7b260767c3cf5b05add5e584d405b95f0854da4834bd90b4b0d29903fe6f5b6899c9094caddf84745eec0d7f432de50cd7b7e7c3e08f7556419492", 0xb4}, {&(0x7f0000000b40)="902348d80a22ca1a53e1fbbe6afb5c48ac1bc290df514aff6aa4d8dfe415ef7c8fa4422d1627f9b46060ac79d3", 0x2d}, {&(0x7f0000000c80)="71b3ef3b300e49d24c34a7ef8529174073806139155ec3af1a8cbc4870d18c7879d8fe7591839271bbe582efea1b4c354791dbf3d58b50831e9ca8277e0a8a2e81166a44335e9a00ff96dfe80613dbc30ff6fc7ac4ed60a6155cb28f3cb71f51214a4dac63fdc25dd034713603687bf08d43d8efb62a5867066ae067139b23f092e4702722b8707c0828b41d5b1a1ee434c54c95c521abbc1d072165ddbb3404e4a5fce6286e57f564a9be09d5c5b05ea0971c2292435d632a1c54bb42389393a096af87bc722bc5ed01987b34a3784568af39c52cb810267ddcb83c", 0xdc}, {&(0x7f0000000d80)="276c2d30905fbb9cfa8cd82eeedfe6589f348530e46b8739c14a974083f10ef45a49c8fb3bd8b138ae000a045939e45bdf8b265b452db5078de4931d5229e8501122cbcbe261064f75d9ae9bf5882ebf66d5ef16e9b88a6ee56916b4bcd2c45265b294e6b389fe3ba6a48f990f5e4027370554f1423af0e71428bf57b3ba18f7258a7ea50367af7e47b9739f2c0437f8797657fc32c268ee76e54400048b8a9da24aabb8e6a9", 0xa6}, {&(0x7f0000000e40)="18179840a195487f5b4bb51730da6610b404549fd2e8445b034940ce09e69333e1547a0e80ac7b276eff852a272faa8c96961a4c83a175e2db58acf1260701f80d1de298099b9aa7f4401766c9af5b21a860f0c63105f230000e2d7a104741fe60c58653dcadcbb2f7e85338f8238bf7ff3aae1472b4ec11ff3cd90b2c9f45c975fa69d987f07e4fc3e29205888691bd225ef711d87c1241eb62de42090e447de32628afc6d815", 0xa7}], 0x7, &(0x7f0000000f80)=[{0x1010, 0xff, 0xb263, "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"}, {0x18, 0x84, 0x7, "52847c269d"}, {0x50, 0x10a, 0x8, "e854f27f2bd878e8dabd7e306512afc312bf201e250fe4fc18d8c9255c79a02525a44eb9ae85d129521cfc94baa1eea11f15e81b9ca1d5eb300b23c2d7ea5c84"}, {0xe0, 0xfe, 0x9, "8ef5daac2b41f383cf797624efd8fa85a43301e031b306fffeaee73a45f7f4d51a2ce15c40bc06cb626563d3c582ffc43e45d1f49efc7a635c0ddb17e66af60ef988f0bf4fff3cd32f231a00c561ce15e8bb4bc02dc2ac6a4e649a50a70bdabc1cf3aa48d1c59c01d531c5007ba0bbb8f9b907c332ee284e21aed5f703c1af06a3ac2f90e98437640e865f84b8d09c8fa004e78ad48f7de2f7824038594b9e74c22892931a3c9ba0fb7a3726d4ec6e60da72a79f7b0a49311e851e9b9e1d543768c5d7a66cb16aee28"}], 0x1158}, 0xc000)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1, 0x3, 0x80, 0xaf455f50e35aa0ae, 0xffffffffffffffff, 0x1, '\x00', 0x0, r6, 0x0, 0x3, 0x2, 0x7, @value=r1}, 0x50)
ioctl$TUNSETVNETLE(r5, 0x400454dc, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000007c0)=r9)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0x0, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0)

2.217759775s ago: executing program 3 (id=3420):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100)=r1, 0x129)
socketpair(0x21, 0x4, 0x8912, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x71, 0x0, 0x0)

1.879658414s ago: executing program 2 (id=3424):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0700000000000000050000000000000085002200c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

1.789306626s ago: executing program 0 (id=3425):
r0 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0xfd, 0x0, 0x3, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x6, 0x6, 0x2, 0x0, 0x6, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90c9, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, r0, 0xa)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x1, 0x0, &(0x7f0000000100)="ff", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000000)='/', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000000}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r4}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705d7a0080000008500001ff435b800a500000095"], &(0x7f0000000040)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, 0x0})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x3efd7ab4c41335d9, @perf_config_ext={0x4800, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x8, 0xffffffffffffffff, 0xa)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x23, &(0x7f0000000000), 0x4)
recvmsg(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20)
socket$kcm(0x15, 0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000009", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32], 0x50)
close(r5)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r8, 0x3)
r10 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x29, 0x2, 0x0)

1.786048246s ago: executing program 2 (id=3426):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1}) (async)
perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0xf2, 0x4, 0x1, 0x6, 0x0, 0x6, 0x884, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xc, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x4a18, 0x8, 0x7, 0xe, 0x100000001, 0xb27, 0xfff8, 0x0, 0xc34, 0x0, 0x5c4}, 0xffffffffffffffff, 0x2, r1, 0xa) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async)
r4 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6005, 0x0, @empty, 0x7}, 0x80, 0x0}, 0x20040040) (async)
recvmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10042) (async)
recvmsg$kcm(r4, &(0x7f0000002cc0)={0x0, 0x0, 0x0}, 0x160)
r5 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) (async)
ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000200)=0x1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x541b, &(0x7f00000000c0)) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x62541, 0x0)
ioctl$TUNGETVNETBE(r6, 0x800454df, 0x0)

1.659349529s ago: executing program 1 (id=3427):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff00) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb582, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0000f003fb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6) (async)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2162)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48)
socket$kcm(0xa, 0x6, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private2, 0x8}}, 0x80, 0x0, 0x0, 0x0, 0x20}, 0x4)

1.540173072s ago: executing program 2 (id=3428):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180), 0x43)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0xd4140, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0x7, 0x3, 0xaaf04684de878bda, 0x9, 0x4, 0xfffe, 0x0, 0x20, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0xb1}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x3, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xb)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
close(r2)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}], 0x10}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
close(r7)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009fc0000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

1.488383064s ago: executing program 0 (id=3429):
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, 0x0, 0x4000040)
recvmsg(r0, 0x0, 0x102)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009fc0000060019c00200bc24eab5008000001e618294ff4051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

1.487625313s ago: executing program 1 (id=3430):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000002940)=""/4082, 0xff2}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/52, 0x5c}], 0x3}, 0x163)

1.426927435s ago: executing program 1 (id=3431):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001800000000000000100100000c000000e8000000288670"], 0x30}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async)
r2 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f00000001c0), 0x0}, 0x20) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
close(0x3)
close(r1) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff0000003249", @ANYRES32=0x1, @ANYBLOB="0000008dd73f4a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$kcm(0xf, 0x3, 0x2)
openat$cgroup_procs(r1, &(0x7f0000000200)='tasks\x00', 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x8) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000004b80)={&(0x7f00000000c0), 0x6e, &(0x7f0000004a40)=[{&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000003a00)}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x4}, 0x20)

1.410717315s ago: executing program 0 (id=3432):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000001207010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

1.296199028s ago: executing program 0 (id=3433):
r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0||!')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x21, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a0010000000", 0x28}], 0x1}, 0x0)

1.256496419s ago: executing program 1 (id=3434):
r0 = socket$kcm(0x23, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ef, &(0x7f0000000000)) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1, <r2=>0xffffffffffffffff}, 0x4) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000090000000000000000010000850000002a000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x5}}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x2e, 0x2e, 0x61, 0x2e, 0x61, 0x30]}}, &(0x7f0000000800)=""/4096, 0x44, 0x1000, 0x0, 0x2, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r4, r5, 0x2, 0x2, 0x5}, 0x50)

1.135102972s ago: executing program 3 (id=3435):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="0700000000000000050000000000000085002200c40000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

988.292556ms ago: executing program 3 (id=3436):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
write$cgroup_int(r1, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x200800, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast})

820.37138ms ago: executing program 0 (id=3437):
r0 = socket$kcm(0x2, 0x3, 0x106)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1})
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x541b, &(0x7f00000000c0))
r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x73)
close(r8)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000100)={r0})
setsockopt$sock_attach_bpf(r1, 0x107, 0x2, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES16=r10], 0xfe33)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080))

804.77014ms ago: executing program 1 (id=3438):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r3=>0x0, <r4=>0x0})
close(r3)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/447], 0x1c8}, 0x4000c010)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r5 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r5, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f00000024c0)=""/4096, 0x1000}, 0x100)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00')
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xb, 0x2, 0x0, 0x9, 0x0, 0x0, 0x48420, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00')
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x1, 0x4000, r7}, 0x18)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

690.853124ms ago: executing program 3 (id=3439):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x10, 0x0, 0x0, 0x3, 0x20510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x400000000007}, 0x0, 0x10000, 0x9e0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x46, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911039000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
socketpair(0x2a, 0x2, 0x0, &(0x7f0000000140))
mkdirat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x1ff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, r0, 0x1, 0x4}, 0x50)
r9 = bpf$ITER_CREATE(0x21, &(0x7f00000007c0)={r3}, 0x8)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', r2, r0, 0x4, 0x3, 0x2}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000780)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}], &(0x7f0000000840)='syzkaller\x00', 0xba2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xe, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, r11, r11, r11, r11, r11, r11, r11], 0x0, 0x10, 0xa}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r11, 0x58, &(0x7f0000000100)}, 0x10)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r2, r0, 0x5, 0x1, 0x3}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r6, <r13=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x14, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3ce, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x0, 0x1, 0x0, 0x9, 0x8, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x3, 0xd5, &(0x7f00000006c0)=""/213, 0x41000, 0x11, '\x00', r2, 0x19, r9, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xe, 0x10001, 0x5}, 0x10, 0x1dc82, r4, 0x4, &(0x7f0000000a40)=[r10, r11, r12, 0xffffffffffffffff, r13], &(0x7f0000000a80)=[{0x4, 0x5, 0x8, 0x7}, {0x0, 0x5, 0x6, 0x8}, {0x5, 0x1, 0x7, 0x3}, {0x4, 0x4, 0xf, 0x2}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400c8430e7222c66afab307a800009500000080000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)

293.962443ms ago: executing program 2 (id=3440):
r0 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r0, 0x0, 0x4000040)
recvmsg(r0, 0x0, 0x102)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009fc0000060019c00200bc24eab5008000001e618294ff4051f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

232.088525ms ago: executing program 0 (id=3441):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000611008000000000063000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x2, 0x9}, 0x10}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x900b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x2, 0x0, 0x2800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x100c, 0x7, 0x3ff, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x100c, 0x7, 0x3ff, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb025, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20007, 0x0, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb025, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20007, 0x0, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x2, 0x4) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x23, 0x7, 0x0) (async)
socket$kcm(0x23, 0x7, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x6a0a, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) (async)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r2, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="f4003b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b5181847fb40000000000", 0x28}], 0x1}, 0x0)
sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000002880)="611b0f0065f65d25c9d4efa78c711930dcacc7711431abd866f4f300918cc74122160768ad3185487de6a599a4f93e5d4911d49a7dfef2adf907b8c28d59338f7e14b59ec468cebf0989a86b92b373e9ac989a0f28132d7e25b7c8f4fa9dad2e579efbeec8a5293e105a65c905ece0947f119ebe03703e2cfe8fd22bbd81c58180c36c2886b8b987141ea749efcecf74244e802ffc263c4dc411eb2af5804bb899fd6e94b2a755592c74376314b9331242c392216cbc604497de01fa932fd43cef0441b0d0a760cc4388070e0c0680831a5bc20d8a91d29336f36a323fdfb04e4a6ee47f8a4863034eca641d96a9bf48f5cbf7410d27b3cef723e49b6c4fbc4b3e4086e1700b9d09f2e2b6dd44c505f5ca4caefe6602692d159c80efdf526391ffffc35d6a0109327bdf99e8fbbd152ac4f86738e7b40b88583026c8a7126d4a3d5a687ca0446ee3a96b0fe3ba39444b7cf4d311cd88e6ba99a8c64b710093482b0a472885f0e553d568462231c2d4f3ebde44e58c64791343670428545bfca7d7f9ca627c482f7555a4f96e628adde017e93fa6f3e3cf4bd4b8679c19db9b2b2bc6ccb399c8ba8c7a28819f3d1e4305de43106bf100326161f3e439868a0ba942c5a268f9b6df4252d10928ffb7aee6ecb35315fd2b88fa0ac7d884319f5dfc8b0d2e525e779ee72651244944cc6cea32992bc6585b422eab50d6bf02c15160220712488fb5251878f5247c115e3a751065e3978cf102f17d7a8fe3dd1c4a5d04e16d585b9bf9ecf586d9b7e5b64a47a7796196b4fc41ba79f0548ec6641efc3c12341c7c20434a2f224b2233e631a6678bf438072badaf8f894f52bc8a306ff5f27b5c5a31c84c48c868d7aff804f709f346f11711adf7f9e801a92292b846b8ab9447616ff5287c0d6687c795195cf5cd88030ec2a3d8d57d24fa508dc548c4c6d6f5c6c646df43431d7c3dea4d9aa4d932d9111a3e43bbc7bce925661e8bbbe184a5d837e3ddd124fdc7a9c4382eaa59dcd9ceb7b29c19b210c7530113824b0b3c2b799ac563f9127c19ca908506e8a12dde6eadb46fa2e2b4ea7836d39423b5287e04effabcf779f0b7abe59a2a7a5216b33fedbd457a84889be95ea064b8c6eef8e92e2f2fe05fb81996950495b68bf9ecdf17008f85dd0deb3785ac13c7332e42e27895a2964ba156b01722502deef4a428192a352de6ff8fe739dcfbf215895b3a7058c24c0f782fa51f1c2f6fb850e55d6363432be1b16494c423c8ef712b2ea6239a062820b0a8bb8fddf6a02128348ccf539f948bf120c10ce19650c8de558bf47c3d819bc895fae3d5f0520cee5ce5ac1a1c478a654e3e11dd3979e8bfbe3d8b2d82abc0f01045220ef684864300ed08ac3881cb925f5187a55018e9ffd0bc9d028754804f29a3ee2c3f4818bfd6f33327408b7ab1b9380e966349f90c1fdea10f1662871c3b7484df1559c61e2135e4324c8e00a1ef6e5acb87decd6714dec8e7c80c5209b93a475b2b72e7184d6f8716568104a9fde60280372ee15151472146acdf5b9c10ac88e6cf1bda7cbdf707910d98bbc7b2b5eb8d33b5108681952a0ba7b0bcc9ddac3297e0dc606de5f7345d4d4826c65de5ef66c3a9d14e04e29e1edd34806f78c8b2c160b4232cf0f65196000c13800c7fcd7c4509d43ea454cf1a83c1dfae2506f2b248214500e58038a40bc6d0ee84202b53cae3cd69498daef962e4af6115474208e72cc0dad6d0eb83276aac6912a3fe68c7a118cea470e3302945e7525af56ae39a1da0ec0e926076d804797b9fb76836f1051e0d869c3a126b83a8f7efa485a83a3d7bd21e3a1de4cbdd1f7142a2930f9bf7de6cf75918c103708cc74bb4a78975e1baa735cb9165007b1d1a5cbb4ec9a637ae1291e835ea0f68fe1e738d6b0968d85cbfc0fffc90e98f944515467f1c0a85435981adf1c488878872729750150785ccc4c66e536f862c3957b33c4d9650a6cb58571426643dac013f5df3ea851d4ea2bd2e1ce32ea3ba416ba6fe75c68994e3660f698bf32d4bad6a3123a21daa34fd7866be7f054769c16f965ee3eea55eaba03b56d9fbf11b3e0093a33c5bc28334b3c7acf0f224439613f6da6b0bf85958ef81f96af1ab471b5425a180f408e8ca4c5a74c383c4b536081466d7013362fcf678030e9df773cd0e75838c5989fef47af332b7565af6e8f6350082be2222fc3a0fa9689f8f8ccd30b664b08993213adf5aff065043cf03ec18d25af8a15fe18a64d2ce18ba81ca47bd4be78e12bef68505c51075768a1ab8568123cf5261e57b9e610e12f370abcfba99269576d0a3658f65df3d53892978e1cc63d7f3d5ece0a28f561b7cd935f392fa97780937bf18c8df2a7de54256fe26607322b3fea0f40550628f0efe5652172fe445e26310a15d16fa998be812601f1cb0d5d3babb7f0e90ca26b503339e1cc8f6c3cb06cc90986fb3264417e29ce5830aff0493d1399666cbce27a4b30edca99bcbc01c8549e5d2906bfdbec828d3f21ec5", 0x6ff}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}], 0x20}, 0xe900) (async)
sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f0000002880)="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", 0x6ff}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}], 0x20}, 0xe900)
sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0) (async)
sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x19, 0x0, 0x3b)

164.394106ms ago: executing program 3 (id=3442):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000001307010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

163.689856ms ago: executing program 1 (id=3443):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x997, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010)
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100)=r1, 0x129)
socketpair(0x21, 0x4, 0x8912, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
recvmsg$unix(r3, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x71, 0x0, 0x0)

116.479278ms ago: executing program 2 (id=3444):
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r0, 0x12)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async)
perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000000000000000, 0x4}, 0x1002, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004c}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=3445):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x4, 0xf5, 0xe2, 0x3, 0x0, 0x3, 0x80008, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x5}, 0x840a, 0x1, 0x1c1, 0x5, 0x10001, 0x10, 0x993, 0x0, 0x7, 0x0, 0xf50}, 0x0, 0x6, 0xffffffffffffffff, 0x9)
r8 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, r7, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r9 = gettid()
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = syz_clone(0x6202000, &(0x7f00000002c0)="b232fccc22fc9d055c306d06cf", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="3dbb905e73ee8a4608e2a3f952593690dec7373bb0993c77818a3be431c47a96d61a8c057c46fb4a00c17119cdfa6bb4f855f8cfe3ef")
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xb, 0x96, 0x1, 0x0, 0x5f, 0x0, 0x4dc578a75f055249, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x5, 0x6, 0x7, 0x8, 0x0, 0xfff7, 0x0, 0x81, 0x0, 0x8000}, r12, 0x0, r11, 0x0)
sendmsg$unix(r6, &(0x7f0000000a40)={&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000800)="3139e8b4dbc7f4", 0x7}, {&(0x7f0000000840)="e713ec69fa9c4f3270a7706f261c2989784c426b3f66a4a8208c713406ddb7f5650c53da87b7b0ce89924c76ac8f7c3c09504ad81b82706bd4e4270d1954e77307b4002edbcbd8f51e70d3", 0x4b}], 0x2, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r10, r2, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01}}}], 0xa8, 0x4000004}, 0x20010055)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r15 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15)
r16 = gettid()
r17 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = gettid()
perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x1, 0x7, 0x1, 0x20, 0x0, 0x7fffffffffffffff, 0x5008, 0x37d227e0e6384d28, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x3048, 0x3, 0xed6b, 0x0, 0x5, 0x3b382a1e, 0x2, 0x0, 0x0, 0x0, 0xbe2c}, r18, 0x3, r17, 0x3)
r19 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)
r20 = gettid()
sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="19afd5d508588574567f3be9f1bad31691c840cb93122ddada2c2330dafbf7925fe29a5f40e59b9a5bee51d4f3169d44c1ede490d6e672b0ae314043d84adc5a8c9c10c3712706141e9fd1d1a0aedfedaf0509fd69b02b8cd9d3a5201ef47220ec6125e899c88d861db2283e974185a74ea341a62f04a38aa45c10c2b3729f91a20ff5c51e7aabbeb7403f20bb90300d8a", 0x91}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r15, r13, r2, r19]}}, @rights={{0x1c, 0x1, 0x1, [r14, r13, r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r13, r13, r13]}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee01, 0xffffffffffffffff}}}], 0xc0, 0x4000000}, 0x8014)

kernel console output (not intermixed with test programs):

est failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.424929][T12961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2231'.
[  445.767553][T12983] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2237'.
[  445.790867][T12982] validate_nla: 1 callbacks suppressed
[  445.790910][T12982] netlink: 'syz.3.2237': attribute type 10 has an invalid length.
[  445.812865][T12982] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2237'.
[  445.828583][T12984] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1
[  445.919742][T12986] netlink: 'syz.2.2238': attribute type 19 has an invalid length.
[  445.928019][T12986] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2238'.
[  446.140469][T12991] netlink: 'syz.2.2239': attribute type 19 has an invalid length.
[  446.151616][T12991] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2239'.
[  446.416685][T12999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.451652][T13051] netlink: 'syz.2.2258': attribute type 10 has an invalid length.
[  448.473890][T13051] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  448.503063][T13050] __nla_validate_parse: 1 callbacks suppressed
[  448.503081][T13050] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2256'.
[  448.548546][T13050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.635966][T13056] netlink: 'syz.0.2259': attribute type 21 has an invalid length.
[  452.053666][T13087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2269'.
[  452.076485][T13087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.309006][T13101] netlink: 'syz.0.2275': attribute type 19 has an invalid length.
[  452.352147][T13101] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2275'.
[  452.533850][T13107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2277'.
[  453.590037][T13116] can: request_module (can-proto-0) failed.
[  453.620429][T13124] netlink: 'syz.0.2280': attribute type 10 has an invalid length.
[  454.135713][T13128] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2281'.
[  454.146619][T13128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  454.397909][T13140] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2285'.
[  454.433699][T13140] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  454.717799][T13154] netlink: 'syz.1.2290': attribute type 9 has an invalid length.
[  454.743243][T13154] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2290'.
[  454.978915][T13161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2293'.
[  454.988428][T13161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.940449][T13169] netlink: 'syz.1.2295': attribute type 10 has an invalid length.
[  456.103457][T13169] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  456.110216][T13169] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  456.147972][T13169] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  456.169090][T13174] netlink: 'syz.3.2298': attribute type 19 has an invalid length.
[  456.180235][T13174] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2298'.
[  456.633560][T13188] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2302'.
[  456.954694][T13193] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2305'.
[  456.974357][T13193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  457.174996][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.188592][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.197925][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.207643][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.215989][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  457.223777][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  457.469818][ T8030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.597335][ T8030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.696324][T13199] chnl_net:caif_netlink_parms(): no params data found
[  457.768027][ T8030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.921132][ T8030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.967267][T13231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2315'.
[  458.108964][T13224] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2314'.
[  458.211978][T13230] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2316'.
[  458.274472][T13199] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.283391][T13199] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.305841][T13199] bridge_slave_0: entered allmulticast mode
[  458.321429][T13199] bridge_slave_0: entered promiscuous mode
[  458.340546][T13199] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.350814][T13199] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.358816][T13199] bridge_slave_1: entered allmulticast mode
[  458.375035][T13199] bridge_slave_1: entered promiscuous mode
[  458.465253][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  458.537283][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  458.636088][T13199] team0: Port device team_slave_0 added
[  458.663924][T13199] team0: Port device team_slave_1 added
[  458.745462][T13199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  458.757891][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.788124][T13199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  458.802125][T13199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  458.815399][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  458.891589][T13199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  459.022359][T13249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  459.214257][T13199] hsr_slave_0: entered promiscuous mode
[  459.229005][T13199] hsr_slave_1: entered promiscuous mode
[  459.238289][T13254] netlink: 'syz.2.2323': attribute type 21 has an invalid length.
[  459.248649][T13254] __nla_validate_parse: 2 callbacks suppressed
[  459.248666][T13254] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2323'.
[  459.274234][ T5780] Bluetooth: hci0: command tx timeout
[  459.420079][T13263] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2324'.
[  459.442856][T13263] openvswitch: netlink: IP tunnel dst address not specified
[  459.547974][T13265] netlink: 'syz.2.2325': attribute type 10 has an invalid length.
[  459.639282][T13273] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2326'.
[  459.670177][T13273] netlink: 'syz.0.2326': attribute type 1 has an invalid length.
[  459.771900][T13273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2326'.
[  460.106924][ T5780] Bluetooth: hci3: unknown advertising packet type: 0x80
[  460.389859][T13297] netlink: 'syz.1.2332': attribute type 4 has an invalid length.
[  460.449971][T13297] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2332'.
[  460.470956][T13296] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  460.641833][T13304] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2334'.
[  460.668159][T13304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  461.014835][ T8030] hsr_slave_0: left promiscuous mode
[  461.066928][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.082707][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.110397][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.143068][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.243666][ T8030] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  461.251263][ T8030] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  461.343360][ T5780] Bluetooth: hci0: command tx timeout
[  461.455768][ T8030] veth1_macvtap: left promiscuous mode
[  461.496820][ T8030] veth0_macvtap: left promiscuous mode
[  461.508432][ T8030] veth1_vlan: left promiscuous mode
[  461.523293][ T8030] veth0_vlan: left promiscuous mode
[  462.754071][T13199] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  462.821926][T13199] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  462.850771][T13199] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  462.884036][T13199] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  462.917254][T13343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2342'.
[  463.085802][T13199] 8021q: adding VLAN 0 to HW filter on device bond0
[  463.149014][T13345] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2343'.
[  463.177170][T13345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  463.224237][T13199] 8021q: adding VLAN 0 to HW filter on device team0
[  463.257204][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.265388][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  463.298034][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.305317][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  463.429498][ T5780] Bluetooth: hci0: command tx timeout
[  463.947523][T13199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  464.137695][T13199] veth0_vlan: entered promiscuous mode
[  464.174488][T13199] veth1_vlan: entered promiscuous mode
[  464.252056][T13199] veth0_macvtap: entered promiscuous mode
[  464.275348][T13199] veth1_macvtap: entered promiscuous mode
[  464.287471][T13391] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2352'.
[  464.303864][T13391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  464.381826][T13199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.418175][T13199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.450674][T13199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.469910][T13199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.490587][T13199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.512282][T13199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.853920][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.861838][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.935771][ T8030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.949034][ T8030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.099982][T13418] netlink: 'syz.1.2359': attribute type 10 has an invalid length.
[  465.366206][T13435] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2362'.
[  465.501782][T13440] netlink: 'syz.0.2361': attribute type 25 has an invalid length.
[  465.513472][ T5780] Bluetooth: hci0: command tx timeout
[  465.615937][T13440] netlink: 'syz.0.2361': attribute type 25 has an invalid length.
[  465.769411][T13450] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2363'.
[  465.841706][T13450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.088846][T13493] netlink: 'syz.2.2374': attribute type 153 has an invalid length.
[  467.113581][T13493] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2374'.
[  467.407548][ T8030] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.457302][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  467.480134][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  467.491692][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  467.502492][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  467.510810][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  467.519084][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  467.591270][ T8030] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.674672][T13499] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2376'.
[  467.699115][T13499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.759177][ T8030] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.987639][ T8030] team0: Port device netdevsim0 removed
[  468.007745][ T8030] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  468.854336][T13504] chnl_net:caif_netlink_parms(): no params data found
[  469.059016][T13504] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.067015][T13504] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.074509][T13504] bridge_slave_0: entered allmulticast mode
[  469.082586][T13504] bridge_slave_0: entered promiscuous mode
[  469.126714][T13504] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.135092][T13504] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.142508][T13504] bridge_slave_1: entered allmulticast mode
[  469.151897][T13504] bridge_slave_1: entered promiscuous mode
[  469.232533][T13504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  469.245967][T13504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  469.328288][T13504] team0: Port device team_slave_0 added
[  469.361216][T13504] team0: Port device team_slave_1 added
[  469.427563][T13504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  469.440401][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.469786][T13504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  469.526766][T13504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  469.536702][T13504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  469.567487][T13504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  469.584706][ T5780] Bluetooth: hci1: command tx timeout
[  469.742969][T13504] hsr_slave_0: entered promiscuous mode
[  469.759302][T13504] hsr_slave_1: entered promiscuous mode
[  469.795293][T13504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  469.814461][T13504] Cannot create hsr debugfs directory
[  469.921422][ T8030] bond0: (slave wlan1): Releasing backup interface
[  469.960898][T13561] netlink: 'syz.3.2383': attribute type 1 has an invalid length.
[  470.277566][ T8030] hsr_slave_0: left promiscuous mode
[  470.311853][ T8030] veth1_macvtap: left promiscuous mode
[  470.330561][ T8030] veth0_macvtap: left promiscuous mode
[  470.938737][ T8030] team0 (unregistering): Port device team_slave_1 removed
[  470.993444][ T8030] team0 (unregistering): Port device team_slave_0 removed
[  471.042803][ T8030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  471.090593][ T8030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  471.409984][ T8030] bond0 (unregistering): Released all slaves
[  471.459752][T13574] netlink: 'syz.3.2386': attribute type 10 has an invalid length.
[  471.502253][T13574] team0: Device wg1 is of different type
[  471.519046][T13572] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2385'.
[  471.531510][T13572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.673799][ T5780] Bluetooth: hci1: command tx timeout
[  471.852040][T13597] netlink: 'syz.3.2387': attribute type 25 has an invalid length.
[  471.871042][T13597] netlink: 'syz.3.2387': attribute type 25 has an invalid length.
[  472.338134][T13504] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  472.351134][T13504] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  472.379074][T13504] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  472.397347][T13504] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  472.530377][T13504] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.585080][T13504] 8021q: adding VLAN 0 to HW filter on device team0
[  472.604349][T13614] IPv6: NLM_F_CREATE should be specified when creating new route
[  472.614948][T13614] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2390'.
[  472.640540][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.647857][ T8030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.687696][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.695036][ T8030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.048299][T13622] macvlan1: entered promiscuous mode
[  473.071339][T13622] macvlan1: entered allmulticast mode
[  473.104240][T13622] veth1_vlan: entered allmulticast mode
[  473.368504][T13504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.431531][T13642] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2401'.
[  473.563413][T13504] veth0_vlan: entered promiscuous mode
[  473.587786][T13504] veth1_vlan: entered promiscuous mode
[  473.657525][T13504] veth0_macvtap: entered promiscuous mode
[  473.688337][T13504] veth1_macvtap: entered promiscuous mode
[  473.757995][ T5780] Bluetooth: hci1: command tx timeout
[  473.764831][T13648] netlink: 'syz.2.2394': attribute type 19 has an invalid length.
[  473.772712][T13648] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2394'.
[  473.790677][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  473.801845][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.815580][T13504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.827731][T13504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  473.838833][T13504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  473.852609][T13504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.881613][T13504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.913028][T13504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.925570][T13504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.955462][T13504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.972921][T13650] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2395'.
[  474.001708][T13650] netlink: zone id is out of range
[  474.019222][T13650] netlink: zone id is out of range
[  474.030469][T13650] netlink: zone id is out of range
[  474.044344][T13650] netlink: zone id is out of range
[  474.050169][T13650] netlink: zone id is out of range
[  474.084595][T13650] netlink: zone id is out of range
[  474.090126][T13650] netlink: zone id is out of range
[  474.121392][T13650] netlink: zone id is out of range
[  474.153617][T13650] netlink: zone id is out of range
[  474.207494][ T8030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.245383][ T8030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.318884][ T8037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.341128][ T8037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.579565][T13662] netlink: 'syz.2.2397': attribute type 21 has an invalid length.
[  475.162266][T13681] netlink: 'syz.0.2403': attribute type 39 has an invalid length.
[  475.823805][ T5780] Bluetooth: hci1: command tx timeout
[  476.117477][T13687] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2404'.
[  476.911090][T13687] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2404'.
[  477.249915][T13709] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2406'.
[  477.279345][T13709] net_ratelimit: 26 callbacks suppressed
[  477.279474][T13709] netlink: zone id is out of range
[  477.310394][T13709] netlink: zone id is out of range
[  477.343439][T13709] netlink: zone id is out of range
[  477.349077][T13709] netlink: zone id is out of range
[  477.381140][T13709] netlink: zone id is out of range
[  477.426488][T13709] netlink: zone id is out of range
[  477.432095][T13709] netlink: zone id is out of range
[  477.441850][T13716] netlink: 'syz.0.2407': attribute type 19 has an invalid length.
[  477.456290][T13709] netlink: zone id is out of range
[  477.462839][T13716] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2407'.
[  477.516680][T13709] netlink: zone id is out of range
[  477.522160][T13709] netlink: zone id is out of range
[  477.944356][T13726] netlink: 'syz.3.2410': attribute type 21 has an invalid length.
[  477.972127][T13726] netlink: 'syz.3.2410': attribute type 1 has an invalid length.
[  478.003746][T13726] netlink: 'syz.3.2410': attribute type 21 has an invalid length.
[  478.011722][T13726] netlink: 'syz.3.2410': attribute type 1 has an invalid length.
[  478.046662][T13726] netlink: 'syz.3.2410': attribute type 21 has an invalid length.
[  478.120090][T13726] netlink: 'syz.3.2410': attribute type 1 has an invalid length.
[  478.252640][T13739] netlink: 'syz.1.2412': attribute type 21 has an invalid length.
[  478.498399][T13744] netlink: 'syz.0.2415': attribute type 29 has an invalid length.
[  478.586817][T13744] netlink: 'syz.0.2415': attribute type 29 has an invalid length.
[  479.122719][T13755] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.130758][T13755] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.220666][T13755] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.228301][T13755] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.237742][T13755] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.245104][T13755] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.492809][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  479.503790][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  479.524101][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  479.537050][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  479.544839][T13755] team0: Port device bridge0 added
[  479.552087][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  479.561933][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  480.089342][ T3462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.434223][ T3462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.480907][T13776] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2421'.
[  480.688919][ T3462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.469159][ T3462] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.666330][ T5780] Bluetooth: hci4: command tx timeout
[  481.882834][T13795] syz.1.2426: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  481.928927][T13795] CPU: 1 PID: 13795 Comm: syz.1.2426 Not tainted syzkaller #0
[  481.936513][T13795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  481.946639][T13795] Call Trace:
[  481.950073][T13795]  <TASK>
[  481.953131][T13795]  dump_stack_lvl+0x18c/0x250
[  481.958154][T13795]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  481.964537][T13795]  ? show_regs_print_info+0x20/0x20
[  481.969810][T13795]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  481.976059][T13795]  warn_alloc+0x246/0x340
[  481.980531][T13795]  ? stack_trace_save+0xaa/0x100
[  481.985563][T13795]  ? zone_watermark_ok_safe+0x230/0x230
[  481.991186][T13795]  ? kasan_set_track+0x5f/0x70
[  481.996067][T13795]  ? kasan_set_track+0x4e/0x70
[  482.000899][T13795]  ? __kasan_kmalloc+0x8f/0xa0
[  482.005730][T13795]  ? xsk_init_queue+0xad/0x100
[  482.010690][T13795]  ? xsk_setsockopt+0x4c9/0x750
[  482.015614][T13795]  ? do_sock_setsockopt+0x175/0x1a0
[  482.021000][T13795]  ? __x64_sys_setsockopt+0x182/0x200
[  482.026481][T13795]  __vmalloc_node_range+0x129/0x1320
[  482.031875][T13795]  ? free_vm_area+0x50/0x50
[  482.036467][T13795]  vmalloc_user+0x74/0x80
[  482.040879][T13795]  ? xskq_create+0xbf/0x170
[  482.045498][T13795]  xskq_create+0xbf/0x170
[  482.049909][T13795]  xsk_init_queue+0xad/0x100
[  482.054584][T13795]  xsk_setsockopt+0x4c9/0x750
[  482.059388][T13795]  ? xsk_poll+0x670/0x670
[  482.063808][T13795]  ? security_socket_setsockopt+0x44/0xa0
[  482.069699][T13795]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  482.075545][T13795]  ? security_socket_setsockopt+0x7e/0xa0
[  482.081340][T13795]  ? xsk_poll+0x670/0x670
[  482.085758][T13795]  do_sock_setsockopt+0x175/0x1a0
[  482.090863][T13795]  __x64_sys_setsockopt+0x182/0x200
[  482.096149][T13795]  do_syscall_64+0x55/0xb0
[  482.100630][T13795]  ? clear_bhb_loop+0x40/0x90
[  482.105384][T13795]  ? clear_bhb_loop+0x40/0x90
[  482.110150][T13795]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  482.116120][T13795] RIP: 0033:0x7f182c79e0d9
[  482.120710][T13795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.140458][T13795] RSP: 002b:00007f182d586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  482.149046][T13795] RAX: ffffffffffffffda RBX: 00007f182ca26090 RCX: 00007f182c79e0d9
[  482.157124][T13795] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c
[  482.165175][T13795] RBP: 00007f182c835024 R08: 0000000000000004 R09: 0000000000000000
[  482.173384][T13795] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  482.181418][T13795] R13: 00007f182ca26128 R14: 00007f182ca26090 R15: 00007fffcd36fe38
[  482.189482][T13795]  </TASK>
[  482.311524][T13795] Mem-Info:
[  482.337149][T13795] active_anon:18034 inactive_anon:0 isolated_anon:0
[  482.337149][T13795]  active_file:18055 inactive_file:40114 isolated_file:0
[  482.337149][T13795]  unevictable:768 dirty:140 writeback:0
[  482.337149][T13795]  slab_reclaimable:10822 slab_unreclaimable:93525
[  482.337149][T13795]  mapped:27956 shmem:12882 pagetables:613
[  482.337149][T13795]  sec_pagetables:0 bounce:0
[  482.337149][T13795]  kernel_misc_reclaimable:0
[  482.337149][T13795]  free:1330036 free_pcp:11041 free_cma:0
[  482.410869][T13795] Node 0 active_anon:71236kB inactive_anon:0kB active_file:72220kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115924kB dirty:556kB writeback:0kB shmem:49092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11748kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no
[  482.483229][T13804] validate_nla: 6 callbacks suppressed
[  482.483285][T13804] netlink: 'syz.0.2425': attribute type 21 has an invalid length.
[  482.562360][T13795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  482.596711][T13795] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  482.624752][T13795] lowmem_reserve[]: 0 2521 2522 2522 2522
[  482.631694][T13795] Node 0 DMA32 free:1413712kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:69692kB inactive_anon:0kB active_file:72220kB inactive_file:159432kB unevictable:1536kB writepending:552kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:24784kB local_pcp:21504kB free_cma:0kB
[  482.670096][ T3462] tipc: Left network mode
[  482.690428][T13795] lowmem_reserve[]: 0 0 0 0 0
[  482.842065][T13795] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  482.955125][T13795] lowmem_reserve[]: 0 0 0 0 0
[  482.960047][T13795] Node 1 Normal free:3894788kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18112kB local_pcp:8160kB free_cma:0kB
[  483.044179][T13766] chnl_net:caif_netlink_parms(): no params data found
[  483.063594][T13795] lowmem_reserve[]: 0 0 0 0 0
[  483.068524][T13795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  483.162930][T13795] Node 0 DMA32: 124*4kB (UME) 504*8kB (UME) 953*16kB (UME) 191*32kB (UME) 99*64kB (UME) 238*128kB (UE) 60*256kB (UME) 31*512kB (UME) 15*1024kB (UM) 5*2048kB (UM) 321*4096kB (UM) = 1434336kB
[  483.269322][T13795] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  483.295673][ T3462] ip6gretap0 (unregistering): left allmulticast mode
[  483.302497][ T3462] ip6gretap0 (unregistering): left promiscuous mode
[  483.303626][T13795] Node 1 
[  483.314250][ T3462] Ÿë
: port 1(ip6gretap0) entered disabled state
[  483.326514][T13795] Normal: 237*4kB (UME) 66*8kB (UME) 46*16kB (UME) 149*32kB (UME) 33*64kB (UME) 9*128kB (UE) 2*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3894788kB
[  483.383504][T13795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  483.442171][T13795] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  483.506075][T13795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  483.556155][T13795] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  483.584770][T13795] 63552 total pagecache pages
[  483.604454][T13795] 0 pages in swap cache
[  483.608812][T13795] Free swap  = 124996kB
[  483.616548][T13795] Total swap = 124996kB
[  483.621590][T13795] 2097051 pages RAM
[  483.626073][T13795] 0 pages HighMem/MovableOnly
[  483.631223][T13795] 416955 pages reserved
[  483.636075][T13795] 0 pages cma reserved
[  483.754776][ T5780] Bluetooth: hci4: command tx timeout
[  483.934529][T13824] netlink: 'syz.0.2434': attribute type 19 has an invalid length.
[  483.943627][T13824] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2434'.
[  483.952899][T13821] netlink: 'syz.1.2427': attribute type 19 has an invalid length.
[  483.963798][T13821] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2427'.
[  484.104480][T13766] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.111930][T13766] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.119692][T13766] bridge_slave_0: entered allmulticast mode
[  484.127939][T13766] bridge_slave_0: entered promiscuous mode
[  484.148341][T13766] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.188193][T13766] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.203784][T13766] bridge_slave_1: entered allmulticast mode
[  484.214726][T13766] bridge_slave_1: entered promiscuous mode
[  484.358709][T13766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.494501][T13766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.837970][T13766] team0: Port device team_slave_0 added
[  484.877087][T13766] team0: Port device team_slave_1 added
[  485.269605][T13766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.287545][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.349140][T13766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.384311][T13766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.391334][T13766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.452076][T13766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.824609][ T5780] Bluetooth: hci4: command tx timeout
[  485.990624][T13766] hsr_slave_0: entered promiscuous mode
[  486.028571][T13766] hsr_slave_1: entered promiscuous mode
[  486.060898][T13766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  486.083164][T13766] Cannot create hsr debugfs directory
[  486.218346][T13862] syzkaller0: entered promiscuous mode
[  486.244542][T13862] syzkaller0: entered allmulticast mode
[  487.903382][ T5780] Bluetooth: hci4: command tx timeout
[  489.531020][ T3462] bond0: (slave wlan1): Releasing backup interface
[  489.761611][T13887] netlink: 'syz.1.2437': attribute type 19 has an invalid length.
[  489.778409][T13887] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2437'.
[  489.820994][ T3462] hsr_slave_0: left promiscuous mode
[  489.838215][ T3462] hsr_slave_1: left promiscuous mode
[  489.877282][ T3462] veth1_macvtap: left promiscuous mode
[  489.883042][ T3462] veth0_macvtap: left promiscuous mode
[  490.541704][ T3462] team0 (unregistering): Port device team_slave_1 removed
[  490.596580][ T3462] team0 (unregistering): Port device team_slave_0 removed
[  490.644688][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  490.697832][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  490.763688][ T3462] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  490.992869][ T3462] bond0 (unregistering): Released all slaves
[  491.596128][T13766] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  491.631651][T13766] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  491.678469][T13766] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  491.720258][T13766] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  491.889964][T13910] netlink: 'syz.1.2441': attribute type 29 has an invalid length.
[  491.967853][T13910] netlink: 'syz.1.2441': attribute type 29 has an invalid length.
[  492.046540][T13766] 8021q: adding VLAN 0 to HW filter on device bond0
[  492.073699][T13766] 8021q: adding VLAN 0 to HW filter on device team0
[  492.132778][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.140046][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  492.162467][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.169751][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  492.442755][T13926] netlink: 'syz.0.2444': attribute type 28 has an invalid length.
[  492.839834][T13766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  492.894710][T13935] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.2446'.
[  493.137688][T13946] netlink: 'syz.3.2449': attribute type 21 has an invalid length.
[  493.173340][T13946] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2449'.
[  493.325849][T13766] veth0_vlan: entered promiscuous mode
[  493.418087][T13766] veth1_vlan: entered promiscuous mode
[  493.569074][T13962] netlink: 'syz.1.2454': attribute type 11 has an invalid length.
[  493.628884][T13766] veth0_macvtap: entered promiscuous mode
[  493.671834][T13766] veth1_macvtap: entered promiscuous mode
[  493.696848][ T8030] tipc: Subscription rejected, illegal request
[  493.759786][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.793283][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.818612][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.856577][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.890210][T13766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.627162][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.691834][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.706105][T13766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.717009][T13766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.749805][T13766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.839198][T13766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.854696][T13766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.878464][T13766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.897128][T13766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  495.180641][  T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.233739][  T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.323863][T14005] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2463'.
[  495.333611][ T8037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.341497][ T8037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.358947][T14008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2464'.
[  495.369581][T14005] hsr_slave_0: left promiscuous mode
[  495.400070][T14005] hsr_slave_1: left promiscuous mode
[  495.510872][T14008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2464'.
[  495.531732][T14009] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2463'.
[  496.942419][T14058] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.2474'.
[  497.100144][T14059] netlink: 172040 bytes leftover after parsing attributes in process `syz.2.2473'.
[  497.285037][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  497.295191][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  497.304734][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  497.326297][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  497.337267][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  497.346808][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  498.283603][   T32] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.308214][T14059] netlink: 'syz.2.2473': attribute type 21 has an invalid length.
[  498.317342][T14059] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2473'.
[  498.326869][T14059] netlink: 'syz.2.2473': attribute type 4 has an invalid length.
[  498.349038][T14080] sit0: entered allmulticast mode
[  498.457040][   T32] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.599111][T14099] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2482'.
[  498.613975][   T32] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.796301][   T32] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  499.193566][T14066] chnl_net:caif_netlink_parms(): no params data found
[  499.427811][ T5084] Bluetooth: hci2: command tx timeout
[  499.838582][T14142] netlink: 'syz.3.2489': attribute type 13 has an invalid length.
[  499.849263][T14142] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2489'.
[  499.882958][T14142] erspan0: refused to change device tx_queue_len
[  500.125953][T14066] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.141076][T14066] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.165487][T14066] bridge_slave_0: entered allmulticast mode
[  500.181650][T14066] bridge_slave_0: entered promiscuous mode
[  500.268220][T14161] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2491'.
[  500.295043][T14066] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.322122][T14066] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.341733][T14066] bridge_slave_1: entered allmulticast mode
[  500.356126][T14066] bridge_slave_1: entered promiscuous mode
[  500.544642][T14165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2493'.
[  500.563057][T14165] net_ratelimit: 25 callbacks suppressed
[  500.571045][T14165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  500.614167][T14066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  500.647340][T14066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  500.788927][T14066] team0: Port device team_slave_0 added
[  500.806819][T14066] team0: Port device team_slave_1 added
[  500.900971][T14066] batman_adv: batadv0: Adding interface: batadv_slave_0
[  500.922367][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.960157][T14066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  500.974289][T14066] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.981406][T14066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  501.019511][T14066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  501.503385][ T5084] Bluetooth: hci2: command tx timeout
[  501.757292][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  501.777630][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  502.370485][T14066] hsr_slave_0: entered promiscuous mode
[  502.377599][T14066] hsr_slave_1: entered promiscuous mode
[  502.401042][T14066] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  502.423175][T14066] Cannot create hsr debugfs directory
[  502.832969][T14212] netlink: 'syz.1.2501': attribute type 5 has an invalid length.
[  502.844079][T14212] netlink: 'syz.1.2501': attribute type 1 has an invalid length.
[  502.851882][T14212] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2501'.
[  502.907721][T14212] netlink: 'syz.1.2501': attribute type 5 has an invalid length.
[  502.915663][T14216] netlink: 'syz.3.2502': attribute type 1 has an invalid length.
[  502.941956][T14216] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2502'.
[  502.943657][T14212] netlink: 'syz.1.2501': attribute type 1 has an invalid length.
[  502.979777][T14212] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2501'.
[  503.136464][   T32] bridge_slave_1: left allmulticast mode
[  503.142764][   T32] bridge_slave_1: left promiscuous mode
[  503.153032][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.170341][   T32] bridge_slave_0: left promiscuous mode
[  503.182494][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.230454][   T32] veth0_macvtap: left promiscuous mode
[  503.242373][   T32] veth1_vlan: left promiscuous mode
[  503.249878][   T32] veth0_vlan: left promiscuous mode
[  503.589112][ T5084] Bluetooth: hci2: command tx timeout
[  504.565537][   T32] team0 (unregistering): Port device team_slave_1 removed
[  504.617256][   T32] team0 (unregistering): Port device C removed
[  505.165407][T14238] netlink: 'syz.3.2505': attribute type 2 has an invalid length.
[  505.211548][T14238] netlink: 'syz.3.2505': attribute type 8 has an invalid length.
[  505.235913][T14238] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2505'.
[  505.605912][T14246] netlink: 'syz.1.2506': attribute type 25 has an invalid length.
[  505.640076][T14246] netlink: 'syz.1.2506': attribute type 25 has an invalid length.
[  505.663232][ T5084] Bluetooth: hci2: command tx timeout
[  506.251830][T14066] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  506.278624][T14257] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2508'.
[  506.300685][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.373600][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.705302][T14066] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  506.833062][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.848989][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.859238][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.871872][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.910281][T14066] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  506.949745][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.969413][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'.
[  506.990997][T14066] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  507.022343][T14255] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2509'.
[  507.371449][T14276] FAULT_INJECTION: forcing a failure.
[  507.371449][T14276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  507.434959][T14276] CPU: 1 PID: 14276 Comm: syz.3.2512 Not tainted syzkaller #0
[  507.442649][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  507.452761][T14276] Call Trace:
[  507.456082][T14276]  <TASK>
[  507.459057][T14276]  dump_stack_lvl+0x18c/0x250
[  507.463876][T14276]  ? show_regs_print_info+0x20/0x20
[  507.469129][T14276]  ? load_image+0x420/0x420
[  507.473748][T14276]  ? __lock_acquire+0x7d80/0x7d80
[  507.478834][T14276]  should_fail_ex+0x394/0x4c0
[  507.483603][T14276]  _copy_from_user+0x2f/0xe0
[  507.488248][T14276]  bpf_test_init+0xde/0x140
[  507.492904][T14276]  bpf_prog_test_run_xdp+0x4cd/0x1140
[  507.498354][T14276]  ? __lock_acquire+0x7d80/0x7d80
[  507.503681][T14276]  ? dev_put+0x80/0x80
[  507.507841][T14276]  ? dev_put+0x80/0x80
[  507.512070][T14276]  bpf_prog_test_run+0x31f/0x390
[  507.517089][T14276]  __sys_bpf+0x49d/0x890
[  507.521399][T14276]  ? bpf_link_show_fdinfo+0x390/0x390
[  507.526856][T14276]  ? lock_chain_count+0x20/0x20
[  507.531783][T14276]  __x64_sys_bpf+0x7c/0x90
[  507.536261][T14276]  do_syscall_64+0x55/0xb0
[  507.540908][T14276]  ? clear_bhb_loop+0x40/0x90
[  507.545642][T14276]  ? clear_bhb_loop+0x40/0x90
[  507.550387][T14276]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  507.556339][T14276] RIP: 0033:0x7f170899e0d9
[  507.560836][T14276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  507.580522][T14276] RSP: 002b:00007f17098cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  507.588998][T14276] RAX: ffffffffffffffda RBX: 00007f1708c25fa0 RCX: 00007f170899e0d9
[  507.597031][T14276] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  507.605050][T14276] RBP: 00007f17098cc090 R08: 0000000000000000 R09: 0000000000000000
[  507.613069][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  507.621100][T14276] R13: 00007f1708c26038 R14: 00007f1708c25fa0 R15: 00007ffdf5abbbb8
[  507.629207][T14276]  </TASK>
[  507.839555][T14066] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.052382][T14283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  508.163042][T14066] 8021q: adding VLAN 0 to HW filter on device team0
[  508.188040][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.195304][ T8020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.256085][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.263361][ T8020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.056362][T14304] FAULT_INJECTION: forcing a failure.
[  509.056362][T14304] name failslab, interval 1, probability 0, space 0, times 0
[  509.144104][T14304] CPU: 1 PID: 14304 Comm: syz.1.2524 Not tainted syzkaller #0
[  509.151680][T14304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  509.161807][T14304] Call Trace:
[  509.165150][T14304]  <TASK>
[  509.168144][T14304]  dump_stack_lvl+0x18c/0x250
[  509.172914][T14304]  ? show_regs_print_info+0x20/0x20
[  509.178193][T14304]  ? load_image+0x420/0x420
[  509.182786][T14304]  ? __might_sleep+0xe0/0xe0
[  509.187500][T14304]  ? __lock_acquire+0x7d80/0x7d80
[  509.192611][T14304]  should_fail_ex+0x394/0x4c0
[  509.197379][T14304]  should_failslab+0x9/0x20
[  509.201961][T14304]  slab_pre_alloc_hook+0x59/0x300
[  509.207065][T14304]  ? __lock_acquire+0x7d80/0x7d80
[  509.212161][T14304]  ? kvmalloc_node+0x70/0x180
[  509.216921][T14304]  ? kvmalloc_node+0x70/0x180
[  509.221673][T14304]  __kmem_cache_alloc_node+0x53/0x250
[  509.227161][T14304]  ? __schedule_delayed_monitor_work+0x200/0x200
[  509.233592][T14304]  ? kvmalloc_node+0x70/0x180
[  509.238346][T14304]  __kmalloc_node+0xa6/0x240
[  509.243030][T14304]  kvmalloc_node+0x70/0x180
[  509.247611][T14304]  bpf_test_run_xdp_live+0x1c2/0x1b30
[  509.253077][T14304]  ? 0xffffffffa0004740
[  509.257307][T14304]  ? 0xffffffffa0004740
[  509.261527][T14304]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  509.267511][T14304]  ? xdp_convert_md_to_buff+0x330/0x330
[  509.273223][T14304]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  509.279557][T14304]  ? _copy_from_user+0xa5/0xe0
[  509.284404][T14304]  ? bpf_test_init+0x119/0x140
[  509.289243][T14304]  ? xdp_convert_md_to_buff+0x5b/0x330
[  509.294790][T14304]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  509.300246][T14304]  ? __lock_acquire+0x7d80/0x7d80
[  509.305378][T14304]  ? dev_put+0x80/0x80
[  509.309561][T14304]  ? dev_put+0x80/0x80
[  509.313710][T14304]  bpf_prog_test_run+0x31f/0x390
[  509.318812][T14304]  __sys_bpf+0x49d/0x890
[  509.323138][T14304]  ? bpf_link_show_fdinfo+0x390/0x390
[  509.328628][T14304]  ? lock_chain_count+0x20/0x20
[  509.333570][T14304]  __x64_sys_bpf+0x7c/0x90
[  509.338066][T14304]  do_syscall_64+0x55/0xb0
[  509.342550][T14304]  ? clear_bhb_loop+0x40/0x90
[  509.347299][T14304]  ? clear_bhb_loop+0x40/0x90
[  509.352054][T14304]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  509.358013][T14304] RIP: 0033:0x7f182c79e0d9
[  509.362491][T14304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.382181][T14304] RSP: 002b:00007f182d5a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  509.390683][T14304] RAX: ffffffffffffffda RBX: 00007f182ca25fa0 RCX: 00007f182c79e0d9
[  509.398735][T14304] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  509.406777][T14304] RBP: 00007f182d5a7090 R08: 0000000000000000 R09: 0000000000000000
[  509.414823][T14304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.422874][T14304] R13: 00007f182ca26038 R14: 00007f182ca25fa0 R15: 00007fffcd36fe38
[  509.430951][T14304]  </TASK>
[  509.600716][T14308] netlink: 'syz.3.2518': attribute type 10 has an invalid length.
[  509.645346][T14308] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  509.682589][T14308] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.732306][T14308] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  509.800137][T14312] netlink: 'syz.2.2517': attribute type 25 has an invalid length.
[  509.808989][T14312] netlink: 'syz.2.2517': attribute type 25 has an invalid length.
[  509.872403][T14066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  510.097179][T14066] veth0_vlan: entered promiscuous mode
[  510.151323][T14066] veth1_vlan: entered promiscuous mode
[  510.378706][T14333] netlink: 'syz.2.2521': attribute type 25 has an invalid length.
[  510.416158][T14333] netlink: 'syz.2.2521': attribute type 25 has an invalid length.
[  510.672406][T14066] veth0_macvtap: entered promiscuous mode
[  510.730467][T14066] veth1_macvtap: entered promiscuous mode
[  511.569956][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.590628][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.601215][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  511.612487][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.638776][T14066] batman_adv: batadv0: Interface activated: batadv_slave_0
[  511.677959][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.744717][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.772371][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.806983][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.853980][T14066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  511.880860][T14066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  511.908829][T14350] FAULT_INJECTION: forcing a failure.
[  511.908829][T14350] name failslab, interval 1, probability 0, space 0, times 0
[  511.918500][T14066] batman_adv: batadv0: Interface activated: batadv_slave_1
[  511.969053][T14350] CPU: 1 PID: 14350 Comm: syz.3.2525 Not tainted syzkaller #0
[  511.976670][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  511.986912][T14350] Call Trace:
[  511.990299][T14350]  <TASK>
[  511.993313][T14350]  dump_stack_lvl+0x18c/0x250
[  511.998166][T14350]  ? show_regs_print_info+0x20/0x20
[  512.003486][T14350]  ? load_image+0x420/0x420
[  512.008128][T14350]  ? __might_sleep+0xe0/0xe0
[  512.012833][T14350]  ? __lock_acquire+0x7d80/0x7d80
[  512.017994][T14350]  should_fail_ex+0x394/0x4c0
[  512.022325][T14066] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.022808][T14350]  should_failslab+0x9/0x20
[  512.036070][T14350]  slab_pre_alloc_hook+0x59/0x300
[  512.041293][T14350]  ? __lock_acquire+0x7d80/0x7d80
[  512.046521][T14350]  ? kvmalloc_node+0x70/0x180
[  512.051306][T14350]  ? kvmalloc_node+0x70/0x180
[  512.056088][T14350]  __kmem_cache_alloc_node+0x53/0x250
[  512.061555][T14350]  ? __schedule_delayed_monitor_work+0x200/0x200
[  512.068014][T14350]  ? kvmalloc_node+0x70/0x180
[  512.072823][T14350]  __kmalloc_node+0xa6/0x240
[  512.077568][T14350]  kvmalloc_node+0x70/0x180
[  512.082183][T14350]  bpf_test_run_xdp_live+0x1c2/0x1b30
[  512.087694][T14350]  ? 0xffffffffa0004740
[  512.091953][T14350]  ? 0xffffffffa0004740
[  512.094044][T14066] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.096184][T14350]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  512.110940][T14350]  ? xdp_convert_md_to_buff+0x330/0x330
[  512.116759][T14350]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  512.123136][T14350]  ? _copy_from_user+0xa5/0xe0
[  512.127996][T14350]  ? bpf_test_init+0x119/0x140
[  512.132826][T14350]  ? xdp_convert_md_to_buff+0x5b/0x330
[  512.138366][T14350]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  512.143819][T14350]  ? __lock_acquire+0x7d80/0x7d80
[  512.148998][T14350]  ? dev_put+0x80/0x80
[  512.153243][T14350]  ? dev_put+0x80/0x80
[  512.157413][T14350]  bpf_prog_test_run+0x31f/0x390
[  512.162450][T14350]  __sys_bpf+0x49d/0x890
[  512.166808][T14350]  ? bpf_link_show_fdinfo+0x390/0x390
[  512.172298][T14350]  ? lock_chain_count+0x20/0x20
[  512.177260][T14350]  __x64_sys_bpf+0x7c/0x90
[  512.181869][T14350]  do_syscall_64+0x55/0xb0
[  512.186384][T14350]  ? clear_bhb_loop+0x40/0x90
[  512.191161][T14350]  ? clear_bhb_loop+0x40/0x90
[  512.195983][T14350]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  512.201979][T14350] RIP: 0033:0x7f170899e0d9
[  512.206505][T14350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  512.226308][T14350] RSP: 002b:00007f17098cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.234806][T14350] RAX: ffffffffffffffda RBX: 00007f1708c25fa0 RCX: 00007f170899e0d9
[  512.242858][T14350] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  512.250917][T14350] RBP: 00007f17098cc090 R08: 0000000000000000 R09: 0000000000000000
[  512.259054][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.267175][T14350] R13: 00007f1708c26038 R14: 00007f1708c25fa0 R15: 00007ffdf5abbbb8
[  512.275261][T14350]  </TASK>
[  512.313464][T14066] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.322326][T14066] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.465077][T14352] syzkaller0: entered promiscuous mode
[  512.470655][T14352] syzkaller0: entered allmulticast mode
[  512.629898][T14357] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  512.837501][T14364] netlink: 'syz.3.2528': attribute type 25 has an invalid length.
[  512.846048][T14364] netlink: 'syz.3.2528': attribute type 25 has an invalid length.
[  512.872800][ T8020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.888116][ T8020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.952538][ T8030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.971632][ T8030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.376085][T14377] __nla_validate_parse: 5 callbacks suppressed
[  513.376174][T14377] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2530'.
[  513.586234][T14370] netlink: 'syz.1.2529': attribute type 10 has an invalid length.
[  513.609838][T14370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2529'.
[  513.653577][T14370] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  513.681439][T14370] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.753727][T14370] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  513.950186][T14389] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2533'.
[  514.184706][T14392] netlink: 'syz.3.2532': attribute type 25 has an invalid length.
[  514.221171][T14392] netlink: 'syz.3.2532': attribute type 25 has an invalid length.
[  514.242709][T14397] FAULT_INJECTION: forcing a failure.
[  514.242709][T14397] name failslab, interval 1, probability 0, space 0, times 0
[  514.279572][T14397] CPU: 1 PID: 14397 Comm: syz.2.2534 Not tainted syzkaller #0
[  514.287150][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  514.297275][T14397] Call Trace:
[  514.300616][T14397]  <TASK>
[  514.303619][T14397]  dump_stack_lvl+0x18c/0x250
[  514.308389][T14397]  ? show_regs_print_info+0x20/0x20
[  514.313666][T14397]  ? load_image+0x420/0x420
[  514.318263][T14397]  ? __might_sleep+0xe0/0xe0
[  514.322937][T14397]  ? __lock_acquire+0x7d80/0x7d80
[  514.328066][T14397]  should_fail_ex+0x394/0x4c0
[  514.332836][T14397]  should_failslab+0x9/0x20
[  514.337424][T14397]  slab_pre_alloc_hook+0x59/0x300
[  514.342536][T14397]  ? kvmalloc_node+0x70/0x180
[  514.347292][T14397]  ? kvmalloc_node+0x70/0x180
[  514.352039][T14397]  __kmem_cache_alloc_node+0x53/0x250
[  514.357502][T14397]  ? kvmalloc_node+0x70/0x180
[  514.362296][T14397]  __kmalloc_node+0xa6/0x240
[  514.366979][T14397]  kvmalloc_node+0x70/0x180
[  514.371565][T14397]  bpf_test_run_xdp_live+0x1e9/0x1b30
[  514.377035][T14397]  ? 0xffffffffa0004740
[  514.381254][T14397]  ? 0xffffffffa0004740
[  514.385476][T14397]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  514.391470][T14397]  ? xdp_convert_md_to_buff+0x330/0x330
[  514.397173][T14397]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  514.403498][T14397]  ? _copy_from_user+0xa5/0xe0
[  514.408334][T14397]  ? bpf_test_init+0x119/0x140
[  514.413167][T14397]  ? xdp_convert_md_to_buff+0x5b/0x330
[  514.418713][T14397]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  514.424167][T14397]  ? __lock_acquire+0x7d80/0x7d80
[  514.429292][T14397]  ? dev_put+0x80/0x80
[  514.433477][T14397]  ? dev_put+0x80/0x80
[  514.437623][T14397]  bpf_prog_test_run+0x31f/0x390
[  514.442646][T14397]  __sys_bpf+0x49d/0x890
[  514.446972][T14397]  ? bpf_link_show_fdinfo+0x390/0x390
[  514.452458][T14397]  ? lock_chain_count+0x20/0x20
[  514.457410][T14397]  __x64_sys_bpf+0x7c/0x90
[  514.461902][T14397]  do_syscall_64+0x55/0xb0
[  514.466385][T14397]  ? clear_bhb_loop+0x40/0x90
[  514.471131][T14397]  ? clear_bhb_loop+0x40/0x90
[  514.475884][T14397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.481848][T14397] RIP: 0033:0x7f909939e0d9
[  514.486332][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.506035][T14397] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  514.514531][T14397] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  514.522578][T14397] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  514.530626][T14397] RBP: 00007f909a1e3090 R08: 0000000000000000 R09: 0000000000000000
[  514.538664][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.546811][T14397] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  514.554859][T14397]  </TASK>
[  515.038214][T14416] netlink: 'syz.3.2538': attribute type 21 has an invalid length.
[  515.613431][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2548'.
[  516.074646][T14442] netlink: 'syz.0.2542': attribute type 21 has an invalid length.
[  516.136529][T14442] netlink: 'syz.0.2542': attribute type 1 has an invalid length.
[  516.177611][T14435] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2540'.
[  518.148535][T14480] netlink: 'syz.3.2553': attribute type 25 has an invalid length.
[  518.160078][T14480] netlink: 'syz.3.2553': attribute type 25 has an invalid length.
[  518.531496][T14487] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2555'.
[  518.567620][T14489] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2558'.
[  518.619229][T14489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  518.670382][T14492] FAULT_INJECTION: forcing a failure.
[  518.670382][T14492] name failslab, interval 1, probability 0, space 0, times 0
[  518.695249][T14492] CPU: 0 PID: 14492 Comm: syz.2.2559 Not tainted syzkaller #0
[  518.702804][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  518.712915][T14492] Call Trace:
[  518.716282][T14492]  <TASK>
[  518.719259][T14492]  dump_stack_lvl+0x18c/0x250
[  518.724012][T14492]  ? show_regs_print_info+0x20/0x20
[  518.729277][T14492]  ? load_image+0x420/0x420
[  518.733851][T14492]  ? __might_sleep+0xe0/0xe0
[  518.738595][T14492]  ? __lock_acquire+0x7d80/0x7d80
[  518.743691][T14492]  should_fail_ex+0x394/0x4c0
[  518.748442][T14492]  should_failslab+0x9/0x20
[  518.753020][T14492]  slab_pre_alloc_hook+0x59/0x300
[  518.758124][T14492]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  518.763576][T14492]  __kmem_cache_alloc_node+0x53/0x250
[  518.768992][T14492]  ? __asan_memset+0x22/0x40
[  518.773624][T14492]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  518.778950][T14492]  kmalloc_trace+0x2a/0xe0
[  518.783416][T14492]  __xdp_reg_mem_model+0x1e3/0x5a0
[  518.788565][T14492]  ? kvmalloc_node+0x70/0x180
[  518.793283][T14492]  ? kvmalloc_node+0x70/0x180
[  518.798013][T14492]  ? xdp_reg_mem_model+0x40/0x40
[  518.803066][T14492]  xdp_reg_mem_model+0x22/0x40
[  518.807899][T14492]  bpf_test_run_xdp_live+0x262/0x1b30
[  518.813338][T14492]  ? 0xffffffffa0004740
[  518.817536][T14492]  ? 0xffffffffa0004740
[  518.821724][T14492]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  518.827683][T14492]  ? xdp_convert_md_to_buff+0x330/0x330
[  518.833344][T14492]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  518.839628][T14492]  ? _copy_from_user+0xa5/0xe0
[  518.844428][T14492]  ? bpf_test_init+0x119/0x140
[  518.849225][T14492]  ? xdp_convert_md_to_buff+0x5b/0x330
[  518.854721][T14492]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  518.860131][T14492]  ? __lock_acquire+0x7d80/0x7d80
[  518.865240][T14492]  ? dev_put+0x80/0x80
[  518.869355][T14492]  ? dev_put+0x80/0x80
[  518.873484][T14492]  bpf_prog_test_run+0x31f/0x390
[  518.878545][T14492]  __sys_bpf+0x49d/0x890
[  518.882821][T14492]  ? bpf_link_show_fdinfo+0x390/0x390
[  518.888241][T14492]  ? lock_chain_count+0x20/0x20
[  518.893160][T14492]  __x64_sys_bpf+0x7c/0x90
[  518.897620][T14492]  do_syscall_64+0x55/0xb0
[  518.902090][T14492]  ? clear_bhb_loop+0x40/0x90
[  518.906827][T14492]  ? clear_bhb_loop+0x40/0x90
[  518.911541][T14492]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  518.917492][T14492] RIP: 0033:0x7f909939e0d9
[  518.921962][T14492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.941614][T14492] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  518.950077][T14492] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  518.958089][T14492] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  518.966099][T14492] RBP: 00007f909a1e3090 R08: 0000000000000000 R09: 0000000000000000
[  518.974100][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.982096][T14492] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  518.990111][T14492]  </TASK>
[  519.172758][T14497] FAULT_INJECTION: forcing a failure.
[  519.172758][T14497] name failslab, interval 1, probability 0, space 0, times 0
[  519.204653][T14497] CPU: 1 PID: 14497 Comm: syz.2.2561 Not tainted syzkaller #0
[  519.212229][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  519.222356][T14497] Call Trace:
[  519.225701][T14497]  <TASK>
[  519.228712][T14497]  dump_stack_lvl+0x18c/0x250
[  519.233494][T14497]  ? show_regs_print_info+0x20/0x20
[  519.238785][T14497]  ? load_image+0x420/0x420
[  519.243393][T14497]  ? __might_sleep+0xe0/0xe0
[  519.248065][T14497]  ? __lock_acquire+0x7d80/0x7d80
[  519.253190][T14497]  should_fail_ex+0x394/0x4c0
[  519.257977][T14497]  should_failslab+0x9/0x20
[  519.262566][T14497]  slab_pre_alloc_hook+0x59/0x300
[  519.267687][T14497]  ? kvmalloc_node+0x70/0x180
[  519.272430][T14497]  ? kvmalloc_node+0x70/0x180
[  519.277160][T14497]  __kmem_cache_alloc_node+0x53/0x250
[  519.282597][T14497]  ? kvmalloc_node+0x70/0x180
[  519.287332][T14497]  __kmalloc_node+0xa6/0x240
[  519.291995][T14497]  kvmalloc_node+0x70/0x180
[  519.296561][T14497]  page_pool_create+0x1eb/0x5c0
[  519.301506][T14497]  bpf_test_run_xdp_live+0x203/0x1b30
[  519.306950][T14497]  ? 0xffffffffa0004740
[  519.311153][T14497]  ? 0xffffffffa0004740
[  519.315358][T14497]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  519.321323][T14497]  ? xdp_convert_md_to_buff+0x330/0x330
[  519.327011][T14497]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  519.333314][T14497]  ? _copy_from_user+0xa5/0xe0
[  519.338136][T14497]  ? bpf_test_init+0x119/0x140
[  519.342955][T14497]  ? xdp_convert_md_to_buff+0x5b/0x330
[  519.348476][T14497]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  519.353910][T14497]  ? __lock_acquire+0x7d80/0x7d80
[  519.359036][T14497]  ? dev_put+0x80/0x80
[  519.363218][T14497]  ? dev_put+0x80/0x80
[  519.367352][T14497]  bpf_prog_test_run+0x31f/0x390
[  519.372345][T14497]  __sys_bpf+0x49d/0x890
[  519.376650][T14497]  ? bpf_link_show_fdinfo+0x390/0x390
[  519.382115][T14497]  ? lock_chain_count+0x20/0x20
[  519.387042][T14497]  __x64_sys_bpf+0x7c/0x90
[  519.391511][T14497]  do_syscall_64+0x55/0xb0
[  519.395972][T14497]  ? clear_bhb_loop+0x40/0x90
[  519.400689][T14497]  ? clear_bhb_loop+0x40/0x90
[  519.405423][T14497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  519.411364][T14497] RIP: 0033:0x7f909939e0d9
[  519.415839][T14497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.435503][T14497] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  519.443985][T14497] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  519.451998][T14497] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  519.460025][T14497] RBP: 00007f909a1e3090 R08: 0000000000000000 R09: 0000000000000000
[  519.468050][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.476072][T14497] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  519.484135][T14497]  </TASK>
[  519.544645][T14497] page_pool_create() gave up with errno -12
[  519.925022][T14511] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2564'.
[  519.946383][T14511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  520.573183][T14527] netlink: 'syz.1.2572': attribute type 30 has an invalid length.
[  520.613882][T14526] netlink: 'syz.2.2573': attribute type 2 has an invalid length.
[  520.621719][T14526] netlink: 'syz.2.2573': attribute type 2 has an invalid length.
[  520.643887][T14526] netlink: 199676 bytes leftover after parsing attributes in process `syz.2.2573'.
[  520.658025][T14526] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2573'.
[  520.668581][T14531] netlink: 'syz.0.2571': attribute type 25 has an invalid length.
[  520.677909][T14531] netlink: 'syz.0.2571': attribute type 25 has an invalid length.
[  520.695088][T14530] netlink: 'syz.3.2574': attribute type 9 has an invalid length.
[  520.709790][T14530] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2574'.
[  521.650107][T14546] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2579'.
[  521.680406][T14546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  521.833051][T14552] FAULT_INJECTION: forcing a failure.
[  521.833051][T14552] name failslab, interval 1, probability 0, space 0, times 0
[  521.863489][T14552] CPU: 1 PID: 14552 Comm: syz.2.2581 Not tainted syzkaller #0
[  521.871059][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  521.881274][T14552] Call Trace:
[  521.884619][T14552]  <TASK>
[  521.887610][T14552]  dump_stack_lvl+0x18c/0x250
[  521.892370][T14552]  ? show_regs_print_info+0x20/0x20
[  521.897635][T14552]  ? load_image+0x420/0x420
[  521.902204][T14552]  ? __might_sleep+0xe0/0xe0
[  521.906856][T14552]  ? __lock_acquire+0x7d80/0x7d80
[  521.911969][T14552]  should_fail_ex+0x394/0x4c0
[  521.916743][T14552]  should_failslab+0x9/0x20
[  521.921414][T14552]  slab_pre_alloc_hook+0x59/0x300
[  521.926547][T14552]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  521.931990][T14552]  __kmem_cache_alloc_node+0x53/0x250
[  521.937471][T14552]  ? __asan_memset+0x22/0x40
[  521.942173][T14552]  ? __xdp_reg_mem_model+0x1e3/0x5a0
[  521.947561][T14552]  kmalloc_trace+0x2a/0xe0
[  521.952055][T14552]  __xdp_reg_mem_model+0x1e3/0x5a0
[  521.957244][T14552]  ? kvmalloc_node+0x70/0x180
[  521.962000][T14552]  ? kvmalloc_node+0x70/0x180
[  521.966752][T14552]  ? xdp_reg_mem_model+0x40/0x40
[  521.971792][T14552]  xdp_reg_mem_model+0x22/0x40
[  521.976635][T14552]  bpf_test_run_xdp_live+0x262/0x1b30
[  521.982119][T14552]  ? 0xffffffffa0004740
[  521.986360][T14552]  ? 0xffffffffa0004740
[  521.990584][T14552]  ? bpf_dispatcher_change_prog+0xc96/0xf10
[  521.996565][T14552]  ? xdp_convert_md_to_buff+0x330/0x330
[  522.002282][T14552]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  522.008602][T14552]  ? _copy_from_user+0xa5/0xe0
[  522.013437][T14552]  ? bpf_test_init+0x119/0x140
[  522.018284][T14552]  ? xdp_convert_md_to_buff+0x5b/0x330
[  522.023856][T14552]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  522.029320][T14552]  ? __lock_acquire+0x7d80/0x7d80
[  522.034454][T14552]  ? dev_put+0x80/0x80
[  522.038626][T14552]  ? dev_put+0x80/0x80
[  522.042759][T14552]  bpf_prog_test_run+0x31f/0x390
[  522.047779][T14552]  __sys_bpf+0x49d/0x890
[  522.052093][T14552]  ? bpf_link_show_fdinfo+0x390/0x390
[  522.057580][T14552]  ? lock_chain_count+0x20/0x20
[  522.062523][T14552]  __x64_sys_bpf+0x7c/0x90
[  522.067011][T14552]  do_syscall_64+0x55/0xb0
[  522.071484][T14552]  ? clear_bhb_loop+0x40/0x90
[  522.076225][T14552]  ? clear_bhb_loop+0x40/0x90
[  522.081000][T14552]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  522.086959][T14552] RIP: 0033:0x7f909939e0d9
[  522.091433][T14552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  522.111097][T14552] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  522.119594][T14552] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  522.127642][T14552] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  522.135670][T14552] RBP: 00007f909a1e3090 R08: 0000000000000000 R09: 0000000000000000
[  522.143696][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.151726][T14552] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  522.159804][T14552]  </TASK>
[  522.378467][T14554] netlink: 'syz.0.2582': attribute type 9 has an invalid length.
[  522.386738][T14554] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2582'.
[  522.604158][T14554] netlink: 'syz.0.2582': attribute type 9 has an invalid length.
[  522.624537][T14554] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2582'.
[  523.141734][T14579] netlink: 'syz.2.2587': attribute type 25 has an invalid length.
[  523.173304][T14579] netlink: 'syz.2.2587': attribute type 25 has an invalid length.
[  523.308864][T14581] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2590'.
[  523.318218][T14581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  525.018799][T14608] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2601'.
[  525.041879][T14608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  525.709471][T14626] netlink: 'syz.1.2604': attribute type 25 has an invalid length.
[  525.717947][T14626] netlink: 'syz.1.2604': attribute type 25 has an invalid length.
[  525.872191][T14632] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2609'.
[  525.882664][T14632] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  526.234038][T14641] netlink: 'syz.3.2612': attribute type 39 has an invalid length.
[  526.717168][T14648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2613'.
[  526.767021][T14648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  527.023014][T14654] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2616'.
[  527.033544][T14654] netlink: zone id is out of range
[  527.057839][T14654] netlink: zone id is out of range
[  527.064175][T14654] netlink: zone id is out of range
[  527.093353][T14654] netlink: zone id is out of range
[  527.098595][T14654] netlink: zone id is out of range
[  527.118765][T14654] netlink: zone id is out of range
[  527.130486][T14654] netlink: zone id is out of range
[  527.481559][T14667] netlink: 'syz.1.2621': attribute type 25 has an invalid length.
[  527.489654][T14667] netlink: 'syz.1.2621': attribute type 25 has an invalid length.
[  528.668880][T14684] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2626'.
[  529.477929][T14708] netlink: 'syz.3.2632': attribute type 25 has an invalid length.
[  529.496425][T14708] netlink: 'syz.3.2632': attribute type 25 has an invalid length.
[  531.009714][T14732] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2643'.
[  531.239510][T14740] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2641'.
[  531.257076][T14740] net_ratelimit: 84 callbacks suppressed
[  531.257098][T14740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  532.044542][T14767] netlink: 'syz.3.2648': attribute type 25 has an invalid length.
[  532.054402][T14767] netlink: 'syz.3.2648': attribute type 25 has an invalid length.
[  532.597634][T14782] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2655'.
[  532.616681][T14782] hsr_slave_0: left promiscuous mode
[  533.349021][T14782] hsr_slave_1: left promiscuous mode
[  533.573236][T14790] netlink: 'syz.3.2658': attribute type 21 has an invalid length.
[  533.589950][T14790] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2658'.
[  533.737462][T14790] sit0: entered allmulticast mode
[  533.878789][T14795] sit0: entered promiscuous mode
[  533.942791][T14793] netlink: 'syz.1.2660': attribute type 29 has an invalid length.
[  534.114257][T14793] netlink: 'syz.1.2660': attribute type 29 has an invalid length.
[  534.134310][T14797] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2659'.
[  534.151002][T14797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  534.209217][T14796] netlink: 'syz.1.2660': attribute type 29 has an invalid length.
[  534.270951][T14798] netlink: 'syz.1.2660': attribute type 29 has an invalid length.
[  534.319677][T14799] netlink: 'syz.1.2660': attribute type 29 has an invalid length.
[  534.421909][T14803] netlink: 'syz.3.2662': attribute type 9 has an invalid length.
[  534.442745][T14803] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2662'.
[  535.416070][T14822] netlink: 'syz.1.2665': attribute type 25 has an invalid length.
[  535.436841][T14822] netlink: 'syz.1.2665': attribute type 25 has an invalid length.
[  535.789530][T14831] netlink: 'syz.2.2671': attribute type 29 has an invalid length.
[  535.823411][T14831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2671'.
[  536.280539][T14843] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2674'.
[  536.428036][T14845] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2672'.
[  536.497582][T14845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.609118][T14853] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2677'.
[  537.773659][T14879] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2685'.
[  538.113911][T14884] sit0: entered allmulticast mode
[  538.343598][T14891] TCP: TCP_TX_DELAY enabled
[  538.350915][T14879] sit0: entered promiscuous mode
[  538.660992][T14885] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2688'.
[  538.677476][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.974403][T14900] validate_nla: 4 callbacks suppressed
[  538.974444][T14900] netlink: 'syz.3.2694': attribute type 21 has an invalid length.
[  539.497136][T14913] netlink: 'syz.1.2697': attribute type 29 has an invalid length.
[  539.499547][T14923] netlink: 'syz.3.2698': attribute type 25 has an invalid length.
[  539.527316][T14923] netlink: 'syz.3.2698': attribute type 25 has an invalid length.
[  539.544633][T14913] netlink: 'syz.1.2697': attribute type 3 has an invalid length.
[  539.563328][T14913] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2697'.
[  540.013761][T14936] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2701'.
[  540.047399][T14936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  540.506205][T14939] netlink: 'syz.2.2703': attribute type 2 has an invalid length.
[  540.516007][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2703'.
[  541.007076][T14955] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2711'.
[  541.027080][T14955] hsr_slave_0: left promiscuous mode
[  541.036657][T14955] hsr_slave_1: left promiscuous mode
[  541.314282][T14965] netlink: 'syz.2.2712': attribute type 25 has an invalid length.
[  541.326870][T14965] netlink: 'syz.2.2712': attribute type 25 has an invalid length.
[  541.670035][T14971] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2714'.
[  541.723795][T14971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  542.274665][ T5084] Bluetooth: hci2: ISO packet for unknown connection handle 8
[  543.837860][T15012] netlink: 'syz.3.2730': attribute type 21 has an invalid length.
[  543.912390][T15017] netlink: 'syz.2.2731': attribute type 29 has an invalid length.
[  543.955481][T15017] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2731'.
[  543.976995][T15017] geneve0: entered promiscuous mode
[  544.011096][T15017] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  544.158422][T15021] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2729'.
[  544.223408][T15021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  544.264246][T15024] validate_nla: 2 callbacks suppressed
[  544.264265][T15024] netlink: 'syz.1.2732': attribute type 25 has an invalid length.
[  544.298559][T15024] netlink: 'syz.1.2732': attribute type 25 has an invalid length.
[  545.339552][T15042] netlink: 'syz.0.2740': attribute type 10 has an invalid length.
[  545.388995][T15042] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2740'.
[  545.793209][T15056] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2744'.
[  545.804407][T15056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  546.287756][T15071] syzkaller0: entered promiscuous mode
[  546.295140][T15071] syzkaller0: entered allmulticast mode
[  549.215621][T15076] netlink: 'syz.1.2749': attribute type 25 has an invalid length.
[  549.223887][T15076] netlink: 'syz.1.2749': attribute type 25 has an invalid length.
[  549.394715][T15107] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2761'.
[  549.414043][T15109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2761'.
[  549.612486][T15114] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2759'.
[  549.649713][T15114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.040663][T15123] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2766'.
[  550.238473][T15131] netlink: 'syz.0.2767': attribute type 25 has an invalid length.
[  550.254816][T15131] netlink: 'syz.0.2767': attribute type 25 has an invalid length.
[  550.277510][T15135] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode
[  550.385940][T15139] netlink: 'syz.1.2771': attribute type 29 has an invalid length.
[  550.394613][T15139] netlink: 'syz.1.2771': attribute type 29 has an invalid length.
[  550.461607][T15139] netlink: 'syz.1.2771': attribute type 29 has an invalid length.
[  550.503650][T15139] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2771'.
[  550.637091][T15139] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2771'.
[  550.663664][T15139] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.2771'.
[  550.687033][T15147] netlink: 'syz.1.2771': attribute type 29 has an invalid length.
[  550.704375][T15139] netlink: 'syz.1.2771': attribute type 29 has an invalid length.
[  551.458515][T15166] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2777'.
[  551.468619][T15166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  551.731327][T15171] netlink: 'syz.0.2781': attribute type 15 has an invalid length.
[  551.779503][T15171] netlink: 'syz.0.2781': attribute type 7 has an invalid length.
[  551.805843][T15171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2781'.
[  552.340022][T15190] netlink: 'syz.3.2785': attribute type 25 has an invalid length.
[  552.605756][T15199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2789'.
[  552.642360][T15199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  554.520557][T15248] __nla_validate_parse: 2 callbacks suppressed
[  554.520578][T15248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2805'.
[  554.747312][T15251] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2806'.
[  554.838246][T15251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  559.289532][T15262] veth1_vlan (unregistering): left allmulticast mode
[  559.613857][T15278] validate_nla: 6 callbacks suppressed
[  559.613875][T15278] netlink: 'syz.2.2815': attribute type 25 has an invalid length.
[  559.632699][T15278] netlink: 'syz.2.2815': attribute type 25 has an invalid length.
[  559.645651][T15286] netlink: 'syz.1.2816': attribute type 25 has an invalid length.
[  559.673278][T15286] netlink: 'syz.1.2816': attribute type 25 has an invalid length.
[  559.840341][T15289] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2817'.
[  559.858196][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'.
[  560.366084][T15303] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2820'.
[  560.382470][T15303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.950691][T15327] netlink: 'syz.3.2829': attribute type 25 has an invalid length.
[  560.959012][T15327] netlink: 'syz.3.2829': attribute type 25 has an invalid length.
[  560.972707][T15328] netlink: 'syz.2.2828': attribute type 25 has an invalid length.
[  560.981268][T15328] netlink: 'syz.2.2828': attribute type 25 has an invalid length.
[  562.132617][T15338] syzkaller0: entered promiscuous mode
[  562.162678][T15338] syzkaller0: entered allmulticast mode
[  562.234439][T15349] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2833'.
[  562.319058][T15349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  562.800999][T15361] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2837'.
[  563.192540][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  563.199267][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  564.468326][T15356] netlink: 'syz.2.2837': attribute type 21 has an invalid length.
[  564.476782][ T6103] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  564.486398][T15356] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2837'.
[  564.498887][T15356] netlink: 'syz.2.2837': attribute type 4 has an invalid length.
[  564.507525][T15361] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2837'.
[  565.060785][T15380] validate_nla: 2 callbacks suppressed
[  565.060804][T15380] netlink: 'syz.2.2843': attribute type 25 has an invalid length.
[  565.123771][T15380] netlink: 'syz.2.2843': attribute type 25 has an invalid length.
[  565.239555][T15386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2845'.
[  565.256752][T15386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  568.510818][T15413] netlink: 'syz.3.2853': attribute type 25 has an invalid length.
[  568.518880][T15413] netlink: 'syz.3.2853': attribute type 25 has an invalid length.
[  568.526962][T15418] netlink: 'syz.0.2857': attribute type 25 has an invalid length.
[  568.543244][T15418] netlink: 'syz.0.2857': attribute type 25 has an invalid length.
[  568.557280][T15422] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2858'.
[  568.574249][T15422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  568.709198][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2860'.
[  568.725233][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'.
[  568.741535][T15429] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2860'.
[  568.756261][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2860'.
[  568.770122][T15429] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2860'.
[  569.341621][T15453] netlink: 'syz.3.2867': attribute type 25 has an invalid length.
[  569.353222][T15453] netlink: 'syz.3.2867': attribute type 25 has an invalid length.
[  569.371057][T15452] netlink: 'syz.0.2868': attribute type 25 has an invalid length.
[  569.379645][T15452] netlink: 'syz.0.2868': attribute type 25 has an invalid length.
[  569.421205][T15455] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2869'.
[  569.906484][T15459] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2870'.
[  569.922373][T15459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  571.342108][T15500] validate_nla: 1 callbacks suppressed
[  571.342123][T15500] netlink: 'syz.1.2882': attribute type 25 has an invalid length.
[  571.358022][T15500] netlink: 'syz.1.2882': attribute type 25 has an invalid length.
[  571.437841][T15502] netlink: 'syz.0.2881': attribute type 25 has an invalid length.
[  571.445997][T15502] netlink: 'syz.0.2881': attribute type 25 has an invalid length.
[  571.782503][T15505] netlink: 'syz.3.2883': attribute type 2 has an invalid length.
[  571.834745][T15505] netlink: 'syz.3.2883': attribute type 1 has an invalid length.
[  571.858555][T15505] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2883'.
[  571.895304][T15505] sit0: left promiscuous mode
[  572.675464][T15518] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2887'.
[  573.611436][T15539] netlink: 'syz.1.2893': attribute type 10 has an invalid length.
[  573.625664][T15539] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2893'.
[  573.862713][T15548] netlink: 'syz.3.2895': attribute type 25 has an invalid length.
[  573.871999][T15548] netlink: 'syz.3.2895': attribute type 25 has an invalid length.
[  573.916616][T15552] netlink: 'syz.1.2896': attribute type 25 has an invalid length.
[  574.086208][T15555] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2899'.
[  574.111134][T15555] sit0: entered allmulticast mode
[  575.073018][T15572] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2904'.
[  576.744798][T15604] validate_nla: 3 callbacks suppressed
[  576.744811][T15604] netlink: 'syz.0.2910': attribute type 25 has an invalid length.
[  576.776531][T15604] netlink: 'syz.0.2910': attribute type 25 has an invalid length.
[  576.853478][T15606] netlink: 'syz.2.2911': attribute type 25 has an invalid length.
[  576.861396][T15606] netlink: 'syz.2.2911': attribute type 25 has an invalid length.
[  578.981452][T15614] netlink: 'syz.2.2914': attribute type 10 has an invalid length.
[  579.053510][T15614] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2914'.
[  579.542748][T15626] netlink: 'syz.1.2919': attribute type 5 has an invalid length.
[  580.552124][T15636] netlink: 'syz.1.2922': attribute type 25 has an invalid length.
[  580.583585][T15636] netlink: 'syz.1.2922': attribute type 25 has an invalid length.
[  580.623354][T15607] Bluetooth: hci0: command 0x0406 tx timeout
[  580.969265][T15659] netlink: 'syz.2.2929': attribute type 9 has an invalid length.
[  580.984322][T15659] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2929'.
[  581.348685][T15664] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2930'.
[  582.846570][T15694] netlink: 'syz.0.2938': attribute type 25 has an invalid length.
[  582.873420][T15694] netlink: 'syz.0.2938': attribute type 25 has an invalid length.
[  584.924060][T15703] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  584.947172][T15703] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2941'.
[  584.965849][T15702] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  584.987146][T15702] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2941'.
[  585.010551][T15705] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2942'.
[  585.034023][T15705] netlink: 'syz.0.2942': attribute type 21 has an invalid length.
[  585.063283][T15705] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2942'.
[  585.227500][T15710] syzkaller0: entered allmulticast mode
[  585.288808][T15715] netlink: 'syz.0.2944': attribute type 9 has an invalid length.
[  585.363211][T15715] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2944'.
[  586.529792][T15743] netlink: 'syz.2.2950': attribute type 25 has an invalid length.
[  586.556388][T15743] netlink: 'syz.2.2950': attribute type 25 has an invalid length.
[  589.647882][T15758] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2956'.
[  589.952151][T15765] netlink: 'syz.1.2964': attribute type 25 has an invalid length.
[  589.973160][T15765] netlink: 'syz.1.2964': attribute type 25 has an invalid length.
[  590.840911][T15788] netlink: 'syz.2.2962': attribute type 25 has an invalid length.
[  590.850751][T15788] netlink: 'syz.2.2962': attribute type 25 has an invalid length.
[  590.867292][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[  590.884907][T15782] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2960'.
[  591.086249][T15797] netlink: 'syz.0.2966': attribute type 9 has an invalid length.
[  591.095918][T15797] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2966'.
[  591.688664][T15812] netlink: 'syz.1.2969': attribute type 25 has an invalid length.
[  591.711457][T15812] netlink: 'syz.1.2969': attribute type 25 has an invalid length.
[  591.775930][T15817] netlink: 'syz.3.2970': attribute type 25 has an invalid length.
[  591.807445][T15817] netlink: 'syz.3.2970': attribute type 25 has an invalid length.
[  592.139721][T15828] netlink: 'syz.2.2976': attribute type 23 has an invalid length.
[  592.155323][T15828] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2976'.
[  596.145777][T15876] validate_nla: 2 callbacks suppressed
[  596.145800][T15876] netlink: 'syz.2.2991': attribute type 25 has an invalid length.
[  596.177089][T15876] netlink: 'syz.2.2991': attribute type 25 has an invalid length.
[  596.361128][T15879] netlink: 'syz.2.2992': attribute type 64 has an invalid length.
[  596.650737][T15891] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2995'.
[  596.732567][T15890] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2995'.
[  596.829128][T15888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2993'.
[  596.876113][T15888] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2993'.
[  597.345918][T15912] netlink: 'syz.2.3000': attribute type 25 has an invalid length.
[  597.356180][T15912] netlink: 'syz.2.3000': attribute type 25 has an invalid length.
[  597.605938][T15920] netlink: 'syz.1.3003': attribute type 10 has an invalid length.
[  597.636626][T15920] 8021q: adding VLAN 0 to HW filter on device team0
[  597.655991][T15920] bond0: (slave team0): Enslaving as an active interface with an up link
[  598.407039][T15929] netlink: 'syz.1.3007': attribute type 2 has an invalid length.
[  598.427983][T15929] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3007'.
[  598.579650][T15939] netlink: 'syz.2.3009': attribute type 11 has an invalid length.
[  598.598192][T15939] netlink: 212788 bytes leftover after parsing attributes in process `syz.2.3009'.
[  598.611106][T15939] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3009'.
[  598.984649][T15955] syzkaller0: entered promiscuous mode
[  598.993617][T15955] syzkaller0: entered allmulticast mode
[  599.017438][T15952] bridge0: port 3(batadv0) entered blocking state
[  599.036479][T15959] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3013'.
[  599.046584][T15952] bridge0: port 3(batadv0) entered disabled state
[  599.060461][T15952] batadv0: entered allmulticast mode
[  599.072761][T15952] batadv0: entered promiscuous mode
[  599.097653][T15952] bridge0: port 3(batadv0) entered blocking state
[  599.104712][T15952] bridge0: port 3(batadv0) entered forwarding state
[  599.307646][   T32] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  599.317348][   T32] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  601.288948][T15962] netlink: 'syz.2.3017': attribute type 25 has an invalid length.
[  601.297121][T15962] netlink: 'syz.2.3017': attribute type 25 has an invalid length.
[  601.690887][T15996] netlink: 'syz.1.3023': attribute type 25 has an invalid length.
[  601.705961][T15996] netlink: 'syz.1.3023': attribute type 25 has an invalid length.
[  601.903325][T16005] netlink: 'syz.2.3031': attribute type 25 has an invalid length.
[  601.921129][T16005] netlink: 'syz.2.3031': attribute type 25 has an invalid length.
[  602.168214][T16009] netlink: 'syz.3.3033': attribute type 16 has an invalid length.
[  602.181431][T16009] netlink: 'syz.3.3033': attribute type 3 has an invalid length.
[  602.196755][T16009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3033'.
[  602.859620][T16025] netlink: 'syz.0.3036': attribute type 9 has an invalid length.
[  602.868430][T16025] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3036'.
[  603.017331][T16029] bridge0: port 3(batadv0) entered blocking state
[  603.069173][T16029] bridge0: port 3(batadv0) entered disabled state
[  603.081267][T16029] batadv0: entered allmulticast mode
[  603.095392][T16033] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3040'.
[  603.101411][T16029] batadv0: entered promiscuous mode
[  603.122059][T16029] bridge0: port 3(batadv0) entered blocking state
[  603.129696][T16029] bridge0: port 3(batadv0) entered forwarding state
[  603.433158][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  603.442535][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  606.229189][T15607] Bluetooth: hci4: command 0x0406 tx timeout
[  606.332044][T16045] netlink: 'syz.1.3044': attribute type 29 has an invalid length.
[  606.343407][T16045] netlink: 'syz.1.3044': attribute type 29 has an invalid length.
[  606.460220][T16052] netlink: 'syz.3.3043': attribute type 25 has an invalid length.
[  606.474839][T16052] netlink: 'syz.3.3043': attribute type 25 has an invalid length.
[  606.726312][T16059] netlink: 'syz.0.3048': attribute type 25 has an invalid length.
[  606.740122][T16059] netlink: 'syz.0.3048': attribute type 25 has an invalid length.
[  607.296078][T16069] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3052'.
[  607.306398][T16069] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  607.686813][T16078] bridge0: port 3(batadv0) entered blocking state
[  607.704014][T16078] bridge0: port 3(batadv0) entered disabled state
[  607.712650][T16078] batadv0: entered allmulticast mode
[  607.733819][T16078] batadv0: entered promiscuous mode
[  607.754600][T16083] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3053'.
[  607.765028][T16078] bridge0: port 3(batadv0) entered blocking state
[  607.772193][T16078] bridge0: port 3(batadv0) entered forwarding state
[  607.779496][   T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  607.789101][   T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  607.902825][   T11] tipc: Subscription rejected, illegal request
[  607.949469][T16079] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3055'.
[  607.965794][T16088] sit0: entered promiscuous mode
[  607.992444][T16079] netlink: get zone limit has 4 unknown bytes
[  608.174273][T16082] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  612.232247][T16098] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3061'.
[  612.245486][T16098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  612.262679][T16101] netlink: 'syz.2.3059': attribute type 25 has an invalid length.
[  612.293266][T16101] netlink: 'syz.2.3059': attribute type 25 has an invalid length.
[  612.301658][T16113] netlink: 'syz.3.3064': attribute type 25 has an invalid length.
[  612.323202][T16113] netlink: 'syz.3.3064': attribute type 25 has an invalid length.
[  612.558177][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'.
[  612.660729][T16120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'.
[  612.934856][T16120] syzkaller0: entered promiscuous mode
[  612.940440][T16120] syzkaller0: entered allmulticast mode
[  615.963927][T16142] netlink: 'syz.2.3073': attribute type 10 has an invalid length.
[  615.986070][T16142] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  616.009919][T16147] netlink: 'syz.3.3074': attribute type 25 has an invalid length.
[  616.021590][T16147] netlink: 'syz.3.3074': attribute type 25 has an invalid length.
[  616.193246][T16151] netlink: 'syz.3.3076': attribute type 25 has an invalid length.
[  616.201422][T16151] netlink: 'syz.3.3076': attribute type 25 has an invalid length.
[  616.276956][T16154] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3077'.
[  616.487293][T16158] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3079'.
[  616.560015][T16160] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3080'.
[  617.684662][T16211] netlink: 'syz.1.3084': attribute type 25 has an invalid length.
[  617.692613][T16211] netlink: 'syz.1.3084': attribute type 25 has an invalid length.
[  617.887506][T16232] netlink: 'syz.3.3085': attribute type 10 has an invalid length.
[  618.264203][T16232] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  618.335627][T16243] netlink: 'syz.0.3087': attribute type 25 has an invalid length.
[  618.363939][T16243] netlink: 'syz.0.3087': attribute type 25 has an invalid length.
[  618.454365][T16246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3086'.
[  618.588480][T16246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3086'.
[  618.688681][T16247] syzkaller0: entered promiscuous mode
[  618.696723][T16247] syzkaller0: entered allmulticast mode
[  621.587833][T15607] Bluetooth: hci2: command 0x0406 tx timeout
[  621.713360][T16258] netlink: 'syz.0.3099': attribute type 25 has an invalid length.
[  621.721247][T16258] netlink: 'syz.0.3099': attribute type 25 has an invalid length.
[  621.735722][T16272] netlink: 'syz.3.3096': attribute type 25 has an invalid length.
[  621.744330][T16272] netlink: 'syz.3.3096': attribute type 25 has an invalid length.
[  622.080748][T16282] netlink: 'syz.0.3098': attribute type 10 has an invalid length.
[  622.194102][T16282] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  622.423532][T16293] FAULT_INJECTION: forcing a failure.
[  622.423532][T16293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  622.470470][T16293] CPU: 1 PID: 16293 Comm: syz.2.3104 Not tainted syzkaller #0
[  622.478015][T16293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  622.488113][T16293] Call Trace:
[  622.491433][T16293]  <TASK>
[  622.494398][T16293]  dump_stack_lvl+0x18c/0x250
[  622.499168][T16293]  ? show_regs_print_info+0x20/0x20
[  622.504419][T16293]  ? load_image+0x420/0x420
[  622.508977][T16293]  ? __lock_acquire+0x7d80/0x7d80
[  622.514059][T16293]  ? snprintf+0xe9/0x140
[  622.518355][T16293]  should_fail_ex+0x394/0x4c0
[  622.523102][T16293]  _copy_to_user+0x2f/0xa0
[  622.527567][T16293]  simple_read_from_buffer+0xe7/0x150
[  622.533026][T16293]  proc_fail_nth_read+0x1e8/0x260
[  622.538126][T16293]  ? proc_fault_inject_write+0x360/0x360
[  622.543815][T16293]  ? fsnotify_perm+0x271/0x5e0
[  622.548635][T16293]  ? proc_fault_inject_write+0x360/0x360
[  622.554322][T16293]  vfs_read+0x298/0x990
[  622.558535][T16293]  ? kernel_read+0x1e0/0x1e0
[  622.563183][T16293]  ? __fget_files+0x28/0x460
[  622.567826][T16293]  ? __fget_files+0x3fc/0x460
[  622.572580][T16293]  ? __fdget_pos+0x2a3/0x330
[  622.577232][T16293]  ? ksys_read+0x74/0x260
[  622.581619][T16293]  ksys_read+0x151/0x260
[  622.585928][T16293]  ? vfs_write+0x9a0/0x9a0
[  622.590406][T16293]  ? lockdep_hardirqs_on+0x98/0x150
[  622.595661][T16293]  do_syscall_64+0x55/0xb0
[  622.600131][T16293]  ? clear_bhb_loop+0x40/0x90
[  622.604864][T16293]  ? clear_bhb_loop+0x40/0x90
[  622.609619][T16293]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.615572][T16293] RIP: 0033:0x7f909935e90e
[  622.620028][T16293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  622.639703][T16293] RSP: 002b:00007f909a1e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  622.648209][T16293] RAX: ffffffffffffffda RBX: 00007f909a1e36c0 RCX: 00007f909935e90e
[  622.656231][T16293] RDX: 000000000000000f RSI: 00007f909a1e30a0 RDI: 0000000000000004
[  622.664290][T16293] RBP: 00007f909a1e3090 R08: 0000000000000000 R09: 0000000000000000
[  622.672319][T16293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.680339][T16293] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  622.688386][T16293]  </TASK>
[  623.091684][T16297] netlink: 'syz.2.3106': attribute type 25 has an invalid length.
[  623.103390][T16297] netlink: 'syz.2.3106': attribute type 25 has an invalid length.
[  623.287546][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3107'.
[  623.836455][T16320] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3110'.
[  623.924552][T16303] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3107'.
[  624.010360][T16307] syzkaller0: entered promiscuous mode
[  624.017640][T16307] syzkaller0: entered allmulticast mode
[  624.070939][T16319] netlink: 'syz.2.3109': attribute type 25 has an invalid length.
[  624.079194][T16319] netlink: 'syz.2.3109': attribute type 25 has an invalid length.
[  624.643794][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.650193][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  626.700737][T16360] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3113'.
[  626.830625][T16362] delete_channel: no stack
[  626.917808][T16365] netlink: 'syz.2.3115': attribute type 29 has an invalid length.
[  626.946714][T16365] netlink: 'syz.2.3115': attribute type 29 has an invalid length.
[  626.965149][T16368] netlink: 'syz.2.3115': attribute type 29 has an invalid length.
[  626.976055][T16365] netlink: 'syz.2.3115': attribute type 29 has an invalid length.
[  626.990627][T16365] netlink: 'syz.2.3115': attribute type 29 has an invalid length.
[  627.071944][T16371] netlink: 'syz.3.3116': attribute type 25 has an invalid length.
[  627.393270][T16385] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.3121'.
[  627.502326][T16388] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3123'.
[  627.957447][T16408] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3125'.
[  628.289151][T16420] validate_nla: 6 callbacks suppressed
[  628.289170][T16420] netlink: 'syz.0.3128': attribute type 25 has an invalid length.
[  628.313877][T16420] netlink: 'syz.0.3128': attribute type 25 has an invalid length.
[  629.586014][T16434] netlink: 'syz.0.3142': attribute type 153 has an invalid length.
[  629.609263][T16434] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3142'.
[  629.692905][T16434] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3142'.
[  630.090757][T16454] netlink: 'syz.0.3137': attribute type 25 has an invalid length.
[  630.099561][T16454] netlink: 'syz.0.3137': attribute type 25 has an invalid length.
[  630.425040][T16463] netlink: 'syz.3.3141': attribute type 25 has an invalid length.
[  630.433520][T16463] netlink: 'syz.3.3141': attribute type 25 has an invalid length.
[  630.546240][T16465] netlink: 'syz.3.3143': attribute type 21 has an invalid length.
[  630.562688][T16465] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3143'.
[  631.140231][T16481] netlink: 'syz.2.3147': attribute type 153 has an invalid length.
[  631.148507][T16481] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3147'.
[  631.179704][T16481] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3147'.
[  631.291225][T16485] netlink: 'syz.0.3155': attribute type 25 has an invalid length.
[  631.457327][T16489] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3150'.
[  631.471875][T16489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  631.861725][T16516] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3158'.
[  632.014556][T16518] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3159'.
[  632.059379][T16518] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3159'.
[  632.378758][T16534] netlink: 181424 bytes leftover after parsing attributes in process `syz.3.3162'.
[  633.707530][T16562] validate_nla: 7 callbacks suppressed
[  633.707549][T16562] netlink: 'syz.0.3169': attribute type 25 has an invalid length.
[  633.733263][T16562] netlink: 'syz.0.3169': attribute type 25 has an invalid length.
[  633.766553][T16561] tap0: tun_chr_ioctl cmd 35111
[  634.119137][T16571] netlink: 'syz.2.3174': attribute type 25 has an invalid length.
[  634.127469][T16571] netlink: 'syz.2.3174': attribute type 25 has an invalid length.
[  635.167294][T16600] __nla_validate_parse: 1 callbacks suppressed
[  635.167314][T16600] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3183'.
[  635.233098][T16600] bridge: RTM_NEWNEIGH with invalid state 0x1
[  635.385183][T16611] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.3186'.
[  635.485254][T16615] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3188'.
[  635.526277][T16617] netlink: 'syz.2.3185': attribute type 25 has an invalid length.
[  635.548058][T16617] netlink: 'syz.2.3185': attribute type 25 has an invalid length.
[  635.650595][T16625] netlink: 'syz.3.3190': attribute type 25 has an invalid length.
[  635.660634][T16625] netlink: 'syz.3.3190': attribute type 25 has an invalid length.
[  636.772708][T16641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3197'.
[  636.814409][T16643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3197'.
[  639.078062][T16658] netlink: 'syz.1.3200': attribute type 25 has an invalid length.
[  639.086337][T16658] netlink: 'syz.1.3200': attribute type 25 has an invalid length.
[  639.094970][T16661] netlink: 'syz.3.3203': attribute type 25 has an invalid length.
[  639.102828][T16661] netlink: 'syz.3.3203': attribute type 25 has an invalid length.
[  639.123711][T16673] netlink: 'syz.0.3206': attribute type 12 has an invalid length.
[  639.132021][T16673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3206'.
[  639.252384][T16676] sock: sock_timestamping_bind_phc: sock not bind to device
[  639.754517][T16690] netlink: 'syz.1.3211': attribute type 1 has an invalid length.
[  639.762342][T16690] netlink: 133492 bytes leftover after parsing attributes in process `syz.1.3211'.
[  640.262784][T16702] netlink: 'syz.0.3216': attribute type 25 has an invalid length.
[  640.279593][T16702] netlink: 'syz.0.3216': attribute type 25 has an invalid length.
[  640.391157][T16706] netlink: 'syz.1.3215': attribute type 25 has an invalid length.
[  640.407045][T16706] netlink: 'syz.1.3215': attribute type 25 has an invalid length.
[  640.683530][T16712] sctp: [Deprecated]: syz.3.3219 (pid 16712) Use of int in maxseg socket option.
[  640.683530][T16712] Use struct sctp_assoc_value instead
[  641.169706][T16724] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode
[  641.367151][T16728] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3225'.
[  641.417443][T16729] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3222'.
[  641.464964][T16729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  641.893696][T16738] macvlan0: entered promiscuous mode
[  641.899226][T16738] macvlan0: entered allmulticast mode
[  641.922711][T16738] veth1_vlan: entered allmulticast mode
[  641.948282][T16738] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  642.286141][T16744] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3230'.
[  643.333991][T16771] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3239'.
[  643.363717][T16771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  643.383197][T16773] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3241'.
[  643.404474][T16773] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  643.430868][T16773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3241'.
[  644.834579][T16811] validate_nla: 5 callbacks suppressed
[  644.834710][T16811] netlink: 'syz.3.3251': attribute type 25 has an invalid length.
[  644.853481][T16811] netlink: 'syz.3.3251': attribute type 25 has an invalid length.
[  645.052025][T16809] netlink: 'syz.2.3252': attribute type 2 has an invalid length.
[  645.060911][T16809] netlink: 'syz.2.3252': attribute type 8 has an invalid length.
[  645.075654][T16809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3252'.
[  645.418921][T16822] netlink: 'syz.2.3256': attribute type 4 has an invalid length.
[  645.434441][T16822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3256'.
[  645.546502][T16819] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3255'.
[  646.600928][T16863] netlink: 'syz.2.3268': attribute type 25 has an invalid length.
[  646.616116][T16863] netlink: 'syz.2.3268': attribute type 25 has an invalid length.
[  646.884190][T16867] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3269'.
[  647.052233][T16876] netlink: 'syz.0.3272': attribute type 10 has an invalid length.
[  647.060346][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3272'.
[  647.077871][T16876] batman_adv: batadv0: Adding interface: veth0_vlan
[  647.084789][T16876] batman_adv: batadv0: Interface activated: veth0_vlan
[  648.134688][T16897] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3276'.
[  648.153330][T16897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  649.538173][T16937] netlink: 'syz.0.3286': attribute type 25 has an invalid length.
[  649.546252][T16937] netlink: 'syz.0.3286': attribute type 25 has an invalid length.
[  650.686272][T16953] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3294'.
[  650.706353][T16953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.802834][T16956] validate_nla: 1 callbacks suppressed
[  650.802886][T16956] netlink: 'syz.2.3295': attribute type 29 has an invalid length.
[  650.828365][T16956] netlink: 'syz.2.3295': attribute type 29 has an invalid length.
[  650.847774][T16957] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3295'.
[  650.859291][T16956] netlink: 'syz.2.3295': attribute type 29 has an invalid length.
[  650.879879][T16960] netlink: 'syz.0.3296': attribute type 21 has an invalid length.
[  650.897852][T16960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3296'.
[  650.928337][T16960] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3296'.
[  651.561080][T16979] netlink: 'syz.2.3300': attribute type 25 has an invalid length.
[  651.593769][T16979] netlink: 'syz.2.3300': attribute type 25 has an invalid length.
[  651.946100][T16977] netlink: 'syz.3.3302': attribute type 25 has an invalid length.
[  651.987604][T16977] netlink: 'syz.3.3302': attribute type 3 has an invalid length.
[  652.010346][T16977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3302'.
[  652.601924][T16992] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3306'.
[  653.526489][T17012] netlink: 'syz.0.3312': attribute type 25 has an invalid length.
[  653.534521][T17012] netlink: 'syz.0.3312': attribute type 25 has an invalid length.
[  653.624726][T17004] syz.3.3308 (17004) used greatest stack depth: 17832 bytes left
[  655.056756][T17042] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3323'.
[  655.590625][T17051] tap0: tun_chr_ioctl cmd 1074025677
[  655.596518][T17051] tap0: linktype set to 1
[  655.642698][T17051] syzkaller0: entered promiscuous mode
[  655.671488][T17051] syzkaller0: entered allmulticast mode
[  655.729012][T17051] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3326'.
[  656.658805][T17061] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.3330'.
[  657.209612][T17093] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3340'.
[  658.189510][ T5084] Bluetooth: hci1: ISO packet for unknown connection handle 8
[  659.686781][T17113] validate_nla: 6 callbacks suppressed
[  659.686799][T17113] netlink: 'syz.3.3344': attribute type 2 has an invalid length.
[  659.704273][T17113] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3344'.
[  659.888575][T17130] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3350'.
[  660.671431][T17157] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3360'.
[  660.989659][T17162] netlink: 'syz.1.3362': attribute type 27 has an invalid length.
[  661.232497][T17169] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.3364'.
[  661.253522][T17169] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3364'.
[  661.353561][T17177] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3369'.
[  662.059402][T17190] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3373'.
[  662.295572][T17206] netlink: 'syz.0.3378': attribute type 25 has an invalid length.
[  662.315384][T17206] netlink: 'syz.0.3378': attribute type 25 has an invalid length.
[  662.454762][T17208] batadv0: left allmulticast mode
[  662.460337][T17208] batadv0: left promiscuous mode
[  662.470768][T17208] bridge0: port 3(batadv0) entered disabled state
[  662.486533][T17208] bridge_slave_1: left allmulticast mode
[  662.497777][T17208] bridge_slave_1: left promiscuous mode
[  662.506101][T17208] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.527911][T17208] bridge_slave_0: left allmulticast mode
[  662.537403][T17208] bridge_slave_0: left promiscuous mode
[  662.546888][T17208] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.696375][T17238] netlink: 'syz.0.3388': attribute type 3 has an invalid length.
[  663.709216][T17238] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3388'.
[  664.161717][T17249] netlink: 'syz.1.3394': attribute type 25 has an invalid length.
[  664.183163][T17249] netlink: 'syz.1.3394': attribute type 25 has an invalid length.
[  665.046383][T17263] batadv0: left allmulticast mode
[  665.051553][T17263] batadv0: left promiscuous mode
[  665.081675][T17263] bridge0: port 3(batadv0) entered disabled state
[  665.115426][T17263] bridge_slave_1: left allmulticast mode
[  665.121192][T17263] bridge_slave_1: left promiscuous mode
[  665.134256][T17263] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.215753][T17263] bridge_slave_0: left allmulticast mode
[  665.228580][T17263] bridge_slave_0: left promiscuous mode
[  665.235230][T17263] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.882275][T17270] netlink: 'syz.0.3403': attribute type 1 has an invalid length.
[  666.314165][T17292] IPv6: Can't replace route, no match found
[  666.920140][T17316] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3411'.
[  666.948342][T17316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  667.311264][T17323] syzkaller0: entered promiscuous mode
[  667.325866][T17323] syzkaller0: entered allmulticast mode
[  667.335333][T17325] netlink: 'syz.2.3415': attribute type 29 has an invalid length.
[  667.351995][T17325] netlink: 'syz.2.3415': attribute type 29 has an invalid length.
[  667.366968][T17325] netlink: 'syz.2.3415': attribute type 29 has an invalid length.
[  667.789736][T17334] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3417'.
[  667.803940][T17334] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3417'.
[  668.392159][T17368] netlink: 'syz.1.3430': attribute type 29 has an invalid length.
[  668.401029][T17368] netlink: 'syz.1.3430': attribute type 29 has an invalid length.
[  668.638227][T17384] netlink: 'syz.0.3433': attribute type 21 has an invalid length.
[  668.651629][T17384] netlink: 'syz.0.3433': attribute type 6 has an invalid length.
[  668.666814][T17384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3433'.
[  669.033891][T17393] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  669.047888][T17393] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode
[  669.460173][T17401] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3437'.
[  669.889716][T17416] ==================================================================
[  669.897950][T17416] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900
[  669.905919][T17416] Write of size 72 at addr ffff88807b1f6190 by task syz.2.3444/17416
[  669.914060][T17416] 
[  669.916528][T17416] CPU: 1 PID: 17416 Comm: syz.2.3444 Not tainted syzkaller #0
[  669.924051][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  669.934145][T17416] Call Trace:
[  669.937458][T17416]  <TASK>
[  669.940409][T17416]  dump_stack_lvl+0x18c/0x250
[  669.945134][T17416]  ? read_lock_is_recursive+0x20/0x20
[  669.950542][T17416]  ? show_regs_print_info+0x20/0x20
[  669.955773][T17416]  ? load_image+0x420/0x420
[  669.960312][T17416]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  669.965906][T17416]  ? __virt_addr_valid+0x10c/0x380
[  669.971075][T17416]  ? __virt_addr_valid+0x10c/0x380
[  669.976216][T17416]  ? __virt_addr_valid+0x10c/0x380
[  669.981369][T17416]  print_report+0xa8/0x210
[  669.985829][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  669.990972][T17416]  kasan_report+0x117/0x150
[  669.995513][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.000686][T17416]  kasan_check_range+0x241/0x290
[  670.005650][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.010787][T17416]  __asan_memcpy+0x40/0x70
[  670.015244][T17416]  __bpf_get_stackid+0x6c7/0x900
[  670.020220][T17416]  bpf_get_stackid_pe+0x343/0x410
[  670.025280][T17416]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  670.030779][T17416]  bpf_overflow_handler+0x1fc/0x510
[  670.036014][T17416]  ? perf_prepare_header+0x1e0/0x1e0
[  670.041333][T17416]  ? bpf_overflow_handler+0xde/0x510
[  670.046652][T17416]  ? tp_perf_event_destroy+0x20/0x20
[  670.051973][T17416]  ? __perf_event_account_interrupt+0x187/0x280
[  670.058242][T17416]  __perf_event_overflow+0x461/0x660
[  670.063562][T17416]  perf_swevent_event+0x319/0x570
[  670.068614][T17416]  ? perf_tp_event+0x1550/0x1550
[  670.073584][T17416]  ___perf_sw_event+0x4ab/0x730
[  670.078463][T17416]  ? ___perf_sw_event+0x19e/0x730
[  670.083513][T17416]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  670.089962][T17416]  ? __lock_acquire+0x1336/0x7d80
[  670.095016][T17416]  ? rep_movs_alternative+0x4a/0x90
[  670.100259][T17416]  ? verify_lock_unused+0x140/0x140
[  670.105489][T17416]  ? kasan_set_track+0x5f/0x70
[  670.110308][T17416]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  670.116314][T17416]  ? do_syscall_64+0x55/0xb0
[  670.120952][T17416]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.127044][T17416]  ? lock_chain_count+0x20/0x20
[  670.131923][T17416]  __perf_sw_event+0x139/0x270
[  670.136718][T17416]  do_user_addr_fault+0x1242/0x12d0
[  670.141954][T17416]  ? rcu_is_watching+0x15/0xb0
[  670.146759][T17416]  exc_page_fault+0x64/0x100
[  670.151383][T17416]  asm_exc_page_fault+0x26/0x30
[  670.156261][T17416] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  670.162122][T17416] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  670.181765][T17416] RSP: 0018:ffffc9001058fbd0 EFLAGS: 00050206
[  670.187865][T17416] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 00000000000004ed
[  670.195862][T17416] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880266be080
[  670.203859][T17416] RBP: ffffc9001058fd20 R08: 0000000000000004 R09: 0000000000000005
[  670.211861][T17416] R10: dffffc0000000000 R11: ffffed1004cd7cad R12: 00002000000024ed
[  670.219857][T17416] R13: 1ffff920020b1fbd R14: ffff8880266be000 R15: 0000200000001f80
[  670.227897][T17416]  ? rcuref_put_slowpath+0x101/0x150
[  670.233217][T17416]  _copy_from_user+0x8b/0xe0
[  670.237834][T17416]  generic_map_update_batch+0x58c/0x800
[  670.243417][T17416]  ? rcu_read_unlock+0xa0/0xa0
[  670.248228][T17416]  ? __fdget+0x180/0x210
[  670.252500][T17416]  ? rcu_read_unlock+0xa0/0xa0
[  670.257289][T17416]  bpf_map_do_batch+0x3f2/0x600
[  670.262168][T17416]  ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10
[  670.268701][T17416]  __sys_bpf+0x381/0x890
[  670.272975][T17416]  ? bpf_link_show_fdinfo+0x390/0x390
[  670.278383][T17416]  ? lock_chain_count+0x20/0x20
[  670.283266][T17416]  __x64_sys_bpf+0x7c/0x90
[  670.287712][T17416]  do_syscall_64+0x55/0xb0
[  670.292164][T17416]  ? clear_bhb_loop+0x40/0x90
[  670.296872][T17416]  ? clear_bhb_loop+0x40/0x90
[  670.301591][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.307524][T17416] RIP: 0033:0x7f909939e0d9
[  670.311971][T17416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.331605][T17416] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  670.340050][T17416] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  670.348048][T17416] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  670.356045][T17416] RBP: 00007f9099435024 R08: 0000000000000000 R09: 0000000000000000
[  670.364079][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.372071][T17416] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  670.380079][T17416]  </TASK>
[  670.383146][T17416] 
[  670.385489][T17416] Allocated by task 17416:
[  670.390014][T17416]  kasan_set_track+0x4e/0x70
[  670.394667][T17416]  __kasan_kmalloc+0x8f/0xa0
[  670.399286][T17416]  __kmalloc_node+0xb6/0x240
[  670.403924][T17416]  bpf_map_area_alloc+0x5e/0x110
[  670.408895][T17416]  prealloc_elems_and_freelist+0x86/0x1c0
[  670.414650][T17416]  stack_map_alloc+0x32b/0x4b0
[  670.419447][T17416]  map_create+0x877/0x12f0
[  670.423882][T17416]  __sys_bpf+0x651/0x890
[  670.428144][T17416]  __x64_sys_bpf+0x7c/0x90
[  670.432582][T17416]  do_syscall_64+0x55/0xb0
[  670.437029][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.442947][T17416] 
[  670.445295][T17416] The buggy address belongs to the object at ffff88807b1f6180
[  670.445295][T17416]  which belongs to the cache kmalloc-cg-64 of size 64
[  670.459547][T17416] The buggy address is located 16 bytes inside of
[  670.459547][T17416]  allocated 40-byte region [ffff88807b1f6180, ffff88807b1f61a8)
[  670.473621][T17416] 
[  670.475961][T17416] The buggy address belongs to the physical page:
[  670.482467][T17416] page:ffffea0001ec7d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b1f6
[  670.492643][T17416] memcg:ffff888078043601
[  670.496901][T17416] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  670.504477][T17416] page_type: 0xffffffff()
[  670.508850][T17416] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000
[  670.517548][T17416] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888078043601
[  670.526186][T17416] page dumped because: kasan: bad access detected
[  670.532643][T17416] page_owner tracks the page as allocated
[  670.538398][T17416] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 14066, tgid 14066 (syz-executor), ts 669672799647, free_ts 669672162990
[  670.557041][T17416]  post_alloc_hook+0x1c1/0x200
[  670.561860][T17416]  get_page_from_freelist+0x2181/0x22a0
[  670.567533][T17416]  __alloc_pages+0x1f0/0x460
[  670.572154][T17416]  alloc_slab_page+0x5d/0x180
[  670.576857][T17416]  new_slab+0x87/0x2d0
[  670.580948][T17416]  ___slab_alloc+0xc5c/0x12f0
[  670.585652][T17416]  __kmem_cache_alloc_node+0x11f/0x250
[  670.591164][T17416]  kmalloc_trace+0x2a/0xe0
[  670.595614][T17416]  alloc_fdtable+0xca/0x2c0
[  670.600149][T17416]  dup_fd+0x747/0xa20
[  670.604195][T17416]  copy_files+0xaf/0x110
[  670.608470][T17416]  copy_process+0x157d/0x3da0
[  670.613197][T17416]  kernel_clone+0x24b/0x8a0
[  670.617725][T17416]  __x64_sys_clone+0x1b7/0x230
[  670.622602][T17416]  do_syscall_64+0x55/0xb0
[  670.627070][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.632990][T17416] page last free stack trace:
[  670.637679][T17416]  free_unref_page_prepare+0x7d7/0x8f0
[  670.643163][T17416]  free_unref_page+0x32/0x2e0
[  670.647859][T17416]  vfree+0x1a7/0x340
[  670.651784][T17416]  __do_replace+0x878/0x9b0
[  670.656430][T17416]  do_ip6t_set_ctl+0xb41/0xe10
[  670.661243][T17416]  nf_setsockopt+0x263/0x280
[  670.666103][T17416]  do_sock_setsockopt+0x175/0x1a0
[  670.671155][T17416]  __x64_sys_setsockopt+0x182/0x200
[  670.676491][T17416]  do_syscall_64+0x55/0xb0
[  670.680948][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.686865][T17416] 
[  670.689202][T17416] Memory state around the buggy address:
[  670.694952][T17416]  ffff88807b1f6080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  670.703033][T17416]  ffff88807b1f6100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[  670.711116][T17416] >ffff88807b1f6180: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  670.719194][T17416]                                   ^
[  670.724584][T17416]  ffff88807b1f6200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.732662][T17416]  ffff88807b1f6280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  670.740743][T17416] ==================================================================
[  670.748838][T17416] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  670.756075][T17416] CPU: 1 PID: 17416 Comm: syz.2.3444 Not tainted syzkaller #0
[  670.763550][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  670.773626][T17416] Call Trace:
[  670.776929][T17416]  <TASK>
[  670.779909][T17416]  dump_stack_lvl+0x18c/0x250
[  670.784616][T17416]  ? show_regs_print_info+0x20/0x20
[  670.789837][T17416]  ? load_image+0x420/0x420
[  670.794393][T17416]  panic+0x2ca/0x720
[  670.798337][T17416]  ? __lock_acquire+0x7d80/0x7d80
[  670.803400][T17416]  ? bpf_jit_dump+0xd0/0xd0
[  670.807970][T17416]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  670.813927][T17416]  ? _raw_spin_unlock+0x40/0x40
[  670.818833][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.823975][T17416]  check_panic_on_warn+0x84/0xa0
[  670.828946][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.834122][T17416]  end_report+0x6f/0x130
[  670.838403][T17416]  kasan_report+0x128/0x150
[  670.842935][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.848079][T17416]  kasan_check_range+0x241/0x290
[  670.853050][T17416]  ? __bpf_get_stackid+0x6c7/0x900
[  670.858203][T17416]  __asan_memcpy+0x40/0x70
[  670.862649][T17416]  __bpf_get_stackid+0x6c7/0x900
[  670.867621][T17416]  bpf_get_stackid_pe+0x343/0x410
[  670.872679][T17416]  bpf_prog_a448e89f4c9ad9d1+0x30/0x4a
[  670.878169][T17416]  bpf_overflow_handler+0x1fc/0x510
[  670.883400][T17416]  ? perf_prepare_header+0x1e0/0x1e0
[  670.888736][T17416]  ? bpf_overflow_handler+0xde/0x510
[  670.894056][T17416]  ? tp_perf_event_destroy+0x20/0x20
[  670.899987][T17416]  ? __perf_event_account_interrupt+0x187/0x280
[  670.906257][T17416]  __perf_event_overflow+0x461/0x660
[  670.911576][T17416]  perf_swevent_event+0x319/0x570
[  670.916652][T17416]  ? perf_tp_event+0x1550/0x1550
[  670.921618][T17416]  ___perf_sw_event+0x4ab/0x730
[  670.926498][T17416]  ? ___perf_sw_event+0x19e/0x730
[  670.931554][T17416]  ? perf_swevent_put_recursion_context+0xb0/0xb0
[  670.937999][T17416]  ? __lock_acquire+0x1336/0x7d80
[  670.943056][T17416]  ? rep_movs_alternative+0x4a/0x90
[  670.948296][T17416]  ? verify_lock_unused+0x140/0x140
[  670.953521][T17416]  ? kasan_set_track+0x5f/0x70
[  670.958318][T17416]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  670.964322][T17416]  ? do_syscall_64+0x55/0xb0
[  670.968935][T17416]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  670.975026][T17416]  ? lock_chain_count+0x20/0x20
[  670.979904][T17416]  __perf_sw_event+0x139/0x270
[  670.984711][T17416]  do_user_addr_fault+0x1242/0x12d0
[  670.989943][T17416]  ? rcu_is_watching+0x15/0xb0
[  670.994742][T17416]  exc_page_fault+0x64/0x100
[  670.999361][T17416]  asm_exc_page_fault+0x26/0x30
[  671.004239][T17416] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  671.010076][T17416] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  671.029713][T17416] RSP: 0018:ffffc9001058fbd0 EFLAGS: 00050206
[  671.035811][T17416] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 00000000000004ed
[  671.043807][T17416] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880266be080
[  671.051820][T17416] RBP: ffffc9001058fd20 R08: 0000000000000004 R09: 0000000000000005
[  671.059817][T17416] R10: dffffc0000000000 R11: ffffed1004cd7cad R12: 00002000000024ed
[  671.067810][T17416] R13: 1ffff920020b1fbd R14: ffff8880266be000 R15: 0000200000001f80
[  671.075811][T17416]  ? rcuref_put_slowpath+0x101/0x150
[  671.081137][T17416]  _copy_from_user+0x8b/0xe0
[  671.085751][T17416]  generic_map_update_batch+0x58c/0x800
[  671.091350][T17416]  ? rcu_read_unlock+0xa0/0xa0
[  671.096143][T17416]  ? __fdget+0x180/0x210
[  671.100422][T17416]  ? rcu_read_unlock+0xa0/0xa0
[  671.105211][T17416]  bpf_map_do_batch+0x3f2/0x600
[  671.110092][T17416]  ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10
[  671.116657][T17416]  __sys_bpf+0x381/0x890
[  671.120929][T17416]  ? bpf_link_show_fdinfo+0x390/0x390
[  671.126336][T17416]  ? lock_chain_count+0x20/0x20
[  671.131220][T17416]  __x64_sys_bpf+0x7c/0x90
[  671.135662][T17416]  do_syscall_64+0x55/0xb0
[  671.140104][T17416]  ? clear_bhb_loop+0x40/0x90
[  671.146213][T17416]  ? clear_bhb_loop+0x40/0x90
[  671.150916][T17416]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  671.156856][T17416] RIP: 0033:0x7f909939e0d9
[  671.161293][T17416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  671.180927][T17416] RSP: 002b:00007f909a1e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  671.189381][T17416] RAX: ffffffffffffffda RBX: 00007f9099625fa0 RCX: 00007f909939e0d9
[  671.197404][T17416] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a
[  671.205400][T17416] RBP: 00007f9099435024 R08: 0000000000000000 R09: 0000000000000000
[  671.213397][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  671.221394][T17416] R13: 00007f9099626038 R14: 00007f9099625fa0 R15: 00007fff8c20e0b8
[  671.229399][T17416]  </TASK>
[  671.233028][T17416] Kernel Offset: disabled
[  671.237392][T17416] Rebooting in 86400 seconds..